Edit tour

Windows Analysis Report
SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Overview

General Information

Sample name:	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe
Analysis ID:	1532384
MD5:	f2697e68f50ea7ed7ac3346dc515e0bd
SHA1:	36cedbb9da2d6651103f4731dbdf4b4e390372ec
SHA256:	03ab93bff6a8c0e77bec98d89ffde3973edb4af0cbbe576741ba03abffba7ae9
Tags:	exe
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Machine Learning detection for sample

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Enables debug privileges

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe (PID: 7256 cmdline: "C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe" MD5: F2697E68F50EA7ED7AC3346DC515E0BD)

chrome.exe (PID: 7616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.yishimei.cn/network/319.html?=23:28:29 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2008,i,3068019957751357711,9581699129498719414,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 792 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://weixin.qq.com/r/iz8qMuHEDbxyraVR92qZ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5756 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=2012,i,3075348156008277268,14418062507845200439,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /v6/collect?dt=4 HTTP/1.1Host: collect-v6.51.laConnection: keep-aliveContent-Length: 504User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Origin: http://www.yishimei.cnReferer: http://www.yishimei.cn/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Data Raw: 1f 8b 08 00 6d 3e 0b 67 00 03 5d 52 5d 6b d4 40 14 fd 2b 21 8f 62 36 99 49 d2 24 0b e2 8b 2f ad 96 0a d5 8a e2 4b 4c 32 dd b8 db 64 9b 8f 0d 45 94 45 0a 6a 5b 57 aa 2b ba 1a 14 1f d4 05 a1 15 ac a8 59 db fe 18 93 4c 7d f2 2f 38 37 d9 96 d2 87 4c ee 9c 7b ee 39 77 66 ee 3d de b5 f9 26 c7 cf 5d e9 ad de bc b5 b0 b4 36 33 b7 3a 3f db 55 f8 f3 1c 1f 44 2c 83 34 ac 6b 86 84 b0 aa 48 12 03 23 00 f9 cb f3 8b 45 3a a6 d9 61 79 d8 2f f7 26 37 5c 0f 21 4e e4 90 c4 16 9d 7d 5a f1 7c 6b 81 10 d7 72 d8 66 c9 0d 5d 9f fd af 06 fe 5d c7 8a 38 2c 61 e5 01 96 90 94 ff da bc 14 98 cb be c7 e4 e8 c7 77 7f 0f 46 f4 c9 63 81 ee 6f d3 49 5a be 1c d1 f1 66 fe 73 50 6e f4 cb 74 f7 b6 27 e4 d9 a7 f2 f5 2e 3d 18 d4 04 e8 b0 9d 40 33 74 f8 fd 68 7d bb 7c f1 34 df 4f 8b af cf 58 41 f1 e3 f3 bf df 5b 47 3b 1f e8 ce ab 32 cd 6a 09 a6 45 bf 4d e8 e4 7d 91 0d e9 70 cc 08 53 a7 2a 5b fb 81 a8 1d 82 e8 19 37 90 7b b4 57 6c bc cd b3 41 ed 74 5a 8b 49 9f 98 9d 16 a5 6f d6 67 af 01 f0 65 f4 a7 ff 10 c4 c3 fa ba 65 43 35 74 4b b3 05 82 a5 19 41 b5 b1 2c 18 88 d8 6c 51 10 c1 c4 94 09 31 81 6e c5 c0 6e 45 51 b7 29 8a 49 92 34 d6 dc b0 e5 ae 38 6e c3 f2 44 cf 89 12 3f 68 8b 32 32 1a ad 68 a5 73 f1 02 96 9b 58 6f 62 03 4a bb 55 69 f5 8e 1d 88 10 d6 a5 73 88 5d 3d 40 1d d3 5b 06 d0 f1 84 eb 8b 95 51 f5 ac b1 d7 f6 fc a4 ea b3 07 7d 22 c8 38 c7 01 20 58 81 64 35 04 30 0d 76 30 0d e2 5e 68 4d 79 71 7d 44 b0 52 75 cd 12 14 c5 d1 04 d5 d2 2d 41 d7 0d 53 50 1d ed 8e 4a 54 cb 50 55 07 9c 62 72 76 cc 8c fb ff 01 a6 63 28 e9 96 02 00 00 Data Ascii: m>g]R]k@+!b6I$/KL2dEEj[W+YL}/87L{9wf=&]63:?UD,4kH#E:ay/&7\!N}Z|krf]]8,awFcoIZfsPnt'.=@3th}|4OXA[G;2jEM}pS*[7{WlAtZIogeeC5tKA,lQ1nnEQ)I48nD?h22hsXobJUis]=@[Q}"8 Xd50v0^hMyq}DRu-ASPJTPUbrvc(

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Length: 1780Content-Type: text/htmlServer: Microsoft-IIS/6.0X-Powered-By: ASP.NETDate: Sun, 13 Oct 2024 03:28:52 GMTData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e e6 82 a8 e6 89 80 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e5 8f af e8 83 bd e5 b7 b2 e7 bb 8f e8 a2 ab e5 88 a0 e9 99 a4 20 2d 20 e4 ba a6 e6 98 af e7 be 8e e7 bd 91 e7 bb 9c 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 34 30 34 e9 94 99 e8 af af 22 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 42 4f 44 59 20 7b 20 4d 41 52 47 49 4e 3a 20 30 70 78 3b 20 42 41 43 4b 47 52 4f 55 4e 44 2d 43 4f 4c 4f 52 3a 20 23 30 30 30 30 30 30 20 7d 20 42 4f 44 59 20 7b 20 43 4f 4c 4f 52 3a 20 23 66 66 66 66 66 66 3b 20 46 4f 4e 54 2d 46 41 4d 49 4c 59 3a 20 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 68 74 74 70 3a 2f 2f 77 77 77 2e 79 69 73 68 69 6d 65 69 2e 63 6e 2f 69 6d 61 67 65 2f 34 30 34 62 67 2e 6a 70 67 29 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 72 65 70 65 61 74 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 44 39 44 39 44 39 3b 20 7d 20 54 44 20 7b 20 43 4f 4c 4f 52 3a 20 23 66 66 66 66 66 66 3b 20 46 4f 4e 54 2d 46 41 4d 49 4c 59 3a 20 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 7d 20 54 48 20 7b 20 43 4f 4c 4f 52 3a 20 23 66 66 66 66 66 66 3b 20 46 4f 4e 54 2d 46 41 4d 49 4c 59 3a 20 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 7d 20 0a 0a 2e 73 74 79 6c 65 36 20 7b 20 46 4f 4e 54 2d 57 45 49 47 48 54 3a 20 62 6f 6c 64 3b 20 46 4f 4e 54 2d 53 49 5a 45 3a 20 31 32 70 78 20 7d 20 0a 2e 73 74 79 6c 65 37 20 7b 20 46 4f 4e 54 2d 53 49 5a 45 3a 20 31 38 70 78 20 7d 20 0a 2e 73 74 79 6c 65 38 20 7b 20 46 4f 4e 54 2d 53 49 5a 45 3a 20 38 70 78 20 7d 20 0a 2e 73 74 79 6c 65 39 20 7b 20 46 4f 4e 54 2d 53 49 5a 45 3a 20 32 34 70 78 3b 20 46 4f 4e 54 2d 46 41 4d 49 4c 59 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 22 20 7d 20 0a 2e 73 74 79 6c 65 31 30 20 7b 20 46 4f 4e 54 2d 53 49 5a 45 3a 20 33 30 70 78 3b 20 46 4f 4e 54 2d 46 41 4d 49 4c 59 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 22 3b 43 4f 4c 4f 52 3a 20 23 66 66 30 30 30 30 20 7d 20 0a 0a 62 6f 64 79 2c 74 64 2c 74 68 20 7b 20 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 20 7d 20 61 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61

Source: chromecache_88.5.dr	String found in binary or memory: http://help.wechat.com/oshelpcenter/?lang=en&Channel=helpcenter
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: chromecache_118.5.dr	String found in binary or memory: http://wechat.com/cgi-bin/readtemplate?t=market_redirect
Source: chromecache_118.5.dr	String found in binary or memory: http://weixin.qq.com/cgi-bin/readtemplate?check=false&t=weixin_getdownurl_sms&s=download&from=100&st
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.carterandcone.coml
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/?
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/cabarga.htmlN
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers/frere-user.html
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers8
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designers?
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fontbureau.com/designersG
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.fonts.com
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/bThe
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.founder.com.cn/cn/cThe
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.galapagosdesign.com/DPlease
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.galapagosdesign.com/staff/dennis.htm
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.goodfont.co.kr
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.jiyu-kobo.co.jp/
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sajatypeworks.com
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sakkal.com
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.sandoll.co.kr
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.tiro.com
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.typography.netD
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.urwpp.deDPlease
Source: chromecache_88.5.dr	String found in binary or memory: http://www.wechat.com
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002E10000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002E0A000.00000004.00000800.00020000.00000000.sdmp, chromecache_119.5.dr	String found in binary or memory: http://www.yishimei.cn
Source: chromecache_119.5.dr	String found in binary or memory: http://www.yishimei.cn/
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002E10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/computer/144.html
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/computer/144.html?=
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/computer/144.html?=)http://www.yishimei.cn/network/290.html?=)http://www.yish
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/computer/144.html?=23:28:29
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/computer/144.html?=H
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/computer/54.html
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/go/DragonKMS/DragonKMS.html
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/go/soft_list.txt?=
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/go/soft_list.txt?=638643725093481074
Source: chromecache_119.5.dr	String found in binary or memory: http://www.yishimei.cn/image/404bg.jpg);
Source: chromecache_119.5.dr	String found in binary or memory: http://www.yishimei.cn/image/404home.png
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/290.html?=
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/290.html?=23:28:29
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020348276.000000001DB80000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020276603.000000001DB67000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=23:28:29
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=23:28:29%
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020348276.000000001DB80000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=23:28:29)
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020276603.000000001DB67000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=23:28:29I
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=23:28:29R)
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020348276.000000001DB80000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=23:28:29S
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020348276.000000001DB80000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=23:28:29V
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020348276.000000001DB80000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=23:28:29d
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=23:28:29h
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020276603.000000001DB67000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=23:28:29pE
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020348276.000000001DB80000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=23:28:29s
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=23:28:29tCookiesw
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/319.html?=23:28:29z
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/897.html
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/network/897.html)http://www.yishimei.cn/go/soft_list.txt?=
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.yishimei.cn/software/634.html
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.zhongyicts.com.cn
Source: chromecache_88.5.dr	String found in binary or memory: https://apps.apple.com/us/app/wechat/id836500024
Source: chromecache_88.5.dr	String found in binary or memory: https://itunes.apple.com/us/app/wechat/id414478124?mt=8
Source: chromecache_92.5.dr, chromecache_134.5.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_92.5.dr, chromecache_134.5.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_92.5.dr, chromecache_134.5.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_88.5.dr	String found in binary or memory: https://newres.wechat.com/t/fed_upload/08b92997-2415-408f-b706-442ed4ede518/OTE0YTAw.png
Source: chromecache_88.5.dr	String found in binary or memory: https://newres.wechat.com/t/fed_upload/25d133b0-63d9-4102-857c-5cc84c752232/NTI4MWU5.ico
Source: chromecache_88.5.dr	String found in binary or memory: https://newres.wechat.com/t/fed_upload/fdf269b2-1de3-4bb9-95c5-00150433b7f1/MjliNWVm.svg
Source: chromecache_88.5.dr	String found in binary or memory: https://open.weixin.qq.com
Source: chromecache_88.5.dr	String found in binary or memory: https://pay.wechat.com/en_my/index.html
Source: chromecache_88.5.dr	String found in binary or memory: https://pay.wechat.com/zh_hk/index.shtml
Source: chromecache_88.5.dr	String found in binary or memory: https://pay.weixin.qq.com/index.php/public/wechatpay/home
Source: chromecache_88.5.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.tencent.mm&referrer=utm_source%3Dwechat.com%26utm_
Source: chromecache_88.5.dr	String found in binary or memory: https://safety.wechat.com
Source: chromecache_92.5.dr, chromecache_134.5.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_88.5.dr	String found in binary or memory: https://weixin.qq.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49915 version: TLS 1.2

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Code function: 0_2_00007FFD9B620568	0_2_00007FFD9B620568
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Code function: 0_2_00007FFD9B626C4E	0_2_00007FFD9B626C4E
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Code function: 0_2_00007FFD9B62089D	0_2_00007FFD9B62089D
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Code function: 0_2_00007FFD9B620B40	0_2_00007FFD9B620B40
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Code function: 0_2_00007FFD9B622FF2	0_2_00007FFD9B622FF2
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Code function: 0_2_00007FFD9B628FF4	0_2_00007FFD9B628FF4
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Code function: 0_2_00007FFD9B62A721	0_2_00007FFD9B62A721
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Code function: 0_2_00007FFD9B620500	0_2_00007FFD9B620500
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Code function: 0_2_00007FFD9B620508	0_2_00007FFD9B620508
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Code function: 0_2_00007FFD9B627D08	0_2_00007FFD9B627D08

Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2005050153.000000001B670000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameDragonKMS.exe4 vs SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000000.1928908822.0000000000914000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameDragonKMS.exe4 vs SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Binary or memory string: OriginalFilenameDragonKMS.exe4 vs SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Static PE information: EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, 32BIT_MACHINE

Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: classification engine

Classification label: mal56.winEXE@24/134@39/21

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe.log

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Mutant created: NULL

Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	ReversingLabs: Detection: 66%
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Virustotal: Detection: 46%

Source: unknown	Process created: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe"
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.yishimei.cn/network/319.html?=23:28:29
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2008,i,3068019957751357711,9581699129498719414,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://weixin.qq.com/r/iz8qMuHEDbxyraVR92qZ
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=2012,i,3075348156008277268,14418062507845200439,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.yishimei.cn/network/319.html?=23:28:29	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2008,i,3068019957751357711,9581699129498719414,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=2012,i,3075348156008277268,14418062507845200439,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\16.0\Access\Capabilities\UrlAssociations

Jump to behavior

Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Code function: 0_2_00007FFD9B6201C8 push E95E53CEh; ret		0_2_00007FFD9B620219
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Code function: 0_2_00007FFD9B627240 push es; retf		0_2_00007FFD9B627246

Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Static PE information: section name: .text entropy: 7.984250579444051

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Memory allocated: E50000 memory reserve \| memory write watch			Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Memory allocated: 1AD00000 memory reserve \| memory write watch			Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe TID: 7416	Thread sleep time: -30000s >= -30000s			Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe TID: 7276	Thread sleep time: -922337203685477s >= -30000s			Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2001933721.0000000000EF0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}8b}
Source: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.yishimei.cn/network/319.html?=23:28:29

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\bahnschrift.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\calibriz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\cambriab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\cambriaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\cambria.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\Candara.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\Candaral.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\Candarai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\Candarali.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\Candarab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\Candaraz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\comic.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\comici.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\comicbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\comicz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\constan.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\constani.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\constanb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\constanz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\corbel.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\corbell.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\corbeli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\corbelli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\corbelb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\corbelz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\cour.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\couri.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\courbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\courbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\ebrima.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\ebrimabd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\framd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\FRADM.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\framdit.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\FRADMIT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\gadugi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\gadugib.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\georgia.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\georgiai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\georgiab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\georgiaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\impact.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\Inkfree.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\javatext.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\LeelawUI.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\LeelUIsl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\LeelaUIb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\lucon.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\l_10646.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\malgun.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\malgunsl.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\malgunbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\himalaya.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msjhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msjhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msjh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\ntailu.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\ntailub.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\phagspa.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\phagspab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\taile.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\taileb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msyhl.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msyi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\mingliub.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\monbaiti.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msgothic.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\mvboli.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\mmrtext.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\mmrtextb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\Nirmala.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\NirmalaS.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\NirmalaB.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\pala.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\palai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\palab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\palabi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\segoepr.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\segoeprb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\segoesc.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\segoescb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\seguihis.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\simsun.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\simsunb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\SitkaB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\SitkaZ.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\Sitka.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\SitkaI.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\sylfaen.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\symbol.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\tahoma.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\tahomabd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\trebuc.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\trebucit.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\trebucbd.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\trebucbi.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\verdana.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\verdanai.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\verdanab.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\verdanaz.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\webdings.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\wingding.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\YuGothB.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\YuGothM.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\YuGothR.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\YuGothL.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\holomdl2.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\AGENCYR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\AGENCYB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\BKANT.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\ANTQUAB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\ARLRDBD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\BELLI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\BELLB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\BERNHC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\BOD_BLAI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\BOD_CBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\BOD_PSTC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\BOOKOSB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\BOOKOSI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\BRADHITC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\BRITANIC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\BSSYM7.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\CALISTB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\CALISTBI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\GIGI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\GIL_____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\GILB____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\GOTHIC.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\GOUDOSI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\GOUDOSB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\ITCBLKAD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\ITCEDSCR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\ITCKRIST.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\LATINWD.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\LBRITEI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\LBRITEDI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\LEELAWDB.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\LFAX.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\LFAXI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\LSANSI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\LSANSDI.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\MOD20.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\MSUIGHUR.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\ONYX.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\PARCHM.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\TCCM____.TTF VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msyh.ttc VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	Queries volume information: C:\Windows\Fonts\msyhbd.ttc VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 Disable or Modify Tools	LSASS Memory	31 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	4 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	31 Virtualization/Sandbox Evasion	Security Account Manager	13 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 Process Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	6 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Software Packing	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	67%	ReversingLabs	Win32.Hacktool.KMSActivator
SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	47%	Virustotal		Browse
SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://www.fontbureau.com/designers	0%	URL Reputation	safe
http://www.sajatypeworks.com	0%	URL Reputation	safe
http://www.founder.com.cn/cn/cThe	0%	URL Reputation	safe
http://www.galapagosdesign.com/DPlease	0%	URL Reputation	safe
http://www.urwpp.deDPlease	0%	URL Reputation	safe
http://www.zhongyicts.com.cn	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
http://www.carterandcone.coml	0%	URL Reputation	safe
http://www.fontbureau.com/designers/frere-user.html	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://js.foundation/	0%	URL Reputation	safe
http://www.fontbureau.com/designersG	0%	URL Reputation	safe
http://www.fontbureau.com/designers/?	0%	URL Reputation	safe
http://www.founder.com.cn/cn/bThe	0%	URL Reputation	safe
http://www.fontbureau.com/designers?	0%	URL Reputation	safe
http://www.tiro.com	0%	URL Reputation	safe
http://www.goodfont.co.kr	0%	URL Reputation	safe
http://www.typography.netD	0%	URL Reputation	safe
http://www.galapagosdesign.com/staff/dennis.htm	0%	URL Reputation	safe
http://www.fonts.com	0%	URL Reputation	safe
http://www.sandoll.co.kr	0%	URL Reputation	safe
http://www.sakkal.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
minorshort.weixin.qq.com	43.129.254.124	true	false	unknown
newcomm.wechat.com	43.153.248.110	true	false	unknown
hcdnwsa120.v5.cdnhwczoy106.cn	148.153.240.76	true	false	unknown
hcdnw101.sme.cdnhwcibv122.com	120.52.95.234	true	false	unknown
yiyun.n.shifen.com	124.237.208.37	true	false	unknown
wechat.com	43.154.240.170	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
sgminorshort.wechat.com	43.159.26.129	true	false	unknown
www.yishimei.cn	116.255.154.157	true	false	unknown
41jhoui9.ovslegodl.sched.ovscdns.com	43.152.183.74	true	false	unknown
weixin.qq.com	unknown	unknown	false	unknown
pan.baidu.com	unknown	unknown	false	unknown
newres.wechat.com	unknown	unknown	false	unknown
collect-v6.51.la	unknown	unknown	false	unknown
www.wechat.com	unknown	unknown	false	unknown
support.wechat.com	unknown	unknown	false	unknown
wwod.lanzout.com	unknown	unknown	false	unknown
sdk.51.la	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://www.yishimei.cn/script/tj-bottom2.js	false	unknown
http://www.yishimei.cn/script/baidutuijian.js	false	unknown
http://www.yishimei.cn/image/2000G.png	false	unknown
http://www.yishimei.cn/themes/j-spring/source/style.css.asp	false	unknown
https://wechat.com/cgi-bin/readtemplate?t=market_redirect	false	unknown
https://www.wechat.com/mobile	false	unknown
http://www.yishimei.cn/script/ad_sidebar_down.js	false	unknown
http://www.yishimei.cn/script/ad_sidebar_up.js	false	unknown
http://www.yishimei.cn/image/ysm_gzh.png	false	unknown
http://www.yishimei.cn/script/ad_article_pic.js	false	unknown
https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1-MVNBf.png	false	unknown
http://www.yishimei.cn/upload/2024/10/202410032222066242.png	false	unknown
https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/js/index_f89dbf8.js	false	unknown
https://wechat.com/mobile	false	unknown
https://newres.wechat.com/t/fed_upload/25d133b0-63d9-4102-857c-5cc84c752232/NTI4MWU5.ico	false	unknown
http://www.yishimei.cn/script/ad_banner.js	false	unknown
http://www.yishimei.cn/themes/j-spring/style/j-spring/nav_bgline.gif	false	unknown
https://newres.wechat.com/t/wx_fed/cdn_libs/res/jquery/1.7.2/jquery.min.js	false	unknown
http://www.yishimei.cn/script/ad_search.js	false	unknown
http://www.yishimei.cn/themes/j-spring/style/j-spring.css	false	unknown
https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/2d9odS_.png	false	unknown
https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/3ou3PnG.png	false	unknown
https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1TQxEzr.png	false	unknown
http://www.yishimei.cn/themes/j-spring/style/j-spring/bg_bottom.gif	false	unknown
http://www.yishimei.cn/themes/j-spring/style/j-spring/nav_bg.gif	false	unknown
http://www.yishimei.cn/themes/j-spring/style/j-spring/bg2.gif	false	unknown
http://wechat.com/cgi-bin/readtemplate?t=market_redirect	false	unknown
http://www.yishimei.cn/go/DragonKMS/DragonKMS.html	false	unknown
http://www.yishimei.cn/network/319.html?=23:28:29	false	unknown
http://www.yishimei.cn/script/ad_article_down.js	false	unknown
https://weixin.qq.com/r/iz8qMuHEDbxyraVR92qZ	false	unknown
https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/uq8YAlZ.png	false	unknown
http://www.yishimei.cn/function/c_html_js_add.asp	false	unknown
http://www.yishimei.cn/script/ad_daohang.js	false	unknown
http://www.yishimei.cn/themes/j-spring/style/j-spring/pointblue.gif	false	unknown
http://www.yishimei.cn/script/tj-top.js	false	unknown
https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/css/46172cee66bf4f26d72091b7741b1a7e.css	false	unknown
http://weixin.qq.com/r/iz8qMuHEDbxyraVR92qZ	false	unknown
http://sdk.51.la/js-sdk-pro.min.js	false	unknown
https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1jwBxj0.png	false	unknown
http://www.yishimei.cn/image/beian.png	false	unknown
http://www.yishimei.cn/themes/j-spring/style/j-spring/nav_bg1.gif	false	unknown
http://www.yishimei.cn/script/common.js	false	unknown
https://support.wechat.com/cgi-bin/mmsupport-bin/reportforweb?rid=64692&rkey=17&rvalue=1	false	unknown
http://www.yishimei.cn/script/ad_all_float.js	false	unknown
https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/3cBQnDI.jpg	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.yishimei.cn/network/319.html?=23:28:29pE	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020276603.000000001DB67000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://safety.wechat.com	chromecache_88.5.dr	false		unknown
http://www.yishimei.cn/network/319.html?=23:28:29I	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020276603.000000001DB67000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.fontbureau.com/designers	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.yishimei.cn/computer/144.html?=	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://pay.wechat.com/zh_hk/index.shtml	chromecache_88.5.dr	false		unknown
http://www.sajatypeworks.com	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.founder.com.cn/cn/cThe	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://pay.wechat.com/en_my/index.html	chromecache_88.5.dr	false		unknown
http://weixin.qq.com/cgi-bin/readtemplate?check=false&t=weixin_getdownurl_sms&s=download&from=100&st	chromecache_118.5.dr	false		unknown
http://www.yishimei.cn/network/319.html?=23:28:29)	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020348276.000000001DB80000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.yishimei.cn/network/897.html)http://www.yishimei.cn/go/soft_list.txt?=	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://www.yishimei.cn/network/319.html?=23:28:29%	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.galapagosdesign.com/DPlease	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://open.weixin.qq.com	chromecache_88.5.dr	false		unknown
http://www.yishimei.cn	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002E10000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002E0A000.00000004.00000800.00020000.00000000.sdmp, chromecache_119.5.dr	false		unknown
http://www.urwpp.deDPlease	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.zhongyicts.com.cn	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.yishimei.cn/go/soft_list.txt?=638643725093481074	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://www.yishimei.cn/computer/144.html?=23:28:29	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://www.yishimei.cn/image/404home.png	chromecache_119.5.dr	false		unknown
https://play.google.com/store/apps/details?id=com.tencent.mm&referrer=utm_source%3Dwechat.com%26utm_	chromecache_88.5.dr	false		unknown
http://www.yishimei.cn/network/319.html?=23:28:29R)	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://weixin.qq.com/	chromecache_88.5.dr	false		unknown
http://www.yishimei.cn/network/319.html?=23:28:29z	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.yishimei.cn/network/319.html?=23:28:29s	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020348276.000000001DB80000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.carterandcone.coml	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.fontbureau.com/designers/frere-user.html	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.yishimei.cn/	chromecache_119.5.dr	false		unknown
https://jquery.com/	chromecache_92.5.dr, chromecache_134.5.dr	false	URL Reputation: safe	unknown
http://www.yishimei.cn/network/319.html?=23:28:29h	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.yishimei.cn/network/319.html?=23:28:29d	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020348276.000000001DB80000.00000004.00000020.00020000.00000000.sdmp, SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.wechat.com	chromecache_88.5.dr	false		unknown
https://sizzlejs.com/	chromecache_92.5.dr, chromecache_134.5.dr	false	URL Reputation: safe	unknown
https://js.foundation/	chromecache_92.5.dr, chromecache_134.5.dr	false	URL Reputation: safe	unknown
http://www.yishimei.cn/network/319.html?=23:28:29S	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020348276.000000001DB80000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.yishimei.cn/network/319.html?=23:28:29V	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2020348276.000000001DB80000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.fontbureau.com/designersG	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.fontbureau.com/designers/?	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.founder.com.cn/cn/bThe	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.fontbureau.com/designers?	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.yishimei.cn/computer/144.html	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002E10000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://newres.wechat.com/t/fed_upload/fdf269b2-1de3-4bb9-95c5-00150433b7f1/MjliNWVm.svg	chromecache_88.5.dr	false		unknown
http://www.tiro.com	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.goodfont.co.kr	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.yishimei.cn/go/soft_list.txt?=	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2002891493.0000000002D1D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://www.typography.netD	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.galapagosdesign.com/staff/dennis.htm	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.yishimei.cn/network/319.html?=23:28:29tCookiesw	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2019741272.000000001DB17000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.fonts.com	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.sandoll.co.kr	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.sakkal.com	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe, 00000000.00000002.2006457046.000000001D052000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
90.84.161.27	unknown	France	5511	OPENTRANSITFR	false
38.54.26.75	unknown	United States	174	COGENT-174US	false
43.154.254.90	unknown	Japan	4249	LILLY-ASUS	false
43.154.112.29	unknown	Japan	4249	LILLY-ASUS	false
148.153.240.76	hcdnwsa120.v5.cdnhwczoy106.cn	United States	63199	CDSC-AS1US	false
43.153.248.110	newcomm.wechat.com	Japan	4249	LILLY-ASUS	false
43.129.254.124	minorshort.weixin.qq.com	Japan	4249	LILLY-ASUS	false
101.33.21.91	unknown	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
14.212.227.51	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
43.159.26.129	sgminorshort.wechat.com	Japan	4249	LILLY-ASUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
43.154.240.170	wechat.com	Japan	4249	LILLY-ASUS	false
43.155.124.49	unknown	Japan	4249	LILLY-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
116.255.154.157	www.yishimei.cn	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
154.91.196.176	unknown	Seychelles	42960	CLOUD-MANAGEMENT-LLCUS	false
43.152.183.74	41jhoui9.ovslegodl.sched.ovscdns.com	Japan	4249	LILLY-ASUS	false
47.102.203.90	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false

Private

IP
192.168.2.8
192.168.2.7
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1532384
Start date and time:	2024-10-13 05:27:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe
Detection:	MAL
Classification:	mal56.winEXE@24/134@39/21
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 216.58.206.78, 64.233.167.84, 34.104.35.123, 199.232.214.172, 192.229.221.95, 172.217.18.10, 142.250.184.234, 142.250.186.42, 142.250.185.202, 142.250.185.74, 142.250.74.202, 216.58.206.42, 142.250.185.234, 142.250.185.170, 142.250.186.106, 142.250.181.234, 142.250.186.138, 216.58.212.138, 142.250.185.138, 142.250.186.74, 142.250.185.106, 142.250.186.67, 172.217.18.110
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
23:28:34	API Interceptor	1x Sleep call for process: SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe modified

QR Codes

Source	URL
Screenshot	http://weixin.qq.com/r/iz8qMuHEDbxyraVR92qZ

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
38.54.26.75	http://hbyczyz.com/xrr	Get hash	malicious	Unknown	Browse
38.54.26.75	http://wwwhd4480.com/	Get hash	malicious	Unknown	Browse
43.154.254.90	SecuriteInfo.com.Win32.Evo-gen.19313.28597.exe	Get hash	malicious	Unknown	Browse	support.weixin.qq.com/cgi-bin/mmsupport-bin/reportforweb?rid=64692&rkey=2&rvalue=1
	https://web.safecity.com/backup_sql/databases/china/index.php?mc_phishing_protection_id=28398-cr2s30bjhva80uk6hku0	Get hash	malicious	Unknown	Browse	weixin.qq.com/r/ZBMlPfzEzqGxrbhe90Z2
	SecuriteInfo.com.Trojan.WinGo.Agent.1290.12443.exe	Get hash	malicious	Unknown	Browse	support.weixin.qq.com/cgi-bin/mmsupport-bin/reportforweb?rid=64692&rkey=2&rvalue=1
148.153.240.76	http://coffeeroasting.co.th/	Get hash	malicious	Unknown	Browse
43.153.248.110	http://www.nyfzx.com/showWiki.aspx?id=142	Get hash	malicious	Unknown	Browse
43.129.254.124	SecuriteInfo.com.Win32.Evo-gen.19313.28597.exe	Get hash	malicious	Unknown	Browse	weixin.qq.com/cgi-bin/readtemplate?check=false&t=w_indexn73&uin=&stype=10037102&promote=1003799&fr=&
	http://broad.qiaoleix.workers.dev/	Get hash	malicious	Unknown	Browse	weixin.qq.com/r/bnXG3inEonTdrW299yB8
	http://www.nyfzx.com/showWiki.aspx?id=142	Get hash	malicious	Unknown	Browse	weixin.qq.com/r/bS2iulTE_QmGrRDZ93h-
	SecuriteInfo.com.Trojan.WinGo.Agent.1290.12443.exe	Get hash	malicious	Unknown	Browse	weixin.qq.com/cgi-bin/readtemplate?check=false&t=w_indexn73&uin=&stype=10037102&promote=1003799&fr=&

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
newcomm.wechat.com	SecuriteInfo.com.Win32.Evo-gen.19313.28597.exe	Get hash	malicious	Unknown	Browse	43.159.18.10
	https://web.safecity.com/backup_sql/databases/china/index.php?mc_phishing_protection_id=28398-cr2s30bjhva80uk6hku0	Get hash	malicious	Unknown	Browse	43.159.18.10
	http://broad.qiaoleix.workers.dev/	Get hash	malicious	Unknown	Browse	43.159.18.10
	http://www.nyfzx.com/showWiki.aspx?id=142	Get hash	malicious	Unknown	Browse	43.153.248.110
	SecuriteInfo.com.Trojan.WinGo.Agent.1290.12443.exe	Get hash	malicious	Unknown	Browse	43.159.18.10
hcdnwsa120.v5.cdnhwczoy106.cn	http://wap.smarthomehungary.com/	Get hash	malicious	Unknown	Browse	148.153.240.75
	http://www.allencai.net/	Get hash	malicious	Unknown	Browse	90.84.164.17
	http://peru-spost.shop/	Get hash	malicious	Unknown	Browse	199.91.74.184
	http://www.nesianlife.com/	Get hash	malicious	Unknown	Browse	90.84.161.25
	http://www.telegroeem.com/	Get hash	malicious	Unknown	Browse	148.153.240.75
	https://telagram.vip/	Get hash	malicious	Unknown	Browse	148.153.240.75
	http://www.telegramnet.com/	Get hash	malicious	Unknown	Browse	90.84.161.25
	http://wap.theblmediagroup.com/	Get hash	malicious	Unknown	Browse	148.153.240.75
	http://www.telegramrm.com/	Get hash	malicious	Unknown	Browse	90.84.164.17
	http://aa5aa5aa5aa5aa44.app/	Get hash	malicious	Unknown	Browse	148.153.240.75
yiyun.n.shifen.com	SecuriteInfo.com.PUA.Tool.Siggen.9393.12164.29074.exe	Get hash	malicious	Unknown	Browse	220.181.107.169
	SecuriteInfo.com.FileRepMalware.20041.29802.exe	Get hash	malicious	Unknown	Browse	220.181.107.169
	http://14.215.177.38	Get hash	malicious	Unknown	Browse	220.181.111.91
	http://104.193.88.123	Get hash	malicious	Unknown	Browse	220.181.111.91
	http://www.baidu.com/	Get hash	malicious	Unknown	Browse	220.181.111.91
hcdnw101.sme.cdnhwcibv122.com	SecuriteInfo.com.Win32.Packed.NoobyProtect.B.24865.10880.exe	Get hash	malicious	Unknown	Browse	60.165.116.42
minorshort.weixin.qq.com	SecuriteInfo.com.Win32.Evo-gen.19313.28597.exe	Get hash	malicious	Unknown	Browse	43.154.254.90
	https://web.safecity.com/backup_sql/databases/china/index.php?mc_phishing_protection_id=28398-cr2s30bjhva80uk6hku0	Get hash	malicious	Unknown	Browse	43.154.254.90
	http://broad.qiaoleix.workers.dev/	Get hash	malicious	Unknown	Browse	43.129.254.124
	http://www.nyfzx.com/showWiki.aspx?id=142	Get hash	malicious	Unknown	Browse	43.129.254.124
	SecuriteInfo.com.Trojan.WinGo.Agent.1290.12443.exe	Get hash	malicious	Unknown	Browse	43.154.254.90
	9r1t4s.exe	Get hash	malicious	CobaltStrike	Browse	43.154.254.90
	9r1t4s.exe	Get hash	malicious	CobaltStrike	Browse	43.154.254.90

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
OPENTRANSITFR	PeleHfdpzX.elf	Get hash	malicious	Mirai	Browse	206.49.85.82
	na.elf	Get hash	malicious	Mirai	Browse	204.59.215.219
	http://www.allencai.net/	Get hash	malicious	Unknown	Browse	90.84.164.17
	http://peru-spost.shop/	Get hash	malicious	Unknown	Browse	90.84.161.25
	http://www.nesianlife.com/	Get hash	malicious	Unknown	Browse	90.84.161.25
	http://www.telegroeem.com/	Get hash	malicious	Unknown	Browse	90.84.161.25
	https://telagram.vip/	Get hash	malicious	Unknown	Browse	90.84.161.25
	http://www.telegramnet.com/	Get hash	malicious	Unknown	Browse	90.84.161.25
	http://www.telegramrm.com/	Get hash	malicious	Unknown	Browse	90.84.164.17
	http://aa5aa5aa5aa5aa44.app/	Get hash	malicious	Unknown	Browse	90.84.161.25
LILLY-ASUS	SecuriteInfo.com.Linux.Siggen.9999.5011.20467.elf	Get hash	malicious	Mirai	Browse	40.47.32.121
	SecuriteInfo.com.Win32.Evo-gen.19313.28597.exe	Get hash	malicious	Unknown	Browse	43.152.26.197
	jYEvdBHMOI.elf	Get hash	malicious	Mirai	Browse	43.95.102.77
	o5DbX8v3ZW.elf	Get hash	malicious	Mirai	Browse	43.103.136.92
	QmMz1SXUn8.elf	Get hash	malicious	Mirai	Browse	43.206.239.73
	YsI7t2OC5q.elf	Get hash	malicious	Mirai	Browse	40.232.231.88
	yQMBCvJVWp.elf	Get hash	malicious	Mirai	Browse	40.158.143.66
	na.elf	Get hash	malicious	Unknown	Browse	43.126.20.210
	na.elf	Get hash	malicious	Unknown	Browse	40.1.130.4
	na.elf	Get hash	malicious	Mirai	Browse	40.0.146.38
COGENT-174US	m0mg1WH7Su.elf	Get hash	malicious	Mirai	Browse	38.14.172.49
	PeleHfdpzX.elf	Get hash	malicious	Mirai	Browse	38.139.235.111
	ULRmk7oYR7.elf	Get hash	malicious	Mirai	Browse	149.110.96.196
	na.elf	Get hash	malicious	Mirai	Browse	38.45.244.222
	na.elf	Get hash	malicious	Mirai	Browse	38.161.13.62
	na.elf	Get hash	malicious	Mirai	Browse	23.237.211.213
	na.hta	Get hash	malicious	Cobalt Strike	Browse	38.240.44.9
	na.rtf	Get hash	malicious	Unknown	Browse	38.240.44.9
	http://myweatherradar.org./	Get hash	malicious	Unknown	Browse	154.59.122.79
	Payroll(Info_tech)CR.html	Get hash	malicious	HTMLPhisher	Browse	154.12.226.113

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://confortdelaine.net/_t/c/A1020005-17FCBF5826D778A0-C9FF7535?l=AAAjUdfNc16+VqCOWdjhu7TjhebDwXm6ITDaAzM2/RBqTCouOd4syZWt0oQeHch0J32d09qewtBep0xMzEqQw5uCDD5jzGMptv2Ml8tKG/C8CtlmUW+BwgihXDjkVb9+HrdQMTDnH/ltKCqbqkeSWCTVbTbsi7hQm50lkSO+uIKP+WaZVK5CwB+KNw5vz0h1+VWB9nXYS7r/65KwDXG1eoQ7LpgExf5uqFhJOeKU2lxyf8MZFWma+Jpcd8qAgpI5cl3w3zd+Vm0EYEfvHWX+4U6+p25bR3xOeQgBPB06jegeQ9cdnaCwg3Jra3NPSUfO/ZRQe9TJEW4VVwilXp7v0mwUyqJcK2y5kBNWNZEBnnQaAV+iawzJY19HetwEfzVabFBg3HhgYGx7XFWZYjHTHjwVWsbkjfgBb5461v0CHJjM9jrxfdj1kWIpcxid8O+dUSurKUOY4Hbb6SKXakBTmnkrYs0n3Xg5Ig==&c=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	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.60
	https://confortdelaine.net/_t/c/A1020005-17FCBF5826D778A0-C9FF7535?l=AACrcmbDni/ExL+6O84qnOq7s+7FEV7f2cEnFZCBGkVuVLwxJJ9kIF+/XsJvnT/ZZCSNu0ZPkHJMldgNU5hySzD4vbkLFmicZpeb27RRNiBBqzluO2njDgWrhNVOuuG5KecX01qr4Wu4+GPJbk1wcH4NmoDfnECMgEyVdYVJNd9SJ/Z6oeOmLYfmhHtJEcZB1zTo2XcCZUK4o1X55Z6mDqHfXia9/zchVngkbUJFubdOeeGrUXmliV4kA4X0r42Yjp3RKfpMvJU0dvSKL9oGxXQi9sD/MbbP4pxgNW6CajbdZVfsCIontUHWT1eFW4HrQm9NkGaKTegqBxEs/bh3fwfINtkSa08UEhuWP97GhgCO8AMh0qPvYF1Rp7eiHGFkb8QogMMfuDrW2QnTqHRWnTzitTqkjecFMC67nh1FVX/+SWo05+3MmWfzaTxkwp1iAJoDUcmTFcR0WSTfeepWakTIU1exnjYHjHsm9FYU&c=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	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.60
	https://thynetsolutions.com.pg/updatesection/officeonline/ECWFdKiAp0	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.60
	https://confortdelaine.net/_t/c/A1020005-17FC1B6DB5BD9241-7C90090F?l=AADy6+7GSFDtie9t8Cg/YUEnWHeQNpQUM5LtDe7UJMsLOceAyoyG1gPOseIEt6wEQOIS0cQG9+43HQOpwin+IcDGpXOmivIAoIj+kjiIGL1D2+8BvnDBEaMAH0f591eHch8eVhYXQMKLzHwgDODg3wt5JqhlbP9RQzflWbxkgz8rcLW9fZi6fO8I2q/H/mufxAmprX0pckYJIlZDOjEWtANKm9qQyuOPBTmTxFfQ7lSnZTWTopfzM4iUzlHH6YHH2Gwf9rOJKxuawJshVk1D6tC4SPWT4Qn+EH36v6noVRG1OVZuyh8POMokxISZrUYw04m/WI9EIj5YnXnJ0pu3aN84TxZoMpQWLf/bmERiIc3Nyv1tTCdvcY5yUV048SjizDEvcSo7xAYIkZcbJD4FxApNB4P7tHx7BM4Ye85I4pWktamhPb27vCl/+uYQPRubCgSnJCgEpm957xU4Pe9/Mw441Bx0a9Cw1g==&c=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	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.60
	https://confortdelaine.net/_t/c/A1020005-17FC1B6DB5BD9241-7C90090F?l=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&c=AABwK74RGNbpZkLbXDMgwGkEPcjIolhPI3ARymI3akMXqIIsvKkft1xo30+FsOmyglvzbe8Yz6H3Z4LxZ/0aTZFTqxR6u54legvtFlkuV/Y5fZXwm/YmPanR9jUnqtc4hPznzAuUrT6U7sovDeUggzqrrdSH45Gj/uRY+/LazDIdhTbOxXQwN2GEeE643R7hV3n9WYZrcN1rJdKE4J3VridUK5YywIX20BWPmYGQ+iqSfiaJQlNujGzur2PRjzxDNGxHixYHr88wjhccRzzqt63TgH68hxiQWBS2WMJ8V78YgSedyDzugz0SWoHXC4lIoIg/mD4/gfyj8ItwLNrpe3LWbVMyaC3Ad4pEpAUwx2rMNAE2ZRJGw2pFtc10IGwr77FIEYyERoM+q4jxSJoFtK3knGK9ms7DQJFt8w0eTeON/BC9KGyQaC64dCNz+N4+Xs4aPX/XWl9TCa+jzc65pmbZE5Fi0IpF2S9gBcOFdJjQtmI1vA8o1jxGHT+6uixJoZsPaoFWVJAAyljwh/1U0kE7VmRRTmULBXD/WiUTWrHi0xFoOw6OPuSKQtWkN98CCafLvNNkYgEzgEh7ZP0U7YG2Ui/9zjmE3N9hxjTOSgO7rba70M6HBYbc4mR2U37DUGxUEU5C	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.60
	https://confortdelaine.net/_t/c/A1020005-17FC1B6DB5BD9241-7C90090F?l=AADxL8L+GAtO4/UVYp8MqA+Sj5TSCBAjVAdgXYZk0eblTNDmdbfgDu4l4W8iDoNzLFaNYKheJg76tFPqEuw8bYVS19fwe8hhswMobSAd4H/SzCs2QZVam2WjwmfTSoUPGcyvkpmuq0ISpqIb5vzyWcVKqNTTUTopXpL6xGs6pKvxOLPHunpbWiA5Gm+6TueYrrthSZbOadliaedCA22mM2wTV3gNe1fzC90aFBzTBaHWQxrEXzwRC6Xpb34McFMIrdgz9IrbVcDvXBernticMrVIP1TsiiLBaevE/CbzrdEvKiAf8B42dT0tqManmBttR7OtoRCGhXROd01v21If1UCdSvfYAAn1bVRGaJ9z2t8XAOV+QkM7Cqp/NYaWVJFyc+dA9aHG4frM5s9sjjMhd8DDJlA/xoh8DfH8PxQbhenIpHsjrxicNhJW50U6jm9b5vBU2fBUQmACYkRTG3EArpkHaCcm6XS9GA==&c=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	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.60
	http://servicesopm.com/login.php	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.60
	https://metaprotradings.com/	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.60
	http://ernestlerma.com/	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.60
	http://mngop.com/	Get hash	malicious	Unknown	Browse	20.109.210.53 184.28.90.27 13.107.246.60

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	1281
Entropy (8bit):	5.370111951859942
Encrypted:	false
SSDEEP:	24:ML9E4KQ71qE4GIs0E4KCKDE4KGKZI6KhPKIE4TKBGKoZAE4KKUNb:MxHKQ71qHGIs0HKCYHKGSI6oPtHTHhA2
MD5:	12C61586CD59AA6F2A21DF30501F71BD
SHA1:	E6B279DC134544867C868E3FF3C267A06CE340C7
SHA-256:	EC20A856DBBCF320F7F24C823D6E9D2FD10E9335F5DE2F56AB9A7DF1ED358543
SHA-512:	B0731F59C74C9D25A4C82E166B3DC300BBCF89F6969918EC748B867C641ED0D8E0DE81AAC68209EF140219861B4939F1B07D0885ACA112D494D23AAF9A9C03FE
Malicious:	true
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Drawing\567ff6b0de7f9dcd8111001e94ab7cf6\System.Drawing.ni.dll",0..3,"System.Windows.Forms, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Windows.Forms\2a7fffeef3976b2a6f273db66b1f0107\System.Windows.Forms.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\S

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 728 x 58, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	32482
Entropy (8bit):	5.745185140480967
Encrypted:	false
SSDEEP:	384:a0whis+BBIKadRVCAB5lfEYu4dDgwoEUchZmAY7hq9iMSJYPHfgbywwyaF5:abikK+F+4dsDnAYk9iMSJ2/gbywAL
MD5:	7840199F38D46BBC7B567C0D86AED538
SHA1:	A426E7E112699F8C91C56732221C02A15D81366F
SHA-256:	3751752F08613C6598C9E1AECC5BE6009A99C6819C1B8A01091972DC361E84E2
SHA-512:	1DC02A40B064F383A6317E69CFDAFAF360BAE5A230877057D3F7D40B33053016854466ED38B25EC11E616806712A2E8D37A59F8BCF4AAAF0C3402205B9267088
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......:.............pHYs...#...#.x.?v...MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9788), with no line terminators
Category:	downloaded
Size (bytes):	9788
Entropy (8bit):	5.51203950969634
Encrypted:	false
SSDEEP:	192:myXjnH8tn58dHw0H9JIfWN1H+L+hbj8gvWERa8:JTnHw58dQ0H9JIfWN1eymF8
MD5:	46172CEE66BF4F26D72091B7741B1A7E
SHA1:	6FF2DBBA90645EFA6FFE08656FEEC5479E7FFB40
SHA-256:	383FFABC2ACEDE3E97F1106DEB3A54F46BA13B5766A3DC515E3D1D852AB12823
SHA-512:	A04EBCE29A7D288D39584F919D2C0A780D91ABCF035137651ACCFCB1F7F9B2ADA2BAB85D828AD980D528A42BDB7FFB7BA0F04E13A30C3D8069FC377883AFBB9B
Malicious:	false
URL:	https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/css/46172cee66bf4f26d72091b7741b1a7e.css
Preview:	.footer{position:relative;font-size:12px;color:#a8a8a8;text-align:center;background:#eee;padding:50px 0 80px}.footer_inner{border-top:1px solid hsla(0,0%,100%,.12);margin:0 auto}.footer .link{padding:6px 5px;color:#a8a8a8}.footer_ele{padding:6px 4px}.footer_ele,.ic_hook{position:relative;display:inline-block;display:inline;zoom:1}.ic_hook{top:-3px;height:0;width:0;border-style:solid;border-width:4px;border-color:transparent transparent #a8a8a8;margin-left:.5em;vertical-align:middle}.footer_ele.copyright{padding:6px 10px}.last_footer_ele{margin-right:0}.footer_ele.first_footer_ele,.footer_ele.first_footer_ele .link{padding-left:0}.social_link.footer_ele{padding-top:10px;padding-right:0}.social_link.footer_ele .ic_insta{padding-right:0;margin-right:0}.social_link .link{display:inline-block;display:inline;zoom:1;width:20px;height:20px;padding:0;margin:0 5px;vertical-align:bottom;border-radius:10px;background-color:rgba(0,0,0,.2);-ms-background-size:60%;background-size:60%;background-pos

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 133
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	6.31255499740834
Encrypted:	false
SSDEEP:	3:Ftt7Pc/1EPc7F9zK4ykuPbX9jEVhaL5aJr/zn:XtqE0nfyk4btjEVhaLO/zn
MD5:	A30A10538619325F270135E3B068E5DF
SHA1:	4B5AC4CFFD1383BDE168B9A6279AF2672FD1F4D3
SHA-256:	E2A4B2EA208F8EDB54CD65A11AA9F2E453438B7961DD23541A64177760A1C3FC
SHA-512:	03E0B3C418C33C3B9B3CCE70833F3977A0900DA9594A2C890880A25D71291D10C0F8A9561A62780B45AA9F7421D9394F9C773FAA03B38FE4AE04F9FFAA955308
Malicious:	false
URL:	http://www.yishimei.cn/script/ad_sidebar_down.js
Preview:	..........t.A..!........6.4....B..Y(..!.^?.....F...$.>-...ks:..w.9'\|hd.. 0r............:m..F..kj..BpprZ.5..r^....P.q....

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 285, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	32162
Entropy (8bit):	7.970115217718991
Encrypted:	false
SSDEEP:	768:dNi+/gVzI1Blk93AhT2Ixx/e9YN8o7idu2tznSrLDO5WWn4rR7tlP7eq+3RuA0:3cFMBlwQhHe9Yn+MWgjrbVwBZ0
MD5:	5E07BACD4A32F1DCB0BDCC06663B2132
SHA1:	A554C9B8B6E0EDF5F3E98CE1510ADF237C933747
SHA-256:	EBC9F85785D8F42A4478E54F2BF04CD9C1B807BCC04EA5E00B35F90F452B55FF
SHA-512:	7CA109585B18883F42DC8C8EADE11A5AEC7301D33F26DC62FEE8A83B6B2BFB6B04D5D67305EF161B255FDA8667D71FED4C1B0A2D8BA42201D4A4392A69FB200E
Malicious:	false
URL:	http://www.yishimei.cn/go/kali.png
Preview:	.PNG........IHDR.....................pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmp:CreateDate="2019-03-06T13:07:15+08:00" xmp:ModifyDate="2019-03-06T13:17:58+08:00" xmp:MetadataDate="2019-03-06T13:17:58+08:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:b8f95149-6ddc-264a-8524-130319e72ec4" xmpMM:DocumentID="xmp.did:b8f95149-6ddc-264a-8524-130319e72ec4" xmpMM:OriginalDo

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1010 x 1
Category:	dropped
Size (bytes):	121
Entropy (8bit):	5.721582689452201
Encrypted:	false
SSDEEP:	3:CalWlxTzKNgUiA//Lldlld0nqFb67NCVkRI6JK0afXUQTkE:jMjTmNgUD1ld0A8UWu6SfB
MD5:	36C53B4698DF24BF290E510D98D15C77
SHA1:	4FA538B94C9DE7E364B08D73B21373BA2434C91A
SHA-256:	61D9595A377C4F77AB0035B048B3E81C51A0DD39CC6C625FD7DADAB430C87E86
SHA-512:	0CE984E841FEACF133C223A28258E9C6A57AB512358F81725BA0BBC681293C9251E890574C86C10381244656332B657975C3DF2F07B3AEDDE153AF46909A67EF
Malicious:	false
Preview:	GIF89a..................................................,...........P... -...`(.di.h..l.p,.tm.x..\|....p.1....C...;

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 73
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	5.81478325553275
Encrypted:	false
SSDEEP:	3:FttBhwODUfT1vXIx8V20WxfjWEll:XtHwODUjVdWVZ
MD5:	65D350E6A01F37EF40824BFD5FC85BFF
SHA1:	FFD414A53A01549CCD1267448821AC01A9B7FC25
SHA-256:	AEB838D2AAA30691DA9DCBA8E5446519040DB73C9B7BF8A77936E08F5EF52CA7
SHA-512:	761ADB89A388C33DC53E3E6979DB5C1FC9630C8D7C7BFFF399766BF8C8AD6AB242BC9271F7E96158EDE46C04D391F953C7B89DC74554A9911CC0AE7BFAAEB1E6
Malicious:	false
URL:	http://www.yishimei.cn/themes/j-spring/source/style.css.asp
Preview:	..........<.1..0....'..].....)..c.....S.....2...{.4.YM.R..b..7x.z1b..K..........I...

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	827
Entropy (8bit):	7.720123455680749
Encrypted:	false
SSDEEP:	12:6v/7io5W7AFNuQrqZLJVG8Uc3gd3/Ohk0DZyhViJFo5iJIO+2z1xon4C6l0hq4Zt:xqNuQrCVG9cAgky88JD+wf/0gT+l
MD5:	5281E972EC463897022F56464011B5ED
SHA1:	2A719C124449E0C31A0166CEA7867BB1A44780BD
SHA-256:	A62D7D84BD02B1718106D294D1F2C8387F9967239696C1E8B446201B63F34DC7
SHA-512:	D5FC5821A1BA50F444665B01D3004EBD7546AE6B6A696C80CA4601C1ECDAED6632342381711055E65B86703D103BB38ABD3A591FB21254ED4C934F0E41968B40
Malicious:	false
URL:	https://newres.wechat.com/t/fed_upload/25d133b0-63d9-4102-857c-5cc84c752232/NTI4MWU5.ico
Preview:	.PNG........IHDR... ... .....szz.....IDATX..Ah.g.....Yk.J.1..Y.V.G/=.E.....^.."..T<....)..y.". ..]....J...DDdSc3..e).B.l.\|.......F..{....{..a...z.........F..l....kUA.T.tSY........n([..k,2;..^Z....N:..~.By..xm..7f....{-p+....hx!...k..s...f#....t.g...............M......=..f>.y."P.,../..Z;........\|T.pK.g._..Kz.D).Q.....Z.....c.........m.t...].~e.Sf.P..of...o..M.#.S...R..7..Ca`.xb......@..7L\J.b..M8wn........^f.\|9Z.,...[....=..8.\..a....(N....L.Fp.8U,.x%o..p..Q.#.J..1cg.b.d..i.TK...F.#.....p ..f.H.5(...$.q..[.C.$.:6."f.8.[oK@.u.q^....,..}.B?......\..... .._.OV...t...6\|...h..vIG..!...N..p......~..L......p.`4(...j.7....\g...i8.._..\|).7.g.;..N......o..v.{.......m..}?....{_....'TA.j.....L.!.O.qyv....*..X..>l.{.:._.?sg......}u.w..W.MDD.j..j..o..g.iq.q.....e..e\|.....t.."...r......IEND.B`.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15286
Category:	downloaded
Size (bytes):	2138
Entropy (8bit):	7.8947471534562865
Encrypted:	false
SSDEEP:	48:XEFAFr+G66CwYuRM7txIneXfNpVtIqT5FXYELzLRNEPuXoA41fK:0AFr+GqwYu3eXxGaFl3jOPAj
MD5:	C10E9229F43ABB564919AED8DDB7FC02
SHA1:	4C9CD9BA00F0FE6299F745EFC0515E3B1A846918
SHA-256:	49341AE2E96D2E153A588E558D0F18E71A1AF4F28A329DDA476567D2A2AAD842
SHA-512:	70243955ABBDEEEE6D772C9BED1E94F377F60EB8E1DA941239652252D2E8E8473E9DA39CBC685017DD46F6065EDD5BD63047CB64E8CCB62FF826097659403229
Malicious:	false
URL:	http://www.yishimei.cn/function/c_html_js.asp?act=batch&view=&inculde=mod_randomsortnew%3Drandomsortnew%2Cmod_randomsortallrand%3Drandomsortallrand%2C&count=spn319%3D319%2C
Preview:	...........Z{O.X..W.J........6...i...uV.42..X...v...R.n..L....G.m..n.bB..L...._a.chye..HWZK.%..=...9.......B...j......d...J...Bo[..\.W.?...U.....{t..+\|\hj..\|...n..F~s.P.[.T...Ib.9..T...6..=\.1.L&=........FM.....i......T.tQ.......m.T....a...:..h..-.x?..P..E><#w?\Rz.-.. ..........D~.T..z\|...er...V_..{n} .....EV...ws...ero...2..st.Z..m...s.F......./X.:.a.ci..w........>.....w..R...J..^.y...B...T.$.yX.........D/P.. .c9..]..H..j.l.H.!I. .......f....5..G=.........B..%P.....\|..I....`,g\|..g..U.....+......y](..%`..e..^....-T....D~.....s...ykk...9!.....=.G]....{0U~6........[..."...vks.,91^..g..X.d..Ho...9.K..I.9...%........-._6...7..g..'@.-..,.Zy....J..i."..&\|.l.&....j[..B.T.+B.!.z..".!.zCP..{7...G..*Z..9.0........$=E....;.o=...%...U..u{..%..\|.".2...>.<......cG...;.%>..q... I.%..............J..s..".zgX..~.zp...q(zNt.B....J{2....W.3....K.....2 8R3..FV7...../.rt.D.z0CQ.......@.P.e..0.8I^.#.}..Y#.I..e..P.._Kz./....jY..2..."d ...V.}s..5=.+.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 620 x 1245, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	167984
Entropy (8bit):	7.98202594838431
Encrypted:	false
SSDEEP:	3072:rZSeQjUu4YuF+12ic+fit6XCUd30sN4xsAd7UNVHGsEDJ9OGhB9jupx:rZSd4nFI2icPaCUdEsNSsAd1ZKKjupx
MD5:	D125F273833371EE3A018CBCBC8AEC86
SHA1:	57AB7ACD7221081FEF4508D3C527E9CC642F98E7
SHA-256:	D8EBB902B541CAE5EEDB3A5BF67AA464261C040341ED58BB20118FA951657FB2
SHA-512:	36CECC308888745022DA0D17333E193009CCEBBA27EAD3E1CDCAAC2CECE938676415DA2DE4F9E0F18DD2634AB84BBB68FDAE07DE183E5E72744D853F659CC37E
Malicious:	false
URL:	https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1-MVNBf.png
Preview:	.PNG........IHDR...l.................PLTEGpL)!1......))!...!!!...))))!!TTS.JJ...T2'dD2;200.....!.'......H@@......kUH7(!...hOc[\1E^.....(4L51'9BA.P8..n1)1.YF.sydR.th..x...@Sm......................yf...............sT...Kc\|[r...........)119!.................p....ppo.",.....[.........~;0...\|.......v.........S.!.........................y....'...............]eW.......ME.............)1).........6<.@*.....tRNS.@..f...^IDATx..[.k.H..#!..YY.f$F.A>...`{.@.....g.7..g_..........W..OK.$.q2.U.Z.vduW.W..v.;.......`.P....Waw........,.0.[Hn.>....mZ{YK....}..x.KB.....s..8..yI.>&.....B7.AQ..$.v....+.nI....k.u}.-=........s..l...Oa...W.h.&qv...n8.........].....9.......> E..q.G...0o....m........Lw>9g\...t.Z9.t3y.c....0$$...D1E..U]..../8`AFc.....^.u.O...?.y@;...j......!...b..ogH.?$\tgP...=UK.K....m!.X>r>..C.X7../.o~......v...qNFy..G..r....B.\1k.S..um-...p.z........}..s.....6.......C.9E(...kb.....wP.CT'....I+/ 8....s+P......F.1!.-...h.............

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 285, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	32162
Entropy (8bit):	7.970115217718991
Encrypted:	false
SSDEEP:	768:dNi+/gVzI1Blk93AhT2Ixx/e9YN8o7idu2tznSrLDO5WWn4rR7tlP7eq+3RuA0:3cFMBlwQhHe9Yn+MWgjrbVwBZ0
MD5:	5E07BACD4A32F1DCB0BDCC06663B2132
SHA1:	A554C9B8B6E0EDF5F3E98CE1510ADF237C933747
SHA-256:	EBC9F85785D8F42A4478E54F2BF04CD9C1B807BCC04EA5E00B35F90F452B55FF
SHA-512:	7CA109585B18883F42DC8C8EADE11A5AEC7301D33F26DC62FEE8A83B6B2BFB6B04D5D67305EF161B255FDA8667D71FED4C1B0A2D8BA42201D4A4392A69FB200E
Malicious:	false
Preview:	.PNG........IHDR.....................pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmp:CreateDate="2019-03-06T13:07:15+08:00" xmp:ModifyDate="2019-03-06T13:17:58+08:00" xmp:MetadataDate="2019-03-06T13:17:58+08:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:b8f95149-6ddc-264a-8524-130319e72ec4" xmpMM:DocumentID="xmp.did:b8f95149-6ddc-264a-8524-130319e72ec4" xmpMM:OriginalDo

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1654
Category:	downloaded
Size (bytes):	558
Entropy (8bit):	7.605045150068076
Encrypted:	false
SSDEEP:	12:X8mu1jqDqBbvPf975wNOl1wQW3tknIPiRK4XLVft6icapQ4y/8fb:XZ9MDrRnwnaEp4b1LhpkQb
MD5:	74FF88140C1FDB95C38FF6221B0D6B34
SHA1:	27393D78FE144F8E8772F7D36515266C9B5C3EA5
SHA-256:	378A15AB4A26E6F23480C0CDB96F9A2F8E4C0E5DA1DB25680E1E0C6E8FB934E7
SHA-512:	7CFD36775D7645A8556F843B93C9AFD6B7A1919C8642186D5C3ED6C1C9C150BA1F87F229683D9FB9E79265784C6FF9F2E7309B94F36F0380A515AA35533771B6
Malicious:	false
URL:	http://www.yishimei.cn/script/ad_search.js
Preview:	.............n.1...H...%p.5Q/.P.$.@*P. @....ll..{6...<.'..........4).D$..........}W^6.8.g. Xw.........).XYv.......2....8........3...Q...4.....q..j.....l...s.&\|......W..nhs.j.{\|p...[;rZ.b....{.:..8...o.\<.@...h..+.....].........@..`..I.(of.0Q..L..G..D.!.u0n.o...$.2.\. ... .s.d%K...K...Q..,..j..Tf..1.b.d.w(....oKT.....D(..7...J.X."....._.+.n...8j.t.K..].,9v...B.i]..R...0....S.I..l.j.@..P...C...M.E.5.IS[..i_..2...`\. s.J..j+&[.l+..9m......U.._VR..X......M2l....:....-.._wF.G...2.Z..._.q..S.O..~..^H..O......pv.+<=.+.....G..v...

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 810 x 288, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5997
Entropy (8bit):	7.795516920713676
Encrypted:	false
SSDEEP:	96:1o/M2bPOFyJQuLvSD9UtpRa7WJRT+WNejquPEH2ObAt72sTd+aiLA2aMzAIYMDjX:1oUZFyJtLvE4pkWJoWCquP4+12raiAM5
MD5:	C338CDA91242421593EEEFD63E87DB5E
SHA1:	67A695CD06ACBA2958232CB97AB6E63B4F5ABFD5
SHA-256:	18EDE824B7D5C69D433082289D017FEB88145E1D37D81B91E14BA17DA35FAC2A
SHA-512:	EE56B3A9340F9CEE23FA007B14B714ACF6DDEB2D86B31532B0039B770563E5DFDBCF92D57DBBA64CE3860AC79DF3C4B3023DF0F0FA336BD8BF396AFE7683258D
Malicious:	false
Preview:	.PNG........IHDR...... .....l.w....{PLTEGpL.........................................................```@@@ .................ppp.........PPP000............ooo___.......tRNS...`... ..P.._...rI.....IDATx..kc...@=}Og.sm.....i......-@..q..].[S.....z V.1_>...._7..+.?...U./.\|...6..Q[..Ak.p.,..0...(.>P3..n..a..M.....M./.@..a.........qz..S....K..3..........>._..@<....?....Y.Q..5+....I.../.$...D\|!....i..J.H.}...........W....... .U.P..U.P..U.P..U..U.P..U.P..U.P..U..U.P..U.P..U.P..U..U.P..U.P..U.P..U..U.P..U.P..U.P..U..U.P..U~S........6..Uo..T. .^.@.T...yW.Fk.~....E6/.z8..n.0.r[.<...U._......9.uN9...Un).1.).....yu...>.t9W.Un.E.}..u.p.Qx..F&{.B.A...BWm..ES...L~..T:...H........<%...P..WA].h..~.<i.\Ge.Z...._.....k......QE=.gG.........Y..?.6U.X4....f.r.H..%......<.6m.K+C..)U...P..Ty.l^^..Se;...UnA....\[.s."..\W.....T.T..~i.P...7e.......c.....S.uY....F.Nc..j.Uf...........K....T.....h.s.3.6.>\.U.rx..'.....2_V&...z*...Y.?un..B.}\:.o5L..%ZW....1...?}g..".

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 18003
Category:	downloaded
Size (bytes):	3855
Entropy (8bit):	7.946628498388916
Encrypted:	false
SSDEEP:	96:BVxX1xf6CzEA9RJFg70vM7dzj+pCVi9KZdpxUKBFY9WkxiCf1hk:NX1BP9RoXZOCVaCoi4hk
MD5:	A4B7EDD5C9C56F81BC6913C761CF31CE
SHA1:	E2F7A623C8BBE78DC81CE413E70156D330A4B5F3
SHA-256:	2385FC33B3FD373141A11248B0AAB553D8C3713790869408C7F179B884249CF1
SHA-512:	B328E775CAEB32C3DB64EA712DD6124EC44402F4E4F597675FFC5EF8E7D0A7EF458960BD1589527607EEE7A3136EF3E4A465F340087BFA5BF401000E51C27C93
Malicious:	false
URL:	http://www.yishimei.cn/themes/j-spring/style/j-spring.css
Preview:	...........<[.....6..0."@c.d."...d...K. ....Dj."U...f.@..K..nR.H.&EZ.i.h..I.?S..O....97....B....9s...C...w.,<:.t..$........ ..t...fI......Q...Y.j...!......I.......0.f....././o^^.....>.r=.........,...e.x......<......#...._i.9...`.i....<.FA.:.E6....":,ZA...0J.(..O.]...0.fyP.Y.4K#..O...8.....u...w.Y\D.4..e....qv7..{{[=..J[..-..\|.`X.w.5...4/.g.<..$j.G.....O3..... ...8.........u..ak.G.....DN..I\|....<=~....>.2.......v1.O.@\|6=..,.CxX..f.$...$....l.....h...{..........{.(...>..X..\|...0.R,NI... +...K...x..y@Pg...l..P..I6.#....?5.....+-.Z...........G.U.+W/]........I.9..y.y..Z.c.&...G..~.'O.y....^.5...LyI=uGn............/@r&.Q\..(.........t.jFj....(...C...:PSCF?h.2....NX..y..&.....b.F..h..........}..$.q?.....cm.....w...]....!r......T..t\..?9...w.../m.4....RG..-o...}}...4b.....l.M..O...;...`.-.Q3m....+(;..#.....K.^.h+..[d.4...T..\|..1.....Z}.o..;....N.mN..b.....x..R...F.Sr34.%...............}.~....4......$.K.....z.8-.....)BM...r.g4Dn.F...$..y.^..FB.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), truncated
Category:	dropped
Size (bytes):	36
Entropy (8bit):	3.6669884365580274
Encrypted:	false
SSDEEP:	3:FttglVYyjnl:XtgVYUl
MD5:	AA0137A4F523E98104D99C84DD2F2AD2
SHA1:	E397EC645A880E0A8BF4BD9FAC357F5C83A8516F
SHA-256:	F3AAF638F2616C99BFD971C99CBE3CB430EAB3C1F1240D7643B2BE14B6115053
SHA-512:	AA43B30F69B5348E553FFDEC01236A7896751A8D71B45019270A3A2E7522BD15B345222CCA62576453ECC71A40A4BEDD9D7373181DDABB8D4ADA565CCCB038D5
Malicious:	false
Preview:	............1....@....".`..........

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 2 x 24
Category:	dropped
Size (bytes):	55
Entropy (8bit):	3.889028803804377
Encrypted:	false
SSDEEP:	3:CHX/5aEZSxldlJsvV:WSjCd
MD5:	9F00C7C8FCEF7C05741328501C4D30F9
SHA1:	3DF22BBF9CDD111FE7739B178A46B48DD1C5AF54
SHA-256:	15898FF76C7EC549669BFCD88D0967EE888C9E2B98CE4A356521D90363C2BDC1
SHA-512:	9B6D9D99BE36D1722638AC5A427F593EF3C9C0577234DD47E03BE2DA12A5834C6D128D7A2B78CC92AD670926DD3D12573712A0661F72E0BCEABC94A68E133555
Malicious:	false
Preview:	GIF89a.............sss...!.......,.................]..;

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 810 x 288, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5997
Entropy (8bit):	7.795516920713676
Encrypted:	false
SSDEEP:	96:1o/M2bPOFyJQuLvSD9UtpRa7WJRT+WNejquPEH2ObAt72sTd+aiLA2aMzAIYMDjX:1oUZFyJtLvE4pkWJoWCquP4+12raiAM5
MD5:	C338CDA91242421593EEEFD63E87DB5E
SHA1:	67A695CD06ACBA2958232CB97AB6E63B4F5ABFD5
SHA-256:	18EDE824B7D5C69D433082289D017FEB88145E1D37D81B91E14BA17DA35FAC2A
SHA-512:	EE56B3A9340F9CEE23FA007B14B714ACF6DDEB2D86B31532B0039B770563E5DFDBCF92D57DBBA64CE3860AC79DF3C4B3023DF0F0FA336BD8BF396AFE7683258D
Malicious:	false
URL:	https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/2d9odS_.png
Preview:	.PNG........IHDR...... .....l.w....{PLTEGpL.........................................................```@@@ .................ppp.........PPP000............ooo___.......tRNS...`... ..P.._...rI.....IDATx..kc...@=}Og.sm.....i......-@..q..].[S.....z V.1_>...._7..+.?...U./.\|...6..Q[..Ak.p.,..0...(.>P3..n..a..M.....M./.@..a.........qz..S....K..3..........>._..@<....?....Y.Q..5+....I.../.$...D\|!....i..J.H.}...........W....... .U.P..U.P..U.P..U..U.P..U.P..U.P..U..U.P..U.P..U.P..U..U.P..U.P..U.P..U..U.P..U.P..U.P..U..U.P..U~S........6..Uo..T. .^.@.T...yW.Fk.~....E6/.z8..n.0.r[.<...U._......9.uN9...Un).1.).....yu...>.t9W.Un.E.}..u.p.Qx..F&{.B.A...BWm..ES...L~..T:...H........<%...P..WA].h..~.<i.\Ge.Z...._.....k......QE=.gG.........Y..?.6U.X4....f.r.H..%......<.6m.K+C..)U...P..Ty.l^^..Se;...UnA....\[.s."..\W.....T.T..~i.P...7e.......c.....S.uY....F.Nc..j.Uf...........K....T.....h.s.3.6.>\.U.rx..'.....2_V&...z*...Y.?un..B.}\:.o5L..%ZW....1...?}g..".

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.92219735927213
Encrypted:	false
SSDEEP:	3:CMJvU1AAo5E8LzltkBBXEfXqlr2tBBANNNNNJl/lhwn39/ESXWSgDNxle:/LE8FkkVn3ekMDNxle
MD5:	CF94FD074DF0CC74FB46151DB6B49955
SHA1:	BB421629BC668F161B2C061D4DA5DFF9974366B8
SHA-256:	53AC30AC8280B2FE57B13F30BCF06F43729C4FE8032B96387B6B61ACC7BFC89D
SHA-512:	7601E7429403CEE4CDBA6AF834189968627909D1E24FE964633368FF36759375549890873E814D6D0B87A4016FABD98D31C679F72FC867C4EFEF126AB9045EB3
Malicious:	false
Preview:	GIF89a.........n..........~..n..............~.......m..~.........n....n.......~.......b((((((((((((,..........+.&..f......T...-.vIW...r.A..E&.h........;

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 356 x 96, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3004
Entropy (8bit):	7.850295835680949
Encrypted:	false
SSDEEP:	48:PXpxNzbwMiYUd8j6fnoYOvpzm1nM6lLGEaeQC8nJvzAlighxl+lh6eaI4i2j8:PdkIA8FYgmpMsqWqnFYRhxwFazz8
MD5:	AAEC6A453C14067CD710518FCA1E718D
SHA1:	19522F1DA1306E3F66EF888C0A96A9939DEB10A9
SHA-256:	999AC1A2B60D99E6F84189F2490555D5354002474F5CC257653D1A1F088E7019
SHA-512:	5A696509BBC679DB2DB36618B9479ABF449E4578694302ED6AA5F6C84E53E20E4E7FEDA8271AE876AB6020C11166DD0B2F91BC019BCCBDC814793AF073801F1E
Malicious:	false
URL:	https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/u7U1PY3.png
Preview:	.PNG........IHDR...d...`......#......PLTEGpL...................................................@@@ ............```.........000...PPPppp...ooo...___OOO...............!!!...qqq...111.........aaaAAA....B.&....tRNS. ...@...............IDATx...b........3....8iO....... HJ4#E..b..[& ..`6.r.eY...w.......e....h.N.v.eYv.C"qK........,{.(.X~z...(.Z~.E...3K.no/...9AN. '..r..9AN. '...BDY?&~7.,.......y..\|mM..\..K.\|..M....\|..uQ........o..g.,...N...M.m@~..y.2...O...M@...3." q..d...;..r'2.AD..D.h.H........Z...:...b...bu. .C.uo...0cs"...E!(.......o.rP..^.th..P.f..@.Q.ED..r<p..o!.}...r.......u.<.(.e...QnU].Y@.T..D$....xS..}.".,P.DGD.ZC..Q.0D.%..Q..`H.....[.UPD$..c...44Q...J....(. .Y.Q].)..N.s.9..Z..h..l.I.D1..(...;....3...........5.d...K../......}.r.......Ihr..#..>@n.N2......c../q..7_9>...j.....@....X!. ..S.."U....t....[-M..[_...Zk..&.1.9./...Y..:...K+qO..~\Cv.....HD.B...Xy.5.Y.2.............,....3.+FE..a0..H..D.9.k..ZCD=J..vchm.g+..A.<dbk^?ds.c..>.P..R.s..hz....;T....

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	544
Entropy (8bit):	5.189991607093636
Encrypted:	false
SSDEEP:	12:hPJXrYIHTooo6uYLACUrY4MexGcW6PWjpLZ/LrLPJ5WuN0OMJMGv:hPJXsiModuYDUrY4VoDZrVkQ0OMuw
MD5:	5CC6D4D82BCE7663D505A18D25890203
SHA1:	198CD998861D70D1B6C117EB78CCB08F0041442B
SHA-256:	9FD2B7A81DCF235F711E84E59C7C894EDDF3E191A29EFE145CDE33888B259B4C
SHA-512:	020811634C1018BC26DC730F69694789D6E77679693DA5F5ABFD07159E2725DE7AA4D9FF9B740CF249DFB4A3C90FF3E458F0F816155FAECE0FEB6D0A48858ECC
Malicious:	false
URL:	https://weixin.qq.com/r/iz8qMuHEDbxyraVR92qZ
Preview:	<!DOCTYPE html>..<html>...<head>....<meta http-equiv="content-type" content="text/html;charset=gb2312"/>.......</head>...<body>........<script>................... if(navigator.language == "zh-CN" \|\| navigator.userLanguage == "zh-CN"){.. window.location="http://weixin.qq.com/cgi-bin/readtemplate?check=false&t=weixin_getdownurl_sms&s=download&from=100&stype=10037102";.. }else{.. window.location = "http://wechat.com/cgi-bin/readtemplate?t=market_redirect";.. }.......</script>......</body>....</html>....

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (324)
Category:	downloaded
Size (bytes):	1780
Entropy (8bit):	6.022393411598815
Encrypted:	false
SSDEEP:	48:/CT77vQ+5sN+1HdefeZILuZ3aulJKa9JQCIUKPR9ir:AHQ0sY19efeZILuhaulJ7L9ARgr
MD5:	134B30749D07B27C5E9374652C254473
SHA1:	DB5539BFB6AF48C510821998F35A2FA828E33BA3
SHA-256:	28BD072CE834B5B0641AA50D3C243173CFA6050DAE3F1B753451F4D80BCF3CC4
SHA-512:	AF005E306F65DC1775878B226F1C87C16C9DA7B7BE57022A209F0D33F658786B91D20D140ECAAA2260144ACAF6C65521B1B3D06EA6B63FC48115C7D611FF9D52
Malicious:	false
URL:	http://www.yishimei.cn/favicon.ico
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">.<html>.<head>.<title>.............. - .....</title>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.<meta content="404.." name="keywords">.</head>.<style type="text/css">.BODY { MARGIN: 0px; BACKGROUND-COLOR: #000000 } BODY { COLOR: #ffffff; FONT-FAMILY: Microsoft YaHei; background-image: url(http://www.yishimei.cn/image/404bg.jpg); background-repeat: repeat; background-color: #D9D9D9; } TD { COLOR: #ffffff; FONT-FAMILY: Microsoft YaHei } TH { COLOR: #ffffff; FONT-FAMILY: Microsoft YaHei } ...style6 { FONT-WEIGHT: bold; FONT-SIZE: 12px } ..style7 { FONT-SIZE: 18px } ..style8 { FONT-SIZE: 8px } ..style9 { FONT-SIZE: 24px; FONT-FAMILY: "Microsoft YaHei" } ..style10 { FONT-SIZE: 30px; FONT-FAMILY: "Microsoft YaHei";COLOR: #ff0000 } ..body,td,th { color: #666; } a { font-family: Microsoft YaHei, Arial, Helvetica, sans-serif; font-size: 20px; color: #666; } a:link { t

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2102 x 426, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	15808
Entropy (8bit):	7.887817596599795
Encrypted:	false
SSDEEP:	384:8cyFmOVDKv/ggaCwsI0pZXpliLPi5qpmD5hHr:8c4fVD8gvsFLWLq5/LHr
MD5:	6BFEEE13F3FD56248A37A219CF248391
SHA1:	C8D6DCEB14BFDD69FBF528DBAC177410B8408C2D
SHA-256:	274676A3F9EE7B6D883C666452195F092DA3B28B030A411C15C4684710B41E88
SHA-512:	4C54777C9070B11826BBE69DE4B44BF205591358E6D05BB23B366BAF7768DF65A79BD6CACAE35C4C904DDD65AB768187EEC27614AD1FDC6C93E4E10153588253
Malicious:	false
URL:	https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1jwBxj0.png
Preview:	.PNG........IHDR...6...........&...3PLTE...........................................................tRNS..@...`. .0Pp..%.8/..=,IDATx.........................................................................`..@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....M...0l...w.W....[A.L..yN.....v......................../q..........U..W~i.l.. ...........UU/..j..l`.d.lx.f.....s=...l`.d.l(n:.....l`.d.l(......@vE6.Y.A6...c<h.Y.)M=F....d.qnc.."..w;.....NC.<..h.6..&6...E.XC6.K\|...h..g6,k]'....K...E.o?....#v.t...l..j(..C\....a..I6.V........g..&M.a..'.r,."...{v...X...............!].$.<...9...f";.:n......7..p....ubCr.]..dC.7.H6d..N...Z'....X.>=........n..........{.I..l.I.]..&.uqe...b1'.<.R.E.H$.$.>{$2;.YL.W..#.....A^C6Tq5.~..........J6...U....i..}..V.....d6.od.[M.....u.^6...:.....r.0..a$.....igJSN......y...h../....]...f...p.lX..../?...7 ..Y#...3.l8..8K.~..6u6.QV...q....'..j..7G.p.5.....H"d.Y..XC6.p.5....5d.,....`....}...@6.......9dC..Q#...P

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 106
Category:	dropped
Size (bytes):	111
Entropy (8bit):	6.260908830774675
Encrypted:	false
SSDEEP:	3:FttuzqAmh33qTuUB8JBxQg/eZYcZ3HVtGxPl/:Xt6S8TuUoxQg/eZYcdHVwxPt
MD5:	D216C55130DDFEF1A88D69EDD385D1F9
SHA1:	DDEB6E1E0834A616D63CE3FC2BB5D3F8B2B0B5AD
SHA-256:	EE9DC08D97B615A1C1452655D27F72234975F61A71D740958723A16D4D8F38AA
SHA-512:	E0F8C5949E8EB568F1427676C14C1BEE3074F7717EDD58BB4063A6178133676E23EC3065469D560F8B811860CE9C1584C125BFE47F2ECFF63443F59E2553808E
Malicious:	false
Preview:	..........l.1.. .....;...p...$4.&d....t......5/...o.Y^W%.....Nu.7.f!....kR....G..(..=.j,.0.qx..[.;......s.j...

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 2 x 24
Category:	dropped
Size (bytes):	169
Entropy (8bit):	5.085011075703233
Encrypted:	false
SSDEEP:	3:CSXAamou7tSlRnn/DTXpBXPaf4xwM/7yl4rtnloFTWKHrBg0hcyJ9DVe:bQjz7k/HrQ5WwWxa9D0
MD5:	C96297843FF50453633F003A52EFBC28
SHA1:	F3B9FF69BC5ECEBC27D918341E81EE42A2C8F236
SHA-256:	2718477439F28A0DD13D01EBB432C7E2530420C8E389797FDBD1C4204D361DCA
SHA-512:	C01947624B0318443CBC8E181A5AAB265565C8155677FAEB5DAD302F374EF5BE53597E65280903C7DC98934B0061C4B93BB634C3AA1D72E166D29D3F56DE110D
Malicious:	false
Preview:	GIF89a.............vvvMMMKKKHHHEEEDDDBBB>>>:::666222000...,,,***%%%!!!.......................................!.......,..........&. X..4..T.EM.$E..9..,..$...`(....@.:.B.;

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 332 x 332, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5167
Entropy (8bit):	7.333065509932749
Encrypted:	false
SSDEEP:	96:fqAe3dKb3+/KMEWjttyF0sTAdevguJ8/Gbz+/E9:ftbbyK+t34keYOBz+/E9
MD5:	5496C1924FD485D9C8E2541434A1B3DC
SHA1:	84D2DD027A1606E626B443772154F7C23605426A
SHA-256:	BDAE8284141567888D1BE53D094325242DFEC516845A7F87D47B6FD93F736864
SHA-512:	F615A95F83BCD8E61D9E9FE93A668B1FF60A25DF0675EF2A663A34FA90489EDFB7548F9430F488B6AAABF6EB9F17ABBC3E0A57FAFE4FF95C12F8CAA9D73C78D8
Malicious:	false
Preview:	.PNG........IHDR...L...L.......um....PLTEGpL...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................5......tRNS......"..........B...J.......Z..f......{.4w.h.1.........~.'.et. ...=.2`.T.>P.!c%.\|..)R3....-p..YA.o$.,.@Ei+05}...Vz..K.I...d&.^.*N.r.9bH....#......n.s..y;.x....m...X..v.W8.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1760, components 3
Category:	dropped
Size (bytes):	92578
Entropy (8bit):	7.574635568665834
Encrypted:	false
SSDEEP:	1536:JzLikH3OJglvwiFD5/5jlc8nB6dLeZKRq5nfXNY7ydeyA+cIAEJ:M+X9wiFD5/Fl3nBBKRq5nBeZeJ
MD5:	892E1D57BC6289186C3DC0506C1C760E
SHA1:	6258BEDE2054602E1AC3C1806213D8F4BD403184
SHA-256:	B892B1299D03BA635EF48036CFBBECDB3BC5CB9101DC26A823ED721AAA701A78
SHA-512:	C6BE98342BC7D63A35C43B31EC970E710B140E1A4909AF5692B754A81242D3F7A0B86685B221B63B2406A0B3A4D87BB29569C383F196F66E43A890B1E74597CC
Malicious:	false
Preview:	......JFIF.............C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;........@.................................................................................m..$"""(."5R.U...........`N.....OUz...:V.BE@.0b9.9....&..s..s^Q.....+.t...'J.f.f.F.C".Ng..e.'.xK.\...z.I.OEwN......"....%..9.#.q.....C....+..DUHR!Y P.....^k.....S..:....""""""".X$.%(..BBD$....@...."$$U$DBDDD@d...a2.....n.."" .3....K.9...../.....!.TDBh.vt:..f..TF..r9....LJ......1\.....4..............!.U.4."T.dU..%.q....q0GH.o.OQ.='..]M...2d.....`.0..f%....b\..MV....k.t...&.F.k.U.2s9W../.<.....X.......+f.I"....b!(.5..r8.)y.(.u;GZ.uM.4"."........yK.y/9p.h.....,.5bBDDDDDDDD.D....DD$%bK$.(......+..l...X.""".&.k..*.:...h........k.9.N+.8.....s.5....T...F..f.&.D.LG3....\.F.U..5..9.L.2.......T..o..5.........j.l.H.9....^....^.zOQ.=Gs...V.@..0s9..fL.0`..r.0...M...vt...Y....F.P.FLW#.y..U./.s..^..='...J.(.DQTD@D.......

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HKALn:qAL
MD5:	C6CB4F21C7DCEB18C48B802BDE96868D
SHA1:	D44E74B07ED4E8267728C2BCDD16599E9110D05B
SHA-256:	B77A3071A80FC28A1E314D251064103CF265866101F7CDCCCF00B77C80484BD5
SHA-512:	8C65A0458DD4A8B93AEEA70A0CA67DB43B6E1C0DAAB17B7091449335532F3F5489E5B8A1617B42B99EE95B66CD8EF3E572F537121C9960743E100FE560F4C0F0
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkWmtoDB445BxIFDT0fUzw=?alt=proto
Preview:	CgkKBw09H1M8GgA=

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	5.92219735927213
Encrypted:	false
SSDEEP:	3:CMJvU1AAo5E8LzltkBBXEfXqlr2tBBANNNNNJl/lhwn39/ESXWSgDNxle:/LE8FkkVn3ekMDNxle
MD5:	CF94FD074DF0CC74FB46151DB6B49955
SHA1:	BB421629BC668F161B2C061D4DA5DFF9974366B8
SHA-256:	53AC30AC8280B2FE57B13F30BCF06F43729C4FE8032B96387B6B61ACC7BFC89D
SHA-512:	7601E7429403CEE4CDBA6AF834189968627909D1E24FE964633368FF36759375549890873E814D6D0B87A4016FABD98D31C679F72FC867C4EFEF126AB9045EB3
Malicious:	false
URL:	http://www.yishimei.cn/themes/j-spring/style/j-spring/pointblue.gif
Preview:	GIF89a.........n..........~..n..............~.......m..~.........n....n.......~.......b((((((((((((,..........+.&..f......T...-.vIW...r.A..E&.h........;

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2242
Entropy (8bit):	7.812177560716048
Encrypted:	false
SSDEEP:	48:tcOai04H2MmQnNZ7HUFwkn15xDSWMW3gpg94a:t70222n/70FwknApgd
MD5:	624B20EE57C48301212460B460A47EBC
SHA1:	99E3655AEEF0E4DDC3B3A45052591F7A1240868F
SHA-256:	B2776425C088D2B7FE3AF7F31DE3F1D6B53E700414000E67E9579E022DD8D70B
SHA-512:	E5ED26AFBAF59FA123B35EDD5F72C8F5519C94E3B0C054A76F5F5E83F31785EC262EF9D929BA5A6222DAF486F4921252449CEED1B4256C1D0AB2D057248F681E
Malicious:	false
Preview:	.PNG........IHDR.......`.......l.....PLTEGpL................................................@@@.............. ...```.............pppaaaAAA........___...000ooo!!!...PPP.........111OOOQQQqqq...........!..m....tRNS. ...@...............IDATx...[{...`.3.Ng..d[.EL..1.rj;......9....x]4...7Z.-?x..y_.}...?...+.... ..+..?.."...<o..M..O.B.....5(4...F.V.....l.8...c..8...c..8......Cp(.y.MN.a.0}.7.....r.>9..;..".z.....q..._q.P.on...I%.T..#...Er./.p.4"....!).A.AR.....O/.5..Y.2W.CMW.{q.....7.}].3.Z.}9. H.T&.&E. ....+)#]7..TS..Qu.VI5.8V....."...9.b#..@.a1&WP./1.."9."i!8.R.)nM.1...G.#..s..I.H...%..y....a...l.9....@L...v.P9...!SG......#..&...2..\|.5..$.....@0..YO..X...aV.7.....X.E.....w...w$..H.....AV?..`J.OX2.....o..T..L.p,0.BQ. ..O.~R...A.9..Q2..iV.@.P..Ci...$.H..x...e...@*.....#.J..%"....;.;..P.C.\|....f.G..r......,f.....La.Q5v......M..b...w..S2L..i`H.q......sr..."is$bY...8f.3r.eA.I...#L792woX<....y.$3..;&.Q.(g.P..j../....$.`5.i.w.".;.M.>..>n5.p=...Lb).I

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 106
Category:	downloaded
Size (bytes):	111
Entropy (8bit):	6.260908830774675
Encrypted:	false
SSDEEP:	3:FttuzqAmh33qTuUB8JBxQg/eZYcZ3HVtGxPl/:Xt6S8TuUoxQg/eZYcdHVwxPt
MD5:	D216C55130DDFEF1A88D69EDD385D1F9
SHA1:	DDEB6E1E0834A616D63CE3FC2BB5D3F8B2B0B5AD
SHA-256:	EE9DC08D97B615A1C1452655D27F72234975F61A71D740958723A16D4D8F38AA
SHA-512:	E0F8C5949E8EB568F1427676C14C1BEE3074F7717EDD58BB4063A6178133676E23EC3065469D560F8B811860CE9C1584C125BFE47F2ECFF63443F59E2553808E
Malicious:	false
URL:	http://www.yishimei.cn/script/baidutuijian.js
Preview:	..........l.1.. .....;...p...$4.&d....t......5/...o.Y^W%.....Nu.7.f!....kR....G..(..=.j,.0.qx..[.;......s.j...

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 620 x 1245, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	167984
Entropy (8bit):	7.98202594838431
Encrypted:	false
SSDEEP:	3072:rZSeQjUu4YuF+12ic+fit6XCUd30sN4xsAd7UNVHGsEDJ9OGhB9jupx:rZSd4nFI2icPaCUdEsNSsAd1ZKKjupx
MD5:	D125F273833371EE3A018CBCBC8AEC86
SHA1:	57AB7ACD7221081FEF4508D3C527E9CC642F98E7
SHA-256:	D8EBB902B541CAE5EEDB3A5BF67AA464261C040341ED58BB20118FA951657FB2
SHA-512:	36CECC308888745022DA0D17333E193009CCEBBA27EAD3E1CDCAAC2CECE938676415DA2DE4F9E0F18DD2634AB84BBB68FDAE07DE183E5E72744D853F659CC37E
Malicious:	false
Preview:	.PNG........IHDR...l.................PLTEGpL)!1......))!...!!!...))))!!TTS.JJ...T2'dD2;200.....!.'......H@@......kUH7(!...hOc[\1E^.....(4L51'9BA.P8..n1)1.YF.sydR.th..x...@Sm......................yf...............sT...Kc\|[r...........)119!.................p....ppo.",.....[.........~;0...\|.......v.........S.!.........................y....'...............]eW.......ME.............)1).........6<.@*.....tRNS.@..f...^IDATx..[.k.H..#!..YY.f$F.A>...`{.@.....g.7..g_..........W..OK.$.q2.U.Z.vduW.W..v.;.......`.P....Waw........,.0.[Hn.>....mZ{YK....}..x.KB.....s..8..yI.>&.....B7.AQ..$.v....+.nI....k.u}.-=........s..l...Oa...W.h.&qv...n8.........].....9.......> E..q.G...0o....m........Lw>9g\...t.Z9.t3y.c....0$$...D1E..U]..../8`AFc.....^.u.O...?.y@;...j......!...b..ogH.?$\tgP...=UK.K....m!.X>r>..C.X7../.o~......v...qNFy..G..r....B.\1k.S..um-...p.z........}..s.....6.......C.9E(...kb.....wP.CT'....I+/ 8....s+P......F.1!.-...h.............

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 22
Category:	dropped
Size (bytes):	189
Entropy (8bit):	5.90915010115533
Encrypted:	false
SSDEEP:	3:C2lW///pySP4P//1ylVrtnllh/jO4tFgDzdY7gBlWwgWPL2LxF7yR31T8rT4MnON:HlgySP4/EO4ovdYqsAL2Lx8MrWZHce
MD5:	C89CBA11D0DA5AA9FB63E1F778E357F2
SHA1:	682E31FE6FB2509940739601A3D86EC5AD997D11
SHA-256:	EA2CB250EF63801BBDD53325E1BA59DCB84350732ED86E04703F04A8DEEC8DCD
SHA-512:	1E9852D4A03F96B096B9FE37EDB4536408BFE14DAB4477AAAAB223EF683344D9A2FB008339239A2A0D9BA08CBD309D19D8B4EABA93CBA8F76B811693715E51A8
Malicious:	false
Preview:	GIF89a,......................................................!.......,....,.....jP.I.=#..;. .u$...4.lv......sW...;^..#...b.sD..KM......j..h...`...r..M..Nw...[.B{. ..3\|}....b...].j.]..;

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 468, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	18489
Entropy (8bit):	7.977015167724451
Encrypted:	false
SSDEEP:	384:cW9io8sHwTQieOHAeqTlM7RBjzC0oXQqSr/zuu8qnZbv384QSug9JST:cWxlwAvG7RBjzXd/zuuRZT38vg9JM
MD5:	8D534AEABDB6D05D1A51A0DF17DBCA50
SHA1:	5C0E8504DB36956CD14C719959579B9D44307B6B
SHA-256:	6EAA935501B46FA4E899B85C79547F5D2DFD95DEE6B4BC6B2BDBBE5DC69CC44A
SHA-512:	2DA79FC6D1848FEFA6B5A9DDD5420EEF578919D80111A06E0D34EBAD704BE318F0F2D6040B0A5314E01D58F69C5D5BCFD68DCCA3F8B588D619B539922479F694
Malicious:	false
URL:	http://www.yishimei.cn/upload/2024/10/202410032222066242.png
Preview:	.PNG........IHDR.............T3HN.. .IDATx..}Oh\G.~......F.l.-E..3. ...o...i<... .....Ql.G.2 .@..4$ 4...,.0h1.9.9.xV.xfp.L.3&..I.M6&.7.x1...[.Ow.nuK..........W.N.nU....K....-...n%g...B...<.o.....?......o.....?......o.....?.>...?..+.3..@..x.+.(.B...L(..+^...1x..jp....0.F.....C>_.w_q.t....h... ../U.O....Qx.....'......o..=s..QC........mL............$..~.+1...2l.....~_......?.l.....U.aq...(.`....N.....-..u.l..p8n......F#.w...,&.}.. ..:.....A1.........[O..._.;n.;....&.?...R......~q....j....?ig..?j;MV.,......;.......9...0......c.e...w;...............A...n._.~.a0!l...p.......':...........P..w.S.....E......=:...im...@..C....?....e.-...&.l}.S...M..0.."..Y..j......t!.KY.i.{1..fE....%...aL;.I<...?`...\X44..._."k.Q.P..^...e.Z.=...q...z..f..q.x.}I .=...p..A.P..a........`^....'.>9^o.D0X..ro.........r.HY.....`..r.F..._./B`i'.@...\...-...D......I......v.o.t....r...p...x.^c.......K.ZI..66..6x..vW..[.O.C.\...!Pm...w.)..t.m..k.0.U@.....H..#P...."..2.UA..\.....C..\|`.s.U

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	827
Entropy (8bit):	7.720123455680749
Encrypted:	false
SSDEEP:	12:6v/7io5W7AFNuQrqZLJVG8Uc3gd3/Ohk0DZyhViJFo5iJIO+2z1xon4C6l0hq4Zt:xqNuQrCVG9cAgky88JD+wf/0gT+l
MD5:	5281E972EC463897022F56464011B5ED
SHA1:	2A719C124449E0C31A0166CEA7867BB1A44780BD
SHA-256:	A62D7D84BD02B1718106D294D1F2C8387F9967239696C1E8B446201B63F34DC7
SHA-512:	D5FC5821A1BA50F444665B01D3004EBD7546AE6B6A696C80CA4601C1ECDAED6632342381711055E65B86703D103BB38ABD3A591FB21254ED4C934F0E41968B40
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....IDATX..Ah.g.....Yk.J.1..Y.V.G/=.E.....^.."..T<....)..y.". ..]....J...DDdSc3..e).B.l.\|.......F..{....{..a...z.........F..l....kUA.T.tSY........n([..k,2;..^Z....N:..~.By..xm..7f....{-p+....hx!...k..s...f#....t.g...............M......=..f>.y."P.,../..Z;........\|T.pK.g._..Kz.D).Q.....Z.....c.........m.t...].~e.Sf.P..of...o..M.#.S...R..7..Ca`.xb......@..7L\J.b..M8wn........^f.\|9Z.,...[....=..8.\..a....(N....L.Fp.8U,.x%o..p..Q.#.J..1cg.b.d..i.TK...F.#.....p ..f.H.5(...$.q..[.C.$.:6."f.8.[oK@.u.q^....,..}.B?......\..... .._.OV...t...6\|...h..vIG..!...N..p......~..L......p.`4(...j.7....\g...i8.._..\|).7.g.;..N......o..v.{.......m..}?....{_....'TA.j.....L.!.O.qyv....*..X..>l.{.:._.?sg......}u.w..W.MDD.j..j..o..g.iq.q.....e..e\|.....t.."...r......IEND.B`.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.425638386930412
Encrypted:	false
SSDEEP:	6:6v/lhPk9LVwxPlhSAkFp3o1J8/ZaapsqN5dp:6v/7s9LV4gFZIJ8hjjP
MD5:	E8A575BCDB8EC7BE3FC87E234811C5B1
SHA1:	5AB0BED695EC5CEB1BCEBA7AF226A375A4461AD2
SHA-256:	0B253AEF5E474CCE4BAB6A0CBE67145D6CE2625B4AD45F737DC1A5A19972B25E
SHA-512:	B74A9E8487D179BAC52FBB2C8EA20DDE228C18D5EAAB432501934A4B4A926B9B6EEAFA34197D23A78EC652642DF47EEF50E547B9F362990AAF0DCB6F231AD277
Malicious:	false
Preview:	.PNG........IHDR... ... .....D......TPLTEGpL..................................................................................K......tRNS.-........V.,.&..5.:........}....dIDAT8.c`@.B<...@...H.HC.vyN>i....+..&.@...a...7?'..V.b`...8.>..C....@B...0.".........D.)`..!9..R..N..!G......IEND.B`.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32036)
Category:	downloaded
Size (bytes):	97034
Entropy (8bit):	5.318839773667727
Encrypted:	false
SSDEEP:	1536:k1qEgYaCibz6jHF1L+ntrI1ZxdKVGRgc159tWSZsjGjrYMkiCByjIxPZYaRoQPUR:mPntVZsjcFkssw/ZBMwBlZ
MD5:	F89DBF8F275E3C9144675C3F49959141
SHA1:	94CBB9B6C8D8E4E03B59A73300E8CF70E83FE3D3
SHA-256:	BDF6F9A5259B321625A79BDAF405530E7EC53999C30205B9A159A838A1C03595
SHA-512:	2E2CA137EC7DDABDE93460558AFCED639C48C28218D0D69F54FD271FFD13CC42C7EC432BB4EC8BFA52197C7111937AF9F1BFBBC576976CBE8A23109ACD9BEB74
Malicious:	false
URL:	https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/js/index_f89dbf8.js
Preview:	!function(e){function t(r){if(n[r])return n[r].exports;var i=n[r]={exports:{},id:r,loaded:!1};return e[r].call(i.exports,i,i.exports,t),i.loaded=!0,i.exports}var n={};return t.m=e,t.c=n,t.p="//newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res",t(0)}({0:function(e,t,n){e.exports=n(377)+n(336)+n(340)},334:function(e,t){},336:function(e,t,n){var r=n(337);r(document).ready(function(){r(".js_footer_ele").on("mouseover",function(e){var t=r(this),n=t.children(".js_footer_second_menu");n.show(50)}),r(".js_footer_second_menu").on("mouseover",function(e){var t=r(this),n=t.children(".js_footer_second_menu");n.show(50)}),r(".js_footer_ele").on("mouseleave",function(e){var t=r(this),n=t.children(".js_footer_second_menu");n.hide(50)}),r(".js_footer_second_menu").on("mouseleave",function(e){var t=r(this),n=t.children(".js_footer_second_menu");n.hide(50)}),r(document).on("click",function(e){r(event.target).hasClass("js_footer_link")\|\|r(".js_footer_second_menu").h

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 254
Category:	dropped
Size (bytes):	240
Entropy (8bit):	6.972506848000737
Encrypted:	false
SSDEEP:	6:Xtv4PVG6Wpw3AbudslVVqyr3ES+2H5U4J1HIbNZb+h5pp:XK38j4OVVq0EHg/HIbf+h3p
MD5:	15ADA423DD9E2201EECFA2BBEC26A64E
SHA1:	F74D7A57DB3C6EEC3DBE927B34CA5A920B20E9EE
SHA-256:	5C612D390FE6FE54962169E1B349D94D63F948B58B7F76D6525B9113F4A9FDC7
SHA-512:	409A0EE0D5195EF2A8F0A905335D8A03B2A7E171A3E8DFBB90DC46440D0EA28D9409E706FB444473F773915343577FFE2149158C9FE15E40B74E5741A99C58B6
Malicious:	false
Preview:	.............J.@..../>..C/HR.^j.I......`k...PSB.cN%...7}...G.\|..>.`...~....\|..sn..0.pM.K.H'..M..4T.T.._....<..kK.>..za.......!..'.%\....."1..=-..R..T.CU...i..k.}vj.-.x.....!]>..O..^._<...v..}.~....U....c.....n.Ra.]...d..U....

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (32769)
Category:	dropped
Size (bytes):	94839
Entropy (8bit):	5.372689725312414
Encrypted:	false
SSDEEP:	1536:8YRKUfAjtled3TmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUbCGvCu09s2o2skAieW
MD5:	B11CED65F32FEDBE9BF81EF9DB0F3C94
SHA1:	FDFD441E66831BFB8809E8CB69C2C3CD26B5D7C2
SHA-256:	0FB170F24675C84F8228AD6B61D69BF6705030949CC2FEC316B3A006EAB282F8
SHA-512:	864E5AA02E74823DE70E3914A9BA75413C9559E4508F72EE7D23993ACBF6488D69EF13A50E5B465BEE3A709B36664F38AEFE9EC0B8D9D86F4873F1AC552C64CB
Malicious:	false
Preview:	/! jQuery v1.7.2 jquery.com \| jquery.org/license /.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTyp

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 15286
Category:	dropped
Size (bytes):	2137
Entropy (8bit):	7.915684280703997
Encrypted:	false
SSDEEP:	48:XmKFMxpg3CoDjQgVHWMeY7cm0jMLc2vaZLKMtQslAEBNl9s2n8kNz:WHUDxybm0IyXQwXl9ekh
MD5:	32DAD3A431F6CA6CE8BF66BD169949D3
SHA1:	6F540F0E5969CC7023F7A6DBA068AAAA5BAD4C49
SHA-256:	B764D32B4617C218D3B1FCA2EC40595A9EFCEECF4376AA15E581CB2845FA271E
SHA-512:	32240393B0E19022EE89BB9202EEB494FD6F15EA260882128914A297FAFB8D1E0DB16E2CB350DE9A94F7CAA0EF5D251F248CC33B7AEC4C917AD59F8D4B11A24A
Malicious:	false
Preview:	...........Z{O.X..W.J........6...i...uV.42..X...6IQU)-.6<.n..,..B.).[.....2.k'..W...Z^.!..+.%.....{.......j.M!.Ku5bw]X..F.Yw.,.`}.......D..O/......,.5...........5.........;.........\|.G.U.n...z..l.6..qW..E. .Br.QS..8...F..\.=."].%...o4E..0.iDq...N$Znm.,..,..n......W.>E..4Hl.5-....,)._.......r....kc.9.4......e2.'n.........n...6>%...1>e...6W..`#...,.J.../...0.4.z;Q{.eXS6.>....Y...P..W.%.}..d.B.E..x.y\,l.a<..WMke..+...a.....]d`.\|.N..$..$_...+.~I.EY.nw..E.........OY&.."(....hH>3.M.$..`,..d...2...-m....$]..PX0...)..c....M.-.....D^.........Esg..O.!.....=.G].....0Uz6Uf.2.`....D.....m..=.......3....u...%..#='..bds.v*....\......_.%....1..V`..\|....E..%Q+...vU..4MTd...-....qUm.eB...s..1.\..Q...\_.jx.......aWEke"G......>#.r.$gHz...r;.w.7.t..bHU.x...j. _.@....0.O%..g.L.....^;q.Nt......m..H.x......f....b.L0."`z.@.H4.....y.\|p...I(zvt......J.2..}..W.3........r3 8.sfz..o...{.?^...>..wa...)4G....._.Pve..0.<M^.#.y...ci.\|.........t._0:)F.T&d.".1..@.......3sv.Vb

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1654
Category:	dropped
Size (bytes):	558
Entropy (8bit):	7.605045150068076
Encrypted:	false
SSDEEP:	12:X8mu1jqDqBbvPf975wNOl1wQW3tknIPiRK4XLVft6icapQ4y/8fb:XZ9MDrRnwnaEp4b1LhpkQb
MD5:	74FF88140C1FDB95C38FF6221B0D6B34
SHA1:	27393D78FE144F8E8772F7D36515266C9B5C3EA5
SHA-256:	378A15AB4A26E6F23480C0CDB96F9A2F8E4C0E5DA1DB25680E1E0C6E8FB934E7
SHA-512:	7CFD36775D7645A8556F843B93C9AFD6B7A1919C8642186D5C3ED6C1C9C150BA1F87F229683D9FB9E79265784C6FF9F2E7309B94F36F0380A515AA35533771B6
Malicious:	false
Preview:	.............n.1...H...%p.5Q/.P.$.@*P. @....ll..{6...<.'..........4).D$..........}W^6.8.g. Xw.........).XYv.......2....8........3...Q...4.....q..j.....l...s.&\|......W..nhs.j.{\|p...[;rZ.b....{.:..8...o.\<.@...h..+.....].........@..`..I.(of.0Q..L..G..D.!.u0n.o...$.2.\. ... .s.d%K...K...Q..,..j..Tf..1.b.d.w(....oKT.....D(..7...J.X."....._.+.n...8j.t.K..].,9v...B.i]..R...0....S.I..l.j.@..P...C...M.E.5.IS[..i_..2...`\. s.J..j+&[.l+..9m......U.._VR..X......M2l....:....-.._wF.G...2.Z..._.q..S.O..~..^H..O......pv.+<=.+.....G..v...

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 2 x 24
Category:	downloaded
Size (bytes):	55
Entropy (8bit):	3.889028803804377
Encrypted:	false
SSDEEP:	3:CHX/5aEZSxldlJsvV:WSjCd
MD5:	9F00C7C8FCEF7C05741328501C4D30F9
SHA1:	3DF22BBF9CDD111FE7739B178A46B48DD1C5AF54
SHA-256:	15898FF76C7EC549669BFCD88D0967EE888C9E2B98CE4A356521D90363C2BDC1
SHA-512:	9B6D9D99BE36D1722638AC5A427F593EF3C9C0577234DD47E03BE2DA12A5834C6D128D7A2B78CC92AD670926DD3D12573712A0661F72E0BCEABC94A68E133555
Malicious:	false
URL:	http://www.yishimei.cn/themes/j-spring/style/j-spring/nav_bgline.gif
Preview:	GIF89a.............sss...!.......,.................]..;

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 45 x 753
Category:	dropped
Size (bytes):	13656
Entropy (8bit):	7.931914473163624
Encrypted:	false
SSDEEP:	384:JFFbfx3QlO+qNHt82HquNpnwsN0X+ogM328XpkjXU:7FbZ3z+eHdZpN0X9/Fpx
MD5:	022E6687CDA398B21867DC5BEFF2861C
SHA1:	A463BAA6032BB937E5E8084929A3355B3210CFDD
SHA-256:	13FA447C77D34B947249F5CFB8B78A64035D6A5755C9873B91450D8145D62176
SHA-512:	F1F185D34959B6D27CDAEF381A0A0DC6EF1C0E760CEF7E02E7CCB172966A7C9E6F032B845D9874515EBC391EDFCB6F5BE6690DE59104DFB04F6EF43C7AB446FD
Malicious:	false
Preview:	GIF89a-......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,....-.......q. B.."y......"..P..D.^.j.5.M..y6l...H.Y.x...FD.<=z.!....A..s....x....Q..7nH...b..:.~....M..0..!..N."#p..3....P..K., p.....d..u....+W.:t,..K....au......j...5...:(>.h..).Y.`..c...:A....0.."x

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 462
Category:	downloaded
Size (bytes):	186
Entropy (8bit):	6.796724145396653
Encrypted:	false
SSDEEP:	3:Ftt+UZM7OI0nIRSgfRcNNvu7D3bWPehexZ9xg2UhmnL+d6ryczqcqiNN5E:Xty0nIRT5cNN2jWPehlbhmnL+dqqADE
MD5:	E0D1846F0E22D973188F251C8624A890
SHA1:	C1FF19D9050C9696408BEA68F3E913D0793DCC70
SHA-256:	F35D1CEA0A9984A47D3835A45018D7574C5D91114B558A9C79C7A99FF8D52093
SHA-512:	09FD00D6210211FE2708E9906DCB70850134228A6A7C93522DFD831BB05E5B0822EADD572CC16AF8561655135A45BB276B7E70B7F817335713EE9226E70771B9
Malicious:	false
URL:	http://www.yishimei.cn/script/ad_sidebar_up.js
Preview:	...............0.....w.o,/v..........m.....I..E.....t...f.h....{....I.mY'.h8....]y.4*..0H......I....SZ'U....k>..B.{..#.$...^...[..M......U...7/......._...a$t.......@.{}..9.<..r.......

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 250, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	24292
Entropy (8bit):	7.948211845738127
Encrypted:	false
SSDEEP:	384:canqE4hsfADqy65FMvmIpJ9UIr6VonJnFN2v772vH33qcZfTV2v3t9bvTjwwwwz2:cauyfIpJ9vrVFNw77WKcZ78vPbXwwww6
MD5:	9FAF74E0F9CDB401C356645BA30BB335
SHA1:	E34B3C24BB42C9D6B3ADB157B89BF5C4B11CDCAE
SHA-256:	6626B0962B024D9F8332505261B53557C693D74987A4E49650D27D4EBE64A755
SHA-512:	0361B2E562B39206407B6B77A6C0944DA50E4C65E4CD2A20FCC1B93F1C61EE633CEC2BA084AD16665FB4B3B4AA23AB6F51D8B0383BCAF69A358582C2C56DE07E
Malicious:	false
URL:	http://www.yishimei.cn/image/ysm_gzh.png
Preview:	.PNG........IHDR................j....pHYs..........+.....tiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmp:CreateDate="2019-07-15T05:40:07+08:00" xmp:MetadataDate="2019-07-15T05:40:07+08:00" xmp:ModifyDate="2019-07-15T05:40:07+08:00" xmpMM:InstanceID="xmp.iid:2818e64a-2203-5449-8192-ef15e81a5061" xmpMM:DocumentID="adobe:docid:photoshop:3dd91df1-c548-9e4e-9de0-667492e73e39" xmpMM:OriginalDocumentID="xmp.did:be201e86-93e7-cb43-af1d-42f9ae253917" photoshop:ColorMo

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2102 x 426, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	15808
Entropy (8bit):	7.887817596599795
Encrypted:	false
SSDEEP:	384:8cyFmOVDKv/ggaCwsI0pZXpliLPi5qpmD5hHr:8c4fVD8gvsFLWLq5/LHr
MD5:	6BFEEE13F3FD56248A37A219CF248391
SHA1:	C8D6DCEB14BFDD69FBF528DBAC177410B8408C2D
SHA-256:	274676A3F9EE7B6D883C666452195F092DA3B28B030A411C15C4684710B41E88
SHA-512:	4C54777C9070B11826BBE69DE4B44BF205591358E6D05BB23B366BAF7768DF65A79BD6CACAE35C4C904DDD65AB768187EEC27614AD1FDC6C93E4E10153588253
Malicious:	false
Preview:	.PNG........IHDR...6...........&...3PLTE...........................................................tRNS..@...`. .0Pp..%.8/..=,IDATx.........................................................................`..@.........TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU....M...0l...w.W....[A.L..yN.....v......................../q..........U..W~i.l.. ...........UU/..j..l`.d.lx.f.....s=...l`.d.l(n:.....l`.d.l(......@vE6.Y.A6...c<h.Y.)M=F....d.qnc.."..w;.....NC.<..h.6..&6...E.XC6.K\|...h..g6,k]'....K...E.o?....#v.t...l..j(..C\....a..I6.V........g..&M.a..'.r,."...{v...X...............!].$.<...9...f";.:n......7..p....ubCr.]..dC.7.H6d..N...Z'....X.>=........n..........{.I..l.I.]..&.uqe...b1'.<.R.E.H$.$.>{$2;.YL.W..#.....A^C6Tq5.~..........J6...U....i..}..V.....d6.od.[M.....u.^6...:.....r.0..a$.....igJSN......y...h../....]...f...p.lX..../?...7 ..Y#...3.l8..8K.~..6u6.QV...q....'..j..7G.p.5.....H"d.Y..XC6.p.5....5d.,....`....}...@6.......9dC..Q#...P

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 136
Category:	dropped
Size (bytes):	128
Entropy (8bit):	6.290557536662705
Encrypted:	false
SSDEEP:	3:FttP/HA8ZXuj3BpWFUjZQe9dzvbCC4TuXpWtn:XtHgIXephnzF4KE
MD5:	34A2F082D5ACDDBDE7F9D0C4BF31AA32
SHA1:	EB31C1367632F1D8A9CE30B7DC527367E766B9C6
SHA-256:	3DA576AE80AC24E269EF896AEDD7EEEC43171770B5B8A550AFF1966576DD7843
SHA-512:	DAFAE9391A3450892A07DB21A822040E954486BCE5D0740E3752BF5CD571B758B56FD7079E9AA62DEC606199FD65879B00EE8A7E4D0F5B94AA3DF0CBC3685385
Malicious:	false
Preview:	..........t.A..!....l..^Zb.EY<....+4n.......p....[.*..Jk=..N..s......1.\|...bH.+........z[.o...K.zK.'K.'k.......;.~>^..._.......

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 295
Category:	dropped
Size (bytes):	296
Entropy (8bit):	7.235409342006834
Encrypted:	false
SSDEEP:	6:XtB3gen0dwsiUwPEiZ2F2PgtfvEpuLmsPJRWPUxX:Xfgikw1NPfZqo+fMALm7iX
MD5:	36EE512DBC48005610EB0601CFD72DE2
SHA1:	81F95E27E4E403680F0FC113E459306097A45B9D
SHA-256:	1FA74C29393BAEB3F22E43B3B4444500840DF900BF5370278F8F2247BE64A21C
SHA-512:	33B07C8D23C62036A653230C38774B5218822E3527B8741CBB8510666BAB73A7F5FE370491A43ADEA6F9D8DFF79DD4CEA407603614B79EFE1D15B15049DBBE51
Malicious:	false
Preview:	..........T.J.@....w(....%.?.i\\|.....F.6...(8X. .8..RP......`Z....:...............:....$0.a9...+...#..8.Ex..cC.T6..........d....b.n.$A..0l6.p.^{..4]......8# .......}.o.6.;$g.Q...N..mK..r.W..z.&.+...s....=....%..].A.6LQ..8.&n...\.!..L.....>y~..q....8.-...{Y..U......~W4.+........dZ'...

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1110
Category:	downloaded
Size (bytes):	617
Entropy (8bit):	7.623071966553142
Encrypted:	false
SSDEEP:	12:X0eJRs3xoRNSH/7BFcdgkXUI4jcSmHtvcYzi8c8Z7Kql6gDotMLhQaMRD:X0Wu3CyHDBOgkXWmHtvcYd/FKKZo53h
MD5:	B0E1749DE0C4380FD8797264075D1E74
SHA1:	D5D885AF9D1DBB3C46E634F9F4FA1CF0FB11D629
SHA-256:	9B36D6CC4EEC75A47A65E9B026D79C17B2ADB2658096A9C7725CB700B2608398
SHA-512:	E0C82CA7CF3F55F704FB06615D7C6E5F97EC2171AFC5EEC4AADEF5B0D2687C2D2A9A5CCE70C64E64DFDB75419BD59CDF712BFE5DF376FCAF1F8E609578833A99
Malicious:	false
URL:	http://www.yishimei.cn/function/c_html_js_add.asp
Preview:	...........RAO.M.>.......lj...1.E.F..ri..f:;....lff[+Cb$F/D/..ib"^PoHP...._8.......if..y.y.gfr...%.(.].+..,.:....!..f.0...q.....o.WoO.......o..~......d..c.........G.y.......g.Q.58zy.s.E....W....ry.q...ba.O...'+..`.X,fh...U...,!..%.....DW..x.P..K..W>e...u....<]..O..B"].i`..G.....y\.]j"...C]b-.....]1.;.&.J/".L..442FT..S....L.....(.`...p.xd.Q.1S......8.C......l..+...7...Dw#YsSN....4R.o..N......$.[.+.....1#...@pev..y.N.[y.ue...q..?....8%...(rIH......YC...).h.zp[......v...#.k.."..$.3..$W.h.^...e..P.M............."n....9.....x@+.7.CJ...%3..[.y....y...C..H......M+]7.7q.;$.....=...#V...

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 22
Category:	downloaded
Size (bytes):	189
Entropy (8bit):	5.90915010115533
Encrypted:	false
SSDEEP:	3:C2lW///pySP4P//1ylVrtnllh/jO4tFgDzdY7gBlWwgWPL2LxF7yR31T8rT4MnON:HlgySP4/EO4ovdYqsAL2Lx8MrWZHce
MD5:	C89CBA11D0DA5AA9FB63E1F778E357F2
SHA1:	682E31FE6FB2509940739601A3D86EC5AD997D11
SHA-256:	EA2CB250EF63801BBDD53325E1BA59DCB84350732ED86E04703F04A8DEEC8DCD
SHA-512:	1E9852D4A03F96B096B9FE37EDB4536408BFE14DAB4477AAAAB223EF683344D9A2FB008339239A2A0D9BA08CBD309D19D8B4EABA93CBA8F76B811693715E51A8
Malicious:	false
URL:	http://www.yishimei.cn/themes/j-spring/style/j-spring/nav_bg1.gif
Preview:	GIF89a,......................................................!.......,....,.....jP.I.=#..;. .u$...4.lv......sW...;^..#...b.sD..KM......j..h...`...r..M..Nw...[.B{. ..3\|}....b...].j.]..;

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 462
Category:	dropped
Size (bytes):	186
Entropy (8bit):	6.796724145396653
Encrypted:	false
SSDEEP:	3:Ftt+UZM7OI0nIRSgfRcNNvu7D3bWPehexZ9xg2UhmnL+d6ryczqcqiNN5E:Xty0nIRT5cNN2jWPehlbhmnL+dqqADE
MD5:	E0D1846F0E22D973188F251C8624A890
SHA1:	C1FF19D9050C9696408BEA68F3E913D0793DCC70
SHA-256:	F35D1CEA0A9984A47D3835A45018D7574C5D91114B558A9C79C7A99FF8D52093
SHA-512:	09FD00D6210211FE2708E9906DCB70850134228A6A7C93522DFD831BB05E5B0822EADD572CC16AF8561655135A45BB276B7E70B7F817335713EE9226E70771B9
Malicious:	false
Preview:	...............0.....w.o,/v..........m.....I..E.....t...f.h....{....I.mY'.h8....]y.4*..0H......I....SZ'U....k>..B.{..#.$...^...[..M......U...7/......._...a$t.......@.{}..9.<..r.......

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 356 x 96, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2445
Entropy (8bit):	7.799691809849496
Encrypted:	false
SSDEEP:	48:PZKjAqqQswWA01m+RN6ypo5jTPA6I2s5cvA6rrOaaVl2O:hRqqQswCA+RNG5/7QcvA6rrAVV
MD5:	7EAFE952FDF131B0D254ED55E02C4BD5
SHA1:	0ADF981C202D3C0D1352FF0316066B7457D1C09D
SHA-256:	30E61AAFD210C9811C2CCD56D7DFFFCA753922892E1F74C3C87E99C7755B37A0
SHA-512:	AE42D03ED40EF199C6502DFFA6719187E6C8F0A3BBF251AFC5298B5D0DF1EE1152F743F78623E1CAB9A83CE786FDB2E1DC4BB995771FCE4B75752E7CA87E5AF0
Malicious:	false
URL:	https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/3MmDWEv.png
Preview:	.PNG........IHDR...d...`......#.....uPLTEGpL................................................ @@@........```................000PPPppp...ooo___......OOO...C.r.....tRNS. ...@...............IDATx..Yc....io:w9...Z-.n..O..ZLY^.'v....&.()....t.eY.....%.....oYo/....._.,.^.J$.i..dY.....e...;.~d.'....YR.......z. '..r..9AN..%..r..9AN.....................[.\|Z....^<..l..-.?..y...+....... @....y?0.5..B...E..d.._Q...[. ..H..G.....L+U.D&o.....v"9O#.ND.DD&.."....d....<.u{?.'"...........\.'G..K.....Y..<..6P"r0T`/e.....Pv.r"...."....xF..]..DE.T.?..j.."b...`>..f.XD..Jb.D.!x.@D.......z...a..i............."..D.Z"..%.....&...T.......k......#..@..y?. '...<+.c...7C._3(. .D.....g?R._....Y1.&..6..sg.....o2.5...f.I......8z<...q.../..AN....\|.^..9h.\..!..''.%..._.:.YA$../@... ..Zk.g....=....k 3....b`.....T.....0T.%....r8c= .@W!.$$...w...r.....P.\|.r-..6..".D.e ").]B.!x".P..A7..~........!........I.d.S.n...A......^..M.i.9...~..6... L...<.......C(..../!+6.....]....3.<

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 250, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	24292
Entropy (8bit):	7.948211845738127
Encrypted:	false
SSDEEP:	384:canqE4hsfADqy65FMvmIpJ9UIr6VonJnFN2v772vH33qcZfTV2v3t9bvTjwwwwz2:cauyfIpJ9vrVFNw77WKcZ78vPbXwwww6
MD5:	9FAF74E0F9CDB401C356645BA30BB335
SHA1:	E34B3C24BB42C9D6B3ADB157B89BF5C4B11CDCAE
SHA-256:	6626B0962B024D9F8332505261B53557C693D74987A4E49650D27D4EBE64A755
SHA-512:	0361B2E562B39206407B6B77A6C0944DA50E4C65E4CD2A20FCC1B93F1C61EE633CEC2BA084AD16665FB4B3B4AA23AB6F51D8B0383BCAF69A358582C2C56DE07E
Malicious:	false
Preview:	.PNG........IHDR................j....pHYs..........+.....tiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmp:CreateDate="2019-07-15T05:40:07+08:00" xmp:MetadataDate="2019-07-15T05:40:07+08:00" xmp:ModifyDate="2019-07-15T05:40:07+08:00" xmpMM:InstanceID="xmp.iid:2818e64a-2203-5449-8192-ef15e81a5061" xmpMM:DocumentID="adobe:docid:photoshop:3dd91df1-c548-9e4e-9de0-667492e73e39" xmpMM:OriginalDocumentID="xmp.did:be201e86-93e7-cb43-af1d-42f9ae253917" photoshop:ColorMo

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19256
Entropy (8bit):	3.533406715217127
Encrypted:	false
SSDEEP:	96:VSMllcHitlIxv9vk7C1+I4wWHLihk/xGWvki7rxmVKXUsDEVWvdNGthls+GfNXrL:VSHIIHUCD4wabkijpso15909rfEx
MD5:	D0289DC0A46FC5B15B3363FFA78CF6C7
SHA1:	29C400BC3B89F6085766DAC4E0330DED5CB73D52
SHA-256:	A20583C81805FE64F7FA210851CE29754AF9D25FD6AA5A3225A9557529602513
SHA-512:	10A9CD6FD64B8107DB8B058EB8C4CC0FE23BB5C13A91D40CAF93D323F4A15F1B34463BF0EACB0239C6DBD699EC6C49A8625E86CEC674CC7B351509155B889E7F
Malicious:	false
Preview:	.PNG........IHDR.....................pHYs................MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 276
Category:	downloaded
Size (bytes):	208
Entropy (8bit):	6.878646674838733
Encrypted:	false
SSDEEP:	6:XtJbZylQeM9vdrb1zQrl7YtZZ79EVWG4v0:XXbZLeglk5Y3ta8G4s
MD5:	07949206410A1603EA39344FF4283642
SHA1:	016122268582C933545C76E6617F91EE90298E3C
SHA-256:	0D5ECBCDBD03F704695C6319530FF86E5871E8C2C72FB1D0E54F8C54FB5732A4
SHA-512:	C18398EC60D7DC7C792DD1C24DEB5E4852CD12B05D77DD9B985D319368840330A0478A943BFF19A754E8CA15A69C7D2A2CCE4752B6DEFBAC92CFD7404CA7CE12
Malicious:	false
URL:	http://www.yishimei.cn/script/ad_article_round.js
Preview:	..........tO...0../.?./U.&ZvY.w.....&O.44om..........a............F$..vs.xe...~.jBK^6.w...t...G....&.CG*ik1...I>..G.Q.....n...fy.B(.V...zY ...1Z...L...z.......%...^0{..........I.u....s..m./.Wq.......T....

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 9182
Category:	downloaded
Size (bytes):	3349
Entropy (8bit):	7.938145272577287
Encrypted:	false
SSDEEP:	48:X+u0eYt29mV2VNYVOQ5ahFzdm40ST9iMBUAb2kF77GetLPeZu0gOyOf3r/AvOO:O46GVNYVOlRm40ST8MB/VjeFgO1f7/Av
MD5:	BF2A25307A872B56A43F1E6EACEBCF09
SHA1:	64CB9549CC86E2AFBFE42BF72AA0FB6A195A5F95
SHA-256:	B5369659AE74046C890DA6F6D46A57E728705FC893B81366214A705BB352456D
SHA-512:	48CFD15530F9DA26BE41C3F70997FC82E2D7DF01A7E97C21E50CDE0067E25D9099763F6D2212479551B505C6FA6CA83F2C40037FAE2A97D22BA7D0A5551D0837
Malicious:	false
URL:	http://www.yishimei.cn/network/319.html?=23:28:29
Preview:	...........Z.S.V..9....jg..;.,?....7!i7-i..m...#[...".<... PLx&...y..l..y..cf...J.O...\].dc.M'.A...=.s...s....n.G./...{...0..u.sm.[).a.oB.,{..<...._j..>?.q...."s..^....a..,........-....aY.<......>.......3.%%Y.W..hjj".i.Y..x........[....}.%)....1.....[...d.i.W.....0m.}.....b.N..#.2:.F.=ZL.L...^Q.$.@.K.a.G.zUE3<]{E.H.y.G...}s..e..'1z...0..0.....G..01......2...H....).`4...D.3....(J.SEM.=B...fA..%..sU9..#p...5DC."._..V.[.....2..(...K..pi........N.7.\|-...W4.K..T....>....o..u...Y.w.;..X...oZ..sn.z<..2o..+..?`.k..3E:P-,.R..^.c..b.{.)....Da.%....2...o.X/rV....f.....+.`.l:hl.....v..t.!b...x!t.....{.f...$S... ..y.Q...`f/.........$..&HaZ7.%AO....hU...@......D_Lf....t...UM........}1].q:x. vb..h)."...4A....$C.dLlg$.G.c.v.....>.\...).<...X....M ...'.d...S.@..HM.G...BQ..;.0.....".....uq=..@GZ.....L.1.p...7;.........)...P...!...Q...D.....-Q..b......$.N..C.<...sV.h[....N..D.'.O...+i<....$%.}.x...@G....@.D....x5.u.......D...8...\.9N#.`(..[.......)._%.v.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 332 x 332, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5167
Entropy (8bit):	7.333065509932749
Encrypted:	false
SSDEEP:	96:fqAe3dKb3+/KMEWjttyF0sTAdevguJ8/Gbz+/E9:ftbbyK+t34keYOBz+/E9
MD5:	5496C1924FD485D9C8E2541434A1B3DC
SHA1:	84D2DD027A1606E626B443772154F7C23605426A
SHA-256:	BDAE8284141567888D1BE53D094325242DFEC516845A7F87D47B6FD93F736864
SHA-512:	F615A95F83BCD8E61D9E9FE93A668B1FF60A25DF0675EF2A663A34FA90489EDFB7548F9430F488B6AAABF6EB9F17ABBC3E0A57FAFE4FF95C12F8CAA9D73C78D8
Malicious:	false
URL:	https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/3ou3PnG.png
Preview:	.PNG........IHDR...L...L.......um....PLTEGpL...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................5......tRNS......"..........B...J.......Z..f......{.4w.h.1.........~.'.et. ...=.2`.T.>P.!c%.\|..)R3....-p..YA.o$.,.@Ei+05}...Vz..K.I...d&.^.*N.r.9bH....#......n.s..y;.x....m...X..v.W8.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	769
Entropy (8bit):	5.213396336915652
Encrypted:	false
SSDEEP:	12:6v/7sYGLb0EnW2k1vsNFXbd0ZkWh6TWejXmY7fnS:hG0WD1vMj2hQW4bnS
MD5:	BE8CA9C3C5A9845A868A070C6CE17939
SHA1:	A882C9FB868B00A18B7DCEC422742E57BF659517
SHA-256:	9F3619F7FB23D72C6C88E1D9CC222828A42A4335692D6784E38075DCA445359A
SHA-512:	34FA2C083919A04562E0F6562C1973E142D4A09B78B6031B0E60C8D12167D9D98264B4EAEB20B4552AE800362834CB484FCBB323BE96220E6E598033B3395C58
Malicious:	false
Preview:	.PNG........IHDR... ... .....D......GPLTEGpL....................................................................................................................................................................................................................................................................................................................................~Q2....ltRNS.........D. ..q.......Y."b.......-......y.Z_!.s}^...X.)........F..0.f....At..~...x........w=(..p[..c4.X.^....IDAT....Uc.`...k `w..........C....?1..\...i.\|....L...2O.R.@...zzY.}.pO.-.b.U/o...-Io.....\|..c.{...Q......K..z...$.h...t.Pp..?.G..........S......v\|....?.M.....VC.0....h.29..f...m..Bp.W.K..\|ks.5.0K.S.'Ct..R(.t.j'......h{7D..}....VbIq.BMuj...o.....z(....IEND.B`.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19256
Entropy (8bit):	3.533406715217127
Encrypted:	false
SSDEEP:	96:VSMllcHitlIxv9vk7C1+I4wWHLihk/xGWvki7rxmVKXUsDEVWvdNGthls+GfNXrL:VSHIIHUCD4wabkijpso15909rfEx
MD5:	D0289DC0A46FC5B15B3363FFA78CF6C7
SHA1:	29C400BC3B89F6085766DAC4E0330DED5CB73D52
SHA-256:	A20583C81805FE64F7FA210851CE29754AF9D25FD6AA5A3225A9557529602513
SHA-512:	10A9CD6FD64B8107DB8B058EB8C4CC0FE23BB5C13A91D40CAF93D323F4A15F1B34463BF0EACB0239C6DBD699EC6C49A8625E86CEC674CC7B351509155B889E7F
Malicious:	false
URL:	http://www.yishimei.cn/image/beian.png
Preview:	.PNG........IHDR.....................pHYs................MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 998x136, components 3
Category:	downloaded
Size (bytes):	35772
Entropy (8bit):	7.950437186982944
Encrypted:	false
SSDEEP:	768:bSqL+TPgfZ86dwJLjKPJSPMdoELPSZGJ3Qe6oVuld3R:bf2ofedJ/KUM2ELWCD6oVubR
MD5:	789CC938E96AF1C46A2BA4FC34A8BE8C
SHA1:	932D2BDFB8E7618BF04CADA87243AA922D402174
SHA-256:	6E37558D3922998AF62184E8DA81D058ADC8D533492A34CACBC1DFBAF4A1E433
SHA-512:	F0A1C0329E266BF33E8E29DEDC1F8D8C3481442A30014EC340408250EAECCB7C92D7606B23CB2B5C145BB36BAE876732335A19755CDD0311ACF86EDC4E619538
Malicious:	false
URL:	http://www.yishimei.cn/themes/j-spring/style/j-spring/toppicw.jpg
Preview:	......JFIF.....`.`....."Exif..MM...........................Ducky.......<.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..L.......@.[...n..>m.6..+P.nU$..s.w..z...^.{(.F.H.!..u.=.....F.5.R.TOS..4.x=...cm...9.O..v....;H.[.....=,..W.]...i.o..P.>..<D...v..hQ.v....1...C.7;Cy.n.......p9..s...k.-..u.rFc.,p..8=..#.j......o.7...&$.'...\.1...U.{).ibl.M...3..i..K..a..Ve8.67..?.j.....-...%...k..0M&~.1m.o........_K...QB.>a......;.V....h..A

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 96, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2242
Entropy (8bit):	7.812177560716048
Encrypted:	false
SSDEEP:	48:tcOai04H2MmQnNZ7HUFwkn15xDSWMW3gpg94a:t70222n/70FwknApgd
MD5:	624B20EE57C48301212460B460A47EBC
SHA1:	99E3655AEEF0E4DDC3B3A45052591F7A1240868F
SHA-256:	B2776425C088D2B7FE3AF7F31DE3F1D6B53E700414000E67E9579E022DD8D70B
SHA-512:	E5ED26AFBAF59FA123B35EDD5F72C8F5519C94E3B0C054A76F5F5E83F31785EC262EF9D929BA5A6222DAF486F4921252449CEED1B4256C1D0AB2D057248F681E
Malicious:	false
URL:	https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/uq8YAlZ.png
Preview:	.PNG........IHDR.......`.......l.....PLTEGpL................................................@@@.............. ...```.............pppaaaAAA........___...000ooo!!!...PPP.........111OOOQQQqqq...........!..m....tRNS. ...@...............IDATx...[{...`.3.Ng..d[.EL..1.rj;......9....x]4...7Z.-?x..y_.}...?...+.... ..+..?.."...<o..M..O.B.....5(4...F.V.....l.8...c..8...c..8......Cp(.y.MN.a.0}.7.....r.>9..;..".z.....q..._q.P.on...I%.T..#...Er./.p.4"....!).A.AR.....O/.5..Y.2W.CMW.{q.....7.}].3.Z.}9. H.T&.&E. ....+)#]7..TS..Qu.VI5.8V....."...9.b#..@.a1&WP./1.."9."i!8.R.)nM.1...G.#..s..I.H...%..y....a...l.9....@L...v.P9...!SG......#..&...2..\|.5..$.....@0..YO..X...aV.7.....X.E.....w...w$..H.....AV?..`J.OX2.....o..T..L.p,0.BQ. ..O.~R...A.9..Q2..iV.@.P..Ci...$.H..x...e...@*.....#.J..%"....;.;..P.C.\|....f.G..r......,f.....La.Q5v......M..b...w..S2L..i`H.q......sr..."is$bY...8f.3r.eA.I...#L792woX<....y.$3..;&.Q.(g.P..j../....$.`5.i.w.".;.M.>..>n5.p=...Lb).I

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 43233
Category:	dropped
Size (bytes):	16278
Entropy (8bit):	7.988344278247254
Encrypted:	false
SSDEEP:	384:Kogs+7xP5qR5baNnS3bhgROyL7kxbTrhrqz6:KojjbaNnS3bNyL7k5r9qz6
MD5:	F2E2712409307FAD3C1A6AEC745A6CE5
SHA1:	4866CA23308B734D504297EC96333B24D606240C
SHA-256:	8DA60A9A5594A246AB8DBB5C739800E8C6020B1167B4F2F6426C463BF60E1C7D
SHA-512:	A9A42DC071EBE9441BF475A6087DC810AF3C1AB339FB90C0E30F076E9273635C0EE549DBF1FEDFF5C8FB43E0D81E7D7A46FEB0AFAD6EB99CC3696F582797C51F
Malicious:	false
Preview:	...........{s.J.'.wM.\|...-.&..._&....,.%K.e_J..A...IP........................2e....W..9....}.[.n.].-..<.y.....(......,.M]..yf..oq....gT....T..w?.._...7g.;jh...O..w.......~....u.^....o...p........w........0.P....}.h.^.+:..\|._...../..?1.L)....uZ..O.......,:..{..HT..o.._.....O...p....\..........~...}.g.?.._............o............&...o..o..?~....:~2....n.....-.O..i.S..c.4u......;.. $0.]...A...TO#.R...^j.....z..z"...\|u.vR...{#......0......~J.%...r...}#<.E...H=..L..\......2.V..0..\9c.)...T.R*...r)u.=.S(_...LK..-w..4,.-Q.Z.'nGm.{^..{.@wuO....P......~8.....P..;....P....iiU....\.]X...A.e4...J.......;Z.3..U.M.AS.[X0....z..}..E..].....f2.._..yU....Z.........:.z\.pxx.^.T=.T.=c\|.T.8....$a.o.?..hU_H.i...Z...-.r..D]P.`..j6S+s..D..N.....c.1.sG.a...h.d.]m-e.R+\U]KQ..O.....e.V....._;...w.n.wU#:<.i.{Z.......4K.V..b..g.O...[....E..w.q..].Ou...P].5..y.[3A.9O#..As.+O...f.....a.Pm.Q........%k..f.k..R-w..%c.1i.....v4..$.'.QRT.{..1yv..

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1010 x 1
Category:	downloaded
Size (bytes):	121
Entropy (8bit):	5.721582689452201
Encrypted:	false
SSDEEP:	3:CalWlxTzKNgUiA//Lldlld0nqFb67NCVkRI6JK0afXUQTkE:jMjTmNgUD1ld0A8UWu6SfB
MD5:	36C53B4698DF24BF290E510D98D15C77
SHA1:	4FA538B94C9DE7E364B08D73B21373BA2434C91A
SHA-256:	61D9595A377C4F77AB0035B048B3E81C51A0DD39CC6C625FD7DADAB430C87E86
SHA-512:	0CE984E841FEACF133C223A28258E9C6A57AB512358F81725BA0BBC681293C9251E890574C86C10381244656332B657975C3DF2F07B3AEDDE153AF46909A67EF
Malicious:	false
URL:	http://www.yishimei.cn/themes/j-spring/style/j-spring/bgw.gif
Preview:	GIF89a..................................................,...........P... -...`(.di.h..l.p,.tm.x..\|....p.1....C...;

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), truncated
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	3.6669884365580274
Encrypted:	false
SSDEEP:	3:FttglVYyjnl:XtgVYUl
MD5:	AA0137A4F523E98104D99C84DD2F2AD2
SHA1:	E397EC645A880E0A8BF4BD9FAC357F5C83A8516F
SHA-256:	F3AAF638F2616C99BFD971C99CBE3CB430EAB3C1F1240D7643B2BE14B6115053
SHA-512:	AA43B30F69B5348E553FFDEC01236A7896751A8D71B45019270A3A2E7522BD15B345222CCA62576453ECC71A40A4BEDD9D7373181DDABB8D4ADA565CCCB038D5
Malicious:	false
URL:	http://www.yishimei.cn/script/ad_daohang.js
Preview:	............1....@....".`..........

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 254
Category:	downloaded
Size (bytes):	240
Entropy (8bit):	6.972506848000737
Encrypted:	false
SSDEEP:	6:Xtv4PVG6Wpw3AbudslVVqyr3ES+2H5U4J1HIbNZb+h5pp:XK38j4OVVq0EHg/HIbf+h3p
MD5:	15ADA423DD9E2201EECFA2BBEC26A64E
SHA1:	F74D7A57DB3C6EEC3DBE927B34CA5A920B20E9EE
SHA-256:	5C612D390FE6FE54962169E1B349D94D63F948B58B7F76D6525B9113F4A9FDC7
SHA-512:	409A0EE0D5195EF2A8F0A905335D8A03B2A7E171A3E8DFBB90DC46440D0EA28D9409E706FB444473F773915343577FFE2149158C9FE15E40B74E5741A99C58B6
Malicious:	false
URL:	http://www.yishimei.cn/script/tj-bottom.js
Preview:	.............J.@..../>..C/HR.^j.I......`k...PSB.cN%...7}...G.\|..>.`...~....\|..sn..0.pM.K.H'..M..4T.T.._....<..kK.>..za.......!..'.%\....."1..=-..R..T.CU...i..k.}vj.-.x.....!]>..O..^._<...v..}.~....U....c.....n.Ra.]...d..U....

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 43233
Category:	downloaded
Size (bytes):	16278
Entropy (8bit):	7.988344278247254
Encrypted:	false
SSDEEP:	384:Kogs+7xP5qR5baNnS3bhgROyL7kxbTrhrqz6:KojjbaNnS3bNyL7k5r9qz6
MD5:	F2E2712409307FAD3C1A6AEC745A6CE5
SHA1:	4866CA23308B734D504297EC96333B24D606240C
SHA-256:	8DA60A9A5594A246AB8DBB5C739800E8C6020B1167B4F2F6426C463BF60E1C7D
SHA-512:	A9A42DC071EBE9441BF475A6087DC810AF3C1AB339FB90C0E30F076E9273635C0EE549DBF1FEDFF5C8FB43E0D81E7D7A46FEB0AFAD6EB99CC3696F582797C51F
Malicious:	false
URL:	http://www.yishimei.cn/script/common.js
Preview:	...........{s.J.'.wM.\|...-.&..._&....,.%K.e_J..A...IP........................2e....W..9....}.[.n.].-..<.y.....(......,.M]..yf..oq....gT....T..w?.._...7g.;jh...O..w.......~....u.^....o...p........w........0.P....}.h.^.+:..\|._...../..?1.L)....uZ..O.......,:..{..HT..o.._.....O...p....\..........~...}.g.?.._............o............&...o..o..?~....:~2....n.....-.O..i.S..c.4u......;.. $0.]...A...TO#.R...^j.....z..z"...\|u.vR...{#......0......~J.%...r...}#<.E...H=..L..\......2.V..0..\9c.)...T.R*...r)u.=.S(_...LK..-w..4,.-Q.Z.'nGm.{^..{.@wuO....P......~8.....P..;....P....iiU....\.]X...A.e4...J.......;Z.3..U.M.AS.[X0....z..}..E..].....f2.._..yU....Z.........:.z\.pxx.^.T=.T.=c\|.T.8....$a.o.?..hU_H.i...Z...-.r..D]P.`..j6S+s..D..N.....c.1.sG.a...h.d.]m-e.R+\U]KQ..O.....e.V....._;...w.n.wU#:<.i.{Z.......4K.V..b..g.O...[....E..w.q..].Ou...P].5..y.[3A.9O#..As.+O...f.....a.Pm.Q........%k..f.k..R-w..%c.1i.....v4..$.'.QRT.{..1yv..

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	292
Entropy (8bit):	5.425638386930412
Encrypted:	false
SSDEEP:	6:6v/lhPk9LVwxPlhSAkFp3o1J8/ZaapsqN5dp:6v/7s9LV4gFZIJ8hjjP
MD5:	E8A575BCDB8EC7BE3FC87E234811C5B1
SHA1:	5AB0BED695EC5CEB1BCEBA7AF226A375A4461AD2
SHA-256:	0B253AEF5E474CCE4BAB6A0CBE67145D6CE2625B4AD45F737DC1A5A19972B25E
SHA-512:	B74A9E8487D179BAC52FBB2C8EA20DDE228C18D5EAAB432501934A4B4A926B9B6EEAFA34197D23A78EC652642DF47EEF50E547B9F362990AAF0DCB6F231AD277
Malicious:	false
URL:	https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1TQxEzr.png
Preview:	.PNG........IHDR... ... .....D......TPLTEGpL..................................................................................K......tRNS.-........V.,.&..5.:........}....dIDAT8.c`@.B<...@...H.HC.vyN>i....+..&.@...a...7?'..V.b`...8.>..C....@B...0.".........D.)`..!9..R..N..!G......IEND.B`.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 2 x 24
Category:	downloaded
Size (bytes):	169
Entropy (8bit):	5.085011075703233
Encrypted:	false
SSDEEP:	3:CSXAamou7tSlRnn/DTXpBXPaf4xwM/7yl4rtnloFTWKHrBg0hcyJ9DVe:bQjz7k/HrQ5WwWxa9D0
MD5:	C96297843FF50453633F003A52EFBC28
SHA1:	F3B9FF69BC5ECEBC27D918341E81EE42A2C8F236
SHA-256:	2718477439F28A0DD13D01EBB432C7E2530420C8E389797FDBD1C4204D361DCA
SHA-512:	C01947624B0318443CBC8E181A5AAB265565C8155677FAEB5DAD302F374EF5BE53597E65280903C7DC98934B0061C4B93BB634C3AA1D72E166D29D3F56DE110D
Malicious:	false
URL:	http://www.yishimei.cn/themes/j-spring/style/j-spring/nav_bg.gif
Preview:	GIF89a.............vvvMMMKKKHHHEEEDDDBBB>>>:::666222000...,,,***%%%!!!.......................................!.......,..........&. X..4..T.EM.$E..9..,..$...`(....@.:.B.;

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2880x1760, components 3
Category:	downloaded
Size (bytes):	92578
Entropy (8bit):	7.574635568665834
Encrypted:	false
SSDEEP:	1536:JzLikH3OJglvwiFD5/5jlc8nB6dLeZKRq5nfXNY7ydeyA+cIAEJ:M+X9wiFD5/Fl3nBBKRq5nBeZeJ
MD5:	892E1D57BC6289186C3DC0506C1C760E
SHA1:	6258BEDE2054602E1AC3C1806213D8F4BD403184
SHA-256:	B892B1299D03BA635EF48036CFBBECDB3BC5CB9101DC26A823ED721AAA701A78
SHA-512:	C6BE98342BC7D63A35C43B31EC970E710B140E1A4909AF5692B754A81242D3F7A0B86685B221B63B2406A0B3A4D87BB29569C383F196F66E43A890B1E74597CC
Malicious:	false
URL:	https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/3cBQnDI.jpg
Preview:	......JFIF.............C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;........@.................................................................................m..$"""(."5R.U...........`N.....OUz...:V.BE@.0b9.9....&..s..s^Q.....+.t...'J.f.f.F.C".Ng..e.'.xK.\...z.I.OEwN......"....%..9.#.q.....C....+..DUHR!Y P.....^k.....S..:....""""""".X$.%(..BBD$....@...."$$U$DBDDD@d...a2.....n.."" .3....K.9...../.....!.TDBh.vt:..f..TF..r9....LJ......1\.....4..............!.U.4."T.dU..%.q....q0GH.o.OQ.='..]M...2d.....`.0..f%....b\..MV....k.t...&.F.k.U.2s9W../.<.....X.......+f.I"....b!(.5..r8.)y.(.u;GZ.uM.4"."........yK.y/9p.h.....,.5bBDDDDDDDD.D....DD$%bK$.(......+..l...X.""".&.k..*.:...h........k.9.N+.8.....s.5....T...F..f.&.D.LG3....\.F.U..5..9.L.2.......T..o..5.........j.l.H.9....^....^.zOQ.=Gs...V.@..0s9..fL.0`..r.0...M...vt...Y....F.P.FLW#.y..U./.s..^..='...J.(.DQTD@D.......

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 188
Category:	dropped
Size (bytes):	178
Entropy (8bit):	6.787064482550703
Encrypted:	false
SSDEEP:	3:Ftto1xhDqJAM616+dQsoZAUrh/zXluXM3bwGEAPj7tJsxXeFqI1frWtZcPRpkTwn:XtsJIwdaZAJM3EGEAP3tkeHfr4GPvksn
MD5:	B12DE1B599160839B10DDDE005826D9A
SHA1:	D1DF979168574AE19E52F7DAF9A0E2B8B75E684F
SHA-256:	7DFEEB7471D4A495C8EAAE1D69D99E87A4B5F26F88739813DEAB7F71D9980593
SHA-512:	325FD6EBA2B65E4F39EC474B33E2F3EAAD22EF25946FFE8765DAD629B7118B159DF27A1C97F87C000FB0AD9D7C2E820FD0B590E6B13E04E507B0270FB61CBE22
Malicious:	false
Preview:	...............P.........A"...k..D..j.6\).66....x..`..Lnr...\|..)>...$.lrV.B.r*X.x.3..2...~F..H.O6;m...?^,...!..GI.}.X.W\3l..b.[......=..._......vN....]1<.,.4..........

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 295
Category:	downloaded
Size (bytes):	296
Entropy (8bit):	7.235409342006834
Encrypted:	false
SSDEEP:	6:XtB3gen0dwsiUwPEiZ2F2PgtfvEpuLmsPJRWPUxX:Xfgikw1NPfZqo+fMALm7iX
MD5:	36EE512DBC48005610EB0601CFD72DE2
SHA1:	81F95E27E4E403680F0FC113E459306097A45B9D
SHA-256:	1FA74C29393BAEB3F22E43B3B4444500840DF900BF5370278F8F2247BE64A21C
SHA-512:	33B07C8D23C62036A653230C38774B5218822E3527B8741CBB8510666BAB73A7F5FE370491A43ADEA6F9D8DFF79DD4CEA407603614B79EFE1D15B15049DBBE51
Malicious:	false
URL:	http://www.yishimei.cn/script/tj-top.js
Preview:	..........T.J.@....w(....%.?.i\\|.....F.6...(8X. .8..RP......`Z....:...............:....$0.a9...+...#..8.Ex..cC.T6..........d....b.n.$A..0l6.p.^{..4]......8# .......}.o.6.;$g.Q...N..mK..r.W..z.&.+...s....=....%..].A.6LQ..8.&n...\.!..L.....>y~..q....8.-...{Y..U......~W4.+........dZ'...

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 188
Category:	downloaded
Size (bytes):	178
Entropy (8bit):	6.787064482550703
Encrypted:	false
SSDEEP:	3:Ftto1xhDqJAM616+dQsoZAUrh/zXluXM3bwGEAPj7tJsxXeFqI1frWtZcPRpkTwn:XtsJIwdaZAJM3EGEAP3tkeHfr4GPvksn
MD5:	B12DE1B599160839B10DDDE005826D9A
SHA1:	D1DF979168574AE19E52F7DAF9A0E2B8B75E684F
SHA-256:	7DFEEB7471D4A495C8EAAE1D69D99E87A4B5F26F88739813DEAB7F71D9980593
SHA-512:	325FD6EBA2B65E4F39EC474B33E2F3EAAD22EF25946FFE8765DAD629B7118B159DF27A1C97F87C000FB0AD9D7C2E820FD0B590E6B13E04E507B0270FB61CBE22
Malicious:	false
URL:	http://www.yishimei.cn/script/tj-bottom2.js
Preview:	...............P.........A"...k..D..j.6\).66....x..`..Lnr...\|..)>...$.lrV.B.r*X.x.3..2...~F..H.O6;m...?^,...!..GI.}.X.W\3l..b.[......=..._......vN....]1<.,.4..........

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 2 x 70
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	6.4468589950140895
Encrypted:	false
SSDEEP:	6:8zk/2X+3NKFhuo5zIs8PyhC3vul9A2AwuiTICLx/VarH731Sb3aJpEE:Qe2X+3zo5zYk84zAwb8Cw1S7aJpf
MD5:	2F64072CF20DB52EE9082D118D8B1062
SHA1:	5A4DEDAC740CE1B04893AA5598AE5F0775475630
SHA-256:	C5F8D57ED70607893A1D130DEBA3CDAE41B288BDEA0D39919FDCE2FF1A76EE7A
SHA-512:	39A600E6DE51A5973ADC05AFDACCEB7C890291D0B12EDC980E22332B12EAF3300523F05E7B3A0F28CEECF9C612818A964574739F22897D3E6832AFDDE91EA3E6
Malicious:	false
URL:	http://www.yishimei.cn/themes/j-spring/style/j-spring/bg_bottom.gif
Preview:	GIF89a..F....LLL...===...%%%...999BBB...III......FFF)'(...JJJ888)$&...323..."""!!!!" ...:::$#$... .DDD......(*hhh+++)))...011###(((CCC...KKK...%#$MMM'/,...666...@@@444...;;;EEE......'''...HHH222.........!.......,......F...v@@..P=.;.n.9Q.C.p.Y..YMP.e....F..yh.T...".(7j...<..1....:/8$8.88:4:+.).>)>.>.>>.>4....717..11?=..=.?...?....!!....A.;

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 356 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2445
Entropy (8bit):	7.799691809849496
Encrypted:	false
SSDEEP:	48:PZKjAqqQswWA01m+RN6ypo5jTPA6I2s5cvA6rrOaaVl2O:hRqqQswCA+RNG5/7QcvA6rrAVV
MD5:	7EAFE952FDF131B0D254ED55E02C4BD5
SHA1:	0ADF981C202D3C0D1352FF0316066B7457D1C09D
SHA-256:	30E61AAFD210C9811C2CCD56D7DFFFCA753922892E1F74C3C87E99C7755B37A0
SHA-512:	AE42D03ED40EF199C6502DFFA6719187E6C8F0A3BBF251AFC5298B5D0DF1EE1152F743F78623E1CAB9A83CE786FDB2E1DC4BB995771FCE4B75752E7CA87E5AF0
Malicious:	false
Preview:	.PNG........IHDR...d...`......#.....uPLTEGpL................................................ @@@........```................000PPPppp...ooo___......OOO...C.r.....tRNS. ...@...............IDATx..Yc....io:w9...Z-.n..O..ZLY^.'v....&.()....t.eY.....%.....oYo/....._.,.^.J$.i..dY.....e...;.~d.'....YR.......z. '..r..9AN..%..r..9AN.....................[.\|Z....^<..l..-.?..y...+....... @....y?0.5..B...E..d.._Q...[. ..H..G.....L+U.D&o.....v"9O#.ND.DD&.."....d....<.u{?.'"...........\.'G..K.....Y..<..6P"r0T`/e.....Pv.r"...."....xF..]..DE.T.?..j.."b...`>..f.XD..Jb.D.!x.@D.......z...a..i............."..D.Z"..%.....&...T.......k......#..@..y?. '...<+.c...7C._3(. .D.....g?R._....Y1.&..6..sg.....o2.5...f.I......8z<...q.../..AN....\|.^..9h.\..!..''.%..._.:.YA$../@... ..Zk.g....=....k 3....b`.....T.....0T.%....r8c= .@W!.$$...w...r.....P.\|.r-..6..".D.e ").]B.!x".P..A7..~........!........I.d.S.n...A......^..M.i.9...~..6... L...<.......C(..../!+6.....]....3.<

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (32769)
Category:	downloaded
Size (bytes):	94839
Entropy (8bit):	5.372689725312414
Encrypted:	false
SSDEEP:	1536:8YRKUfAjtled3TmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUbCGvCu09s2o2skAieW
MD5:	B11CED65F32FEDBE9BF81EF9DB0F3C94
SHA1:	FDFD441E66831BFB8809E8CB69C2C3CD26B5D7C2
SHA-256:	0FB170F24675C84F8228AD6B61D69BF6705030949CC2FEC316B3A006EAB282F8
SHA-512:	864E5AA02E74823DE70E3914A9BA75413C9559E4508F72EE7D23993ACBF6488D69EF13A50E5B465BEE3A709B36664F38AEFE9EC0B8D9D86F4873F1AC552C64CB
Malicious:	false
URL:	https://newres.wechat.com/t/wx_fed/cdn_libs/res/jquery/1.7.2/jquery.min.js
Preview:	/! jQuery v1.7.2 jquery.com \| jquery.org/license /.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTyp

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	769
Entropy (8bit):	5.213396336915652
Encrypted:	false
SSDEEP:	12:6v/7sYGLb0EnW2k1vsNFXbd0ZkWh6TWejXmY7fnS:hG0WD1vMj2hQW4bnS
MD5:	BE8CA9C3C5A9845A868A070C6CE17939
SHA1:	A882C9FB868B00A18B7DCEC422742E57BF659517
SHA-256:	9F3619F7FB23D72C6C88E1D9CC222828A42A4335692D6784E38075DCA445359A
SHA-512:	34FA2C083919A04562E0F6562C1973E142D4A09B78B6031B0E60C8D12167D9D98264B4EAEB20B4552AE800362834CB484FCBB323BE96220E6E598033B3395C58
Malicious:	false
URL:	https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1on3CPc.png
Preview:	.PNG........IHDR... ... .....D......GPLTEGpL....................................................................................................................................................................................................................................................................................................................................~Q2....ltRNS.........D. ..q.......Y."b.......-......y.Z_!.s}^...X.)........F..0.f....At..~...x........w=(..p[..c4.X.^....IDAT....Uc.`...k `w..........C....?1..\...i.\|....L...2O.R.@...zzY.}.pO.-.b.U/o...-Io.....\|..c.{...Q......K..z...$.h...t.Pp..?.G..........S......v\|....?.M.....VC.0....h.29..f...m..Bp.W.K..\|ks.5.0K.S.'Ct..R(.t.j'......h{7D..}....VbIq.BMuj...o.....z(....IEND.B`.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10041), with no line terminators
Category:	downloaded
Size (bytes):	10146
Entropy (8bit):	5.308956869218994
Encrypted:	false
SSDEEP:	192:6MwVMXnF5jFr4dtqaxawSTcsrn9iGLDKzU:6Mwq3F5jFlCSfRiGLD0U
MD5:	2BEFAC42809EFD3DE107552F707BCE96
SHA1:	5AF61E222038A0A4BEF18DF9ACCB194ED6A26173
SHA-256:	A074C83991384C885D6D43CECC65D9C31A0487A92B71F05CFD8139E71B28F66E
SHA-512:	6785500E843A2AD2518C8E12A320D7D1FF39D6CD4CEF46B76CEC16563DDB3A658A03A4024D5FFA9B8217C0F2D24EBFE7F87AF20980CF8553A6F574DC485FCB76
Malicious:	false
URL:	https://www.wechat.com/mobile
Preview:	<!doctype html> <html lang=en class=en> <head> <meta name=facebook-domain-verification content=b3spylm29rmtw1v91765iz8d7o8fl7 /> <meta name=twitter:card content=app> <meta name=twitter:app:country content=us> <meta name=twitter:app:name:iphone content=WeChat> <meta name=twitter:app:id:iphone content=414478124> <meta name=twitter:app:url:iphone content=weixin:// > <meta name=twitter:app:name:ipad content=WeChat> <meta name=twitter:app:id:ipad content=414478124> <meta name=twitter:app:url:ipad content=weixin:// > <meta name=twitter:app:name:googleplay content=WeChat> <meta name=twitter:app:id:googleplay content=com.tencent.mm> <meta name=twitter:app:url:googleplay content=weixin:// > <meta http-equiv=X-UA-Compatible content="IE=edge,chrome=1"> <meta charset=utf-8 /> <meta name=keywords content="WeChat Weixin chat mobile chatting free send message send photo voice weixin offline message Weibo private message data consumption"/> <meta name=description content="Available for all kinds of p

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 45 x 753
Category:	downloaded
Size (bytes):	13656
Entropy (8bit):	7.931914473163624
Encrypted:	false
SSDEEP:	384:JFFbfx3QlO+qNHt82HquNpnwsN0X+ogM328XpkjXU:7FbZ3z+eHdZpN0X9/Fpx
MD5:	022E6687CDA398B21867DC5BEFF2861C
SHA1:	A463BAA6032BB937E5E8084929A3355B3210CFDD
SHA-256:	13FA447C77D34B947249F5CFB8B78A64035D6A5755C9873B91450D8145D62176
SHA-512:	F1F185D34959B6D27CDAEF381A0A0DC6EF1C0E760CEF7E02E7CCB172966A7C9E6F032B845D9874515EBC391EDFCB6F5BE6690DE59104DFB04F6EF43C7AB446FD
Malicious:	false
URL:	http://www.yishimei.cn/themes/j-spring/style/j-spring/bg2.gif
Preview:	GIF89a-......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,....-.......q. B.."y......"..P..D.^.j.5.M..y6l...H.Y.x...FD.<=z.!....A..s....x....Q..7nH...b..:.~....M..0..!..N."#p..3....P..K., p.....d..u....+W.:t,..K....au......j...5...:(>.h..).Y.`..c...:A....0.."x

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 728 x 58, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	32482
Entropy (8bit):	5.745185140480967
Encrypted:	false
SSDEEP:	384:a0whis+BBIKadRVCAB5lfEYu4dDgwoEUchZmAY7hq9iMSJYPHfgbywwyaF5:abikK+F+4dsDnAYk9iMSJ2/gbywAL
MD5:	7840199F38D46BBC7B567C0D86AED538
SHA1:	A426E7E112699F8C91C56732221C02A15D81366F
SHA-256:	3751752F08613C6598C9E1AECC5BE6009A99C6819C1B8A01091972DC361E84E2
SHA-512:	1DC02A40B064F383A6317E69CFDAFAF360BAE5A230877057D3F7D40B33053016854466ED38B25EC11E616806712A2E8D37A59F8BCF4AAAF0C3402205B9267088
Malicious:	false
URL:	http://www.yishimei.cn/image/2000G.png
Preview:	.PNG........IHDR.......:.............pHYs...#...#.x.?v...MiCCPPhotoshop ICC profile..x.SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m.......

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 998x136, components 3
Category:	dropped
Size (bytes):	35772
Entropy (8bit):	7.950437186982944
Encrypted:	false
SSDEEP:	768:bSqL+TPgfZ86dwJLjKPJSPMdoELPSZGJ3Qe6oVuld3R:bf2ofedJ/KUM2ELWCD6oVubR
MD5:	789CC938E96AF1C46A2BA4FC34A8BE8C
SHA1:	932D2BDFB8E7618BF04CADA87243AA922D402174
SHA-256:	6E37558D3922998AF62184E8DA81D058ADC8D533492A34CACBC1DFBAF4A1E433
SHA-512:	F0A1C0329E266BF33E8E29DEDC1F8D8C3481442A30014EC340408250EAECCB7C92D7606B23CB2B5C145BB36BAE876732335A19755CDD0311ACF86EDC4E619538
Malicious:	false
Preview:	......JFIF.....`.`....."Exif..MM...........................Ducky.......<.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..L.......@.[...n..>m.6..+P.nU$..s.w..z...^.{(.F.H.!..u.=.....F.5.R.TOS..4.x=...cm...9.O..v....;H.[.....=,..W.]...i.o..P.>..<D...v..hQ.v....1...C.7;Cy.n.......p9..s...k.-..u.rFc.,p..8=..#.j......o.7...&$.'...\.1...U.{).ibl.M...3..i..K..a..Ve8.67..?.j.....-...%...k..0M&~.1m.o........_K...QB.>a......;.V....h..A

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32036)
Category:	dropped
Size (bytes):	97034
Entropy (8bit):	5.318839773667727
Encrypted:	false
SSDEEP:	1536:k1qEgYaCibz6jHF1L+ntrI1ZxdKVGRgc159tWSZsjGjrYMkiCByjIxPZYaRoQPUR:mPntVZsjcFkssw/ZBMwBlZ
MD5:	F89DBF8F275E3C9144675C3F49959141
SHA1:	94CBB9B6C8D8E4E03B59A73300E8CF70E83FE3D3
SHA-256:	BDF6F9A5259B321625A79BDAF405530E7EC53999C30205B9A159A838A1C03595
SHA-512:	2E2CA137EC7DDABDE93460558AFCED639C48C28218D0D69F54FD271FFD13CC42C7EC432BB4EC8BFA52197C7111937AF9F1BFBBC576976CBE8A23109ACD9BEB74
Malicious:	false
Preview:	!function(e){function t(r){if(n[r])return n[r].exports;var i=n[r]={exports:{},id:r,loaded:!1};return e[r].call(i.exports,i,i.exports,t),i.loaded=!0,i.exports}var n={};return t.m=e,t.c=n,t.p="//newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res",t(0)}({0:function(e,t,n){e.exports=n(377)+n(336)+n(340)},334:function(e,t){},336:function(e,t,n){var r=n(337);r(document).ready(function(){r(".js_footer_ele").on("mouseover",function(e){var t=r(this),n=t.children(".js_footer_second_menu");n.show(50)}),r(".js_footer_second_menu").on("mouseover",function(e){var t=r(this),n=t.children(".js_footer_second_menu");n.show(50)}),r(".js_footer_ele").on("mouseleave",function(e){var t=r(this),n=t.children(".js_footer_second_menu");n.hide(50)}),r(".js_footer_second_menu").on("mouseleave",function(e){var t=r(this),n=t.children(".js_footer_second_menu");n.hide(50)}),r(document).on("click",function(e){r(event.target).hasClass("js_footer_link")\|\|r(".js_footer_second_menu").h

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 235 x 468, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	18489
Entropy (8bit):	7.977015167724451
Encrypted:	false
SSDEEP:	384:cW9io8sHwTQieOHAeqTlM7RBjzC0oXQqSr/zuu8qnZbv384QSug9JST:cWxlwAvG7RBjzXd/zuuRZT38vg9JM
MD5:	8D534AEABDB6D05D1A51A0DF17DBCA50
SHA1:	5C0E8504DB36956CD14C719959579B9D44307B6B
SHA-256:	6EAA935501B46FA4E899B85C79547F5D2DFD95DEE6B4BC6B2BDBBE5DC69CC44A
SHA-512:	2DA79FC6D1848FEFA6B5A9DDD5420EEF578919D80111A06E0D34EBAD704BE318F0F2D6040B0A5314E01D58F69C5D5BCFD68DCCA3F8B588D619B539922479F694
Malicious:	false
Preview:	.PNG........IHDR.............T3HN.. .IDATx..}Oh\G.~......F.l.-E..3. ...o...i<... .....Ql.G.2 .@..4$ 4...,.0h1.9.9.xV.xfp.L.3&..I.M6&.7.x1...[.Ow.nuK..........W.N.nU....K....-...n%g...B...<.o.....?......o.....?......o.....?.>...?..+.3..@..x.+.(.B...L(..+^...1x..jp....0.F.....C>_.w_q.t....h... ../U.O....Qx.....'......o..=s..QC........mL............$..~.+1...2l.....~_......?.l.....U.aq...(.`....N.....-..u.l..p8n......F#.w...,&.}.. ..:.....A1.........[O..._.;n.;....&.?...R......~q....j....?ig..?j;MV.,......;.......9...0......c.e...w;...............A...n._.~.a0!l...p.......':...........P..w.S.....E......=:...im...@..C....?....e.-...&.l}.S...M..0.."..Y..j......t!.KY.i.{1..fE....%...aL;.I<...?`...\X44..._."k.Q.P..^...e.Z.=...q...z..f..q.x.}I .=...p..A.P..a........`^....'.>9^o.D0X..ro.........r.HY.....`..r.F..._./B`i'.@...\...-...D......I......v.o.t....r...p...x.^c.......K.ZI..66..6x..vW..[.O.C.\...!Pm...w.)..t.m..k.0.U@.....H..#P...."..2.UA..\.....C..\|`.s.U

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1110
Category:	dropped
Size (bytes):	617
Entropy (8bit):	7.623071966553142
Encrypted:	false
SSDEEP:	12:X0eJRs3xoRNSH/7BFcdgkXUI4jcSmHtvcYzi8c8Z7Kql6gDotMLhQaMRD:X0Wu3CyHDBOgkXWmHtvcYd/FKKZo53h
MD5:	B0E1749DE0C4380FD8797264075D1E74
SHA1:	D5D885AF9D1DBB3C46E634F9F4FA1CF0FB11D629
SHA-256:	9B36D6CC4EEC75A47A65E9B026D79C17B2ADB2658096A9C7725CB700B2608398
SHA-512:	E0C82CA7CF3F55F704FB06615D7C6E5F97EC2171AFC5EEC4AADEF5B0D2687C2D2A9A5CCE70C64E64DFDB75419BD59CDF712BFE5DF376FCAF1F8E609578833A99
Malicious:	false
Preview:	...........RAO.M.>.......lj...1.E.F..ri..f:;....lff[+Cb$F/D/..ib"^PoHP...._8.......if..y.y.gfr...%.(.].+..,.:....!..f.0...q.....o.WoO.......o..~......d..c.........G.y.......g.Q.58zy.s.E....W....ry.q...ba.O...'+..`.X,fh...U...,!..%.....DW..x.P..K..W>e...u....<]..O..B"].i`..G.....y\.]j"...C]b-.....]1.;.&.J/".L..442FT..S....L.....(.`...p.xd.Q.1S......8.C......l..+...7...Dw#YsSN....4R.o..N......$.[.+.....1#...@pev..y.N.[y.ue...q..?....8%...(rIH......YC...).h.zp[......v...#.k.."..$.3..$W.h.^...e..P.M............."n....9.....x@+.7.CJ...%3..[.y....y...C..H......M+]7.7q.;$.....=...#V...

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 133
Category:	dropped
Size (bytes):	124
Entropy (8bit):	6.31255499740834
Encrypted:	false
SSDEEP:	3:Ftt7Pc/1EPc7F9zK4ykuPbX9jEVhaL5aJr/zn:XtqE0nfyk4btjEVhaLO/zn
MD5:	A30A10538619325F270135E3B068E5DF
SHA1:	4B5AC4CFFD1383BDE168B9A6279AF2672FD1F4D3
SHA-256:	E2A4B2EA208F8EDB54CD65A11AA9F2E453438B7961DD23541A64177760A1C3FC
SHA-512:	03E0B3C418C33C3B9B3CCE70833F3977A0900DA9594A2C890880A25D71291D10C0F8A9561A62780B45AA9F7421D9394F9C773FAA03B38FE4AE04F9FFAA955308
Malicious:	false
Preview:	..........t.A..!........6.4....B..Y(..!.^?.....F...$.>-...ks:..w.9'\|hd.. 0r............:m..F..kj..BpprZ.5..r^....P.q....

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 2 x 70
Category:	dropped
Size (bytes):	345
Entropy (8bit):	6.4468589950140895
Encrypted:	false
SSDEEP:	6:8zk/2X+3NKFhuo5zIs8PyhC3vul9A2AwuiTICLx/VarH731Sb3aJpEE:Qe2X+3zo5zYk84zAwb8Cw1S7aJpf
MD5:	2F64072CF20DB52EE9082D118D8B1062
SHA1:	5A4DEDAC740CE1B04893AA5598AE5F0775475630
SHA-256:	C5F8D57ED70607893A1D130DEBA3CDAE41B288BDEA0D39919FDCE2FF1A76EE7A
SHA-512:	39A600E6DE51A5973ADC05AFDACCEB7C890291D0B12EDC980E22332B12EAF3300523F05E7B3A0F28CEECF9C612818A964574739F22897D3E6832AFDDE91EA3E6
Malicious:	false
Preview:	GIF89a..F....LLL...===...%%%...999BBB...III......FFF)'(...JJJ888)$&...323..."""!!!!" ...:::$#$... .DDD......(*hhh+++)))...011###(((CCC...KKK...%#$MMM'/,...666...@@@444...;;;EEE......'''...HHH222.........!.......,......F...v@@..P=.;.n.9Q.C.p.Y..YMP.e....F..yh.T...".(7j...<..1....:/8$8.88:4:+.).>)>.>.>>.>4....717..11?=..=.?...?....!!....A.;

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 276
Category:	dropped
Size (bytes):	208
Entropy (8bit):	6.878646674838733
Encrypted:	false
SSDEEP:	6:XtJbZylQeM9vdrb1zQrl7YtZZ79EVWG4v0:XXbZLeglk5Y3ta8G4s
MD5:	07949206410A1603EA39344FF4283642
SHA1:	016122268582C933545C76E6617F91EE90298E3C
SHA-256:	0D5ECBCDBD03F704695C6319530FF86E5871E8C2C72FB1D0E54F8C54FB5732A4
SHA-512:	C18398EC60D7DC7C792DD1C24DEB5E4852CD12B05D77DD9B985D319368840330A0478A943BFF19A754E8CA15A69C7D2A2CCE4752B6DEFBAC92CFD7404CA7CE12
Malicious:	false
Preview:	..........tO...0../.?./U.&ZvY.w.....&O.44om..........a............F$..vs.xe...~.jBK^6.w...t...G....&.CG*ik1...I>..G.Q.....n...fy.B(.V...zY ...1Z...L...z.......%...^0{..........I.u....s..m./.Wq.......T....

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 136
Category:	downloaded
Size (bytes):	128
Entropy (8bit):	6.290557536662705
Encrypted:	false
SSDEEP:	3:FttP/HA8ZXuj3BpWFUjZQe9dzvbCC4TuXpWtn:XtHgIXephnzF4KE
MD5:	34A2F082D5ACDDBDE7F9D0C4BF31AA32
SHA1:	EB31C1367632F1D8A9CE30B7DC527367E766B9C6
SHA-256:	3DA576AE80AC24E269EF896AEDD7EEEC43171770B5B8A550AFF1966576DD7843
SHA-512:	DAFAE9391A3450892A07DB21A822040E954486BCE5D0740E3752BF5CD571B758B56FD7079E9AA62DEC606199FD65879B00EE8A7E4D0F5B94AA3DF0CBC3685385
Malicious:	false
URL:	http://www.yishimei.cn/script/ad_article_up.js
Preview:	..........t.A..!....l..^Zb.EY<....+4n.......p....[.*..Jk=..N..s......1.\|...bH.+........z[.o...K.zK.'K.'k.......;.~>^..._.......

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 356 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3004
Entropy (8bit):	7.850295835680949
Encrypted:	false
SSDEEP:	48:PXpxNzbwMiYUd8j6fnoYOvpzm1nM6lLGEaeQC8nJvzAlighxl+lh6eaI4i2j8:PdkIA8FYgmpMsqWqnFYRhxwFazz8
MD5:	AAEC6A453C14067CD710518FCA1E718D
SHA1:	19522F1DA1306E3F66EF888C0A96A9939DEB10A9
SHA-256:	999AC1A2B60D99E6F84189F2490555D5354002474F5CC257653D1A1F088E7019
SHA-512:	5A696509BBC679DB2DB36618B9479ABF449E4578694302ED6AA5F6C84E53E20E4E7FEDA8271AE876AB6020C11166DD0B2F91BC019BCCBDC814793AF073801F1E
Malicious:	false
Preview:	.PNG........IHDR...d...`......#......PLTEGpL...................................................@@@ ............```.........000...PPPppp...ooo...___OOO...............!!!...qqq...111.........aaaAAA....B.&....tRNS. ...@...............IDATx...b........3....8iO....... HJ4#E..b..[& ..`6.r.eY...w.......e....h.N.v.eYv.C"qK........,{.(.X~z...(.Z~.E...3K.no/...9AN. '..r..9AN. '...BDY?&~7.,.......y..\|mM..\..K.\|..M....\|..uQ........o..g.,...N...M.m@~..y.2...O...M@...3." q..d...;..r'2.AD..D.h.H........Z...:...b...bu. .C.uo...0cs"...E!(.......o.rP..^.th..P.f..@.Q.ED..r<p..o!.}...r.......u.<.(.e...QnU].Y@.T..D$....xS..}.".,P.DGD.ZC..Q.0D.%..Q..`H.....[.UPD$..c...44Q...J....(. .Y.Q].)..N.s.9..Z..h..l.I.D1..(...;....3...........5.d...K../......}.r.......Ihr..#..>@n.N2......c../q..7_9>...j.....@....X!. ..S.."U....t....[-M..[_...Zk..&.1.9./...Y..:...K+qO..~\Cv.....HD.B...Xy.5.Y.2.............,....3.+FE..a0..H..D.9.k..ZCD=J..vchm.g+..A.<dbk^?ds.c..>.P..R.s..hz....;T....

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	7.080614904010252
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.83% Win32 Executable (generic) a (10002005/4) 49.78% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe
File size:	368'128 bytes
MD5:	f2697e68f50ea7ed7ac3346dc515e0bd
SHA1:	36cedbb9da2d6651103f4731dbdf4b4e390372ec
SHA256:	03ab93bff6a8c0e77bec98d89ffde3973edb4af0cbbe576741ba03abffba7ae9
SHA512:	0492ca5f7e9011fa847d1ec297228881899444dab10bb3ebd94be32bcee46f7c55ebc2b7dac44bc6c78b4815fe8e83babcf32f3adb5bfb68acac8e6754a7d41f
SSDEEP:	6144:FA7F/09ibEzKa/ky06llcxOVEXExVdKij6yTG7bmSX:0pxbRa/ky06c4VESvKPyC7blX
TLSH:	D8741271AF89D862C02219BC493686E621E67D11EAB0BEDF70CD778E1B75F1464432CB
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......f..........".................^#... ...@....@.. ....................................@................................

File Icon


Icon Hash:	4e27354f0939d58c

Static PE Info

General

Entrypoint:	0x44235e
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x66EECF8E [Sat Sep 21 13:52:14 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x42304	0x57	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x44000	0x19527	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5e000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x40364	0x40400	34b5fa45ff506bc053e3150c3f43768f	False	0.9807765381809338	data	7.984250579444051	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x44000	0x19527	0x19600	b2a4230fa25f6619313974c40851378c	False	0.10871112992610837	data	2.7128630218712417	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x5e000	0xc	0x200	46a6e9a80e06f416cd9d22c7dcff81a0	False	0.044921875	data	0.10191042566270775	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0x44130	0x183a8	Device independent bitmap graphic, 150 x 320 x 32, image size 99200, resolution 11811 x 11811 px/m	0.09144498186215236
RT_GROUP_ICON	0x5c4d8	0x14	data	1.15
RT_VERSION	0x5c4ec	0x334	data	0.4792682926829268
RT_MANIFEST	0x5c820	0xd07	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.4572713643178411

Imports

DLL	Import
mscoree.dll	_CorExeMain

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 05:28:29.314711094 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 13, 2024 05:28:30.212981939 CEST	49732	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:30.217928886 CEST	80	49732	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:30.218049049 CEST	49732	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:30.220478058 CEST	49732	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:30.225296021 CEST	80	49732	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:31.350528002 CEST	80	49732	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:31.392875910 CEST	49732	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:33.309288025 CEST	49734	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:33.309323072 CEST	443	49734	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:33.309397936 CEST	49734	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:33.312634945 CEST	49734	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:33.312655926 CEST	443	49734	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:34.030272961 CEST	443	49734	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:34.030447006 CEST	49734	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:34.034756899 CEST	49734	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:34.034787893 CEST	443	49734	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:34.035221100 CEST	443	49734	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:34.080440998 CEST	49734	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:34.097136974 CEST	49734	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:34.143404961 CEST	443	49734	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:34.352581978 CEST	443	49734	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:34.352652073 CEST	443	49734	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:34.352710009 CEST	49734	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:34.352837086 CEST	49734	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:34.352859020 CEST	443	49734	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:34.352878094 CEST	49734	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:34.352885962 CEST	443	49734	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:34.397350073 CEST	49735	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:34.397393942 CEST	443	49735	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:34.397469997 CEST	49735	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:34.397748947 CEST	49735	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:34.397763014 CEST	443	49735	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:34.932322025 CEST	49732	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:35.097368002 CEST	443	49735	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:35.097453117 CEST	49735	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:35.099415064 CEST	49735	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:35.099431038 CEST	443	49735	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:35.099848986 CEST	443	49735	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:35.101063013 CEST	49735	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:35.143410921 CEST	443	49735	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:35.426776886 CEST	443	49735	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:35.426858902 CEST	443	49735	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:35.426915884 CEST	49735	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:35.428325891 CEST	49735	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:35.428350925 CEST	443	49735	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:35.428364992 CEST	49735	443	192.168.2.4	184.28.90.27
Oct 13, 2024 05:28:35.428375959 CEST	443	49735	184.28.90.27	192.168.2.4
Oct 13, 2024 05:28:37.091547012 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:37.092361927 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:37.096438885 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:37.096504927 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:37.097104073 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:37.097130060 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:37.097250938 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:37.102335930 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:37.103480101 CEST	49722	80	192.168.2.4	199.232.210.172
Oct 13, 2024 05:28:37.103557110 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 13, 2024 05:28:37.109596014 CEST	80	49722	199.232.210.172	192.168.2.4
Oct 13, 2024 05:28:37.109647989 CEST	49722	80	192.168.2.4	199.232.210.172
Oct 13, 2024 05:28:37.110042095 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 13, 2024 05:28:37.110140085 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 13, 2024 05:28:40.590507030 CEST	49742	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:28:40.590553999 CEST	443	49742	172.217.18.4	192.168.2.4
Oct 13, 2024 05:28:40.590610981 CEST	49742	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:28:40.590965033 CEST	49742	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:28:40.590979099 CEST	443	49742	172.217.18.4	192.168.2.4
Oct 13, 2024 05:28:41.161815882 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.161842108 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.161858082 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.161930084 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.221647978 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.222305059 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.222764015 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.223422050 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.223829985 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.226901054 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.227710009 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.228229046 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.228229046 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.228269100 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.228429079 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.228429079 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.228811979 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.228864908 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.228945971 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.229387999 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.229435921 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.229547024 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.233880043 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.234457016 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.234467030 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.235021114 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.239865065 CEST	443	49742	172.217.18.4	192.168.2.4
Oct 13, 2024 05:28:41.241355896 CEST	49742	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:28:41.241378069 CEST	443	49742	172.217.18.4	192.168.2.4
Oct 13, 2024 05:28:41.242449045 CEST	443	49742	172.217.18.4	192.168.2.4
Oct 13, 2024 05:28:41.242518902 CEST	49742	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:28:41.253849983 CEST	49742	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:28:41.253942013 CEST	443	49742	172.217.18.4	192.168.2.4
Oct 13, 2024 05:28:41.300591946 CEST	49742	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:28:41.300617933 CEST	443	49742	172.217.18.4	192.168.2.4
Oct 13, 2024 05:28:41.346494913 CEST	49742	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:28:41.470573902 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.476336956 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.481251955 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.626018047 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.664655924 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.669703007 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.885533094 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:41.887777090 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:41.892640114 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.067245960 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.069061995 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.073870897 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.155405998 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:42.160300016 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.160410881 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:42.160562992 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:42.165344000 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.218300104 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.218441963 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.223221064 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.223236084 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.223311901 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.223352909 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.223553896 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.223649025 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.228322983 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.228377104 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.292771101 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.292802095 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.292814016 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.292828083 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.292871952 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.294646025 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.299479008 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.314395905 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.315634966 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.318381071 CEST	49752	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.320548058 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.320988894 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.322093010 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.323210001 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.323278904 CEST	49752	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.323523045 CEST	49752	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.324166059 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.326905966 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.328340054 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.328970909 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.329031944 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.329157114 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.333934069 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.471472025 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.473973036 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.478812933 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.480029106 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.484935999 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.485019922 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.485183001 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.489927053 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.699525118 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.718787909 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.725476980 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.729342937 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.734265089 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.734357119 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.734536886 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.739300013 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.774240017 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:42.774296045 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:42.774415016 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:42.775588989 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:42.775609016 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:42.801780939 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.801785946 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.801785946 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.884036064 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.884062052 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.884074926 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.884087086 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.884097099 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.884109974 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.884121895 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.884125948 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.884197950 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:42.948966026 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.948982954 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.949048996 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:42.949062109 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.949106932 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.949120998 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.949132919 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.949146032 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.949157000 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.949170113 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.949171066 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:42.949186087 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.949197054 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:42.949243069 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:42.954066038 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.954121113 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:42.954179049 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:42.995877981 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.995892048 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.995903969 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:42.995975018 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.039803028 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.039918900 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.039937973 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.039952040 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.039963961 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.039962053 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.039978027 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.039997101 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.039998055 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.040011883 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.040021896 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.040031910 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.040036917 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.040050030 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.040050030 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.040098906 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.040621042 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.040635109 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.040652037 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.040663004 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.040674925 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.040674925 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.040705919 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.040735006 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.041496038 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.041507959 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.041522980 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.041575909 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.072160959 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.077101946 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.077208042 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.077471018 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.082268953 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.196520090 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.196536064 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.196548939 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.196711063 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.196727991 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.196765900 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.196813107 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.196835041 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.196880102 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.246537924 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.246589899 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.251430988 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.251447916 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.299670935 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.302566051 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.305351973 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.305366039 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.305378914 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.305391073 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.305468082 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.305469036 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.307430983 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.321024895 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.322371006 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.327213049 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.424892902 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.425998926 CEST	49752	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.427831888 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.430927992 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.500219107 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.500463963 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.500540972 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:43.505580902 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:43.505592108 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.506006956 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.547614098 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:43.561402082 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.594949961 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:43.615406036 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.615430117 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.615464926 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.615482092 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.615498066 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.615514040 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.615520954 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.615581989 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.615581989 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.639409065 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.649115086 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.649945974 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.649966002 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.649986029 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.650001049 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.650022030 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.650078058 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.650078058 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.650240898 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.650424957 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.650441885 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.650456905 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.650471926 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.650507927 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.650593996 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.654284954 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.655405998 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.659147978 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.660191059 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.702483892 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.707166910 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.732075930 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.749058008 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.781014919 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.810416937 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.828541040 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.828582048 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.828591108 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.828603029 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.828633070 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.828654051 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:43.828686953 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.828707933 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:43.828710079 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.828744888 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:43.828751087 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.828768969 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:43.828804016 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:43.828810930 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.828831911 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.828888893 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:43.840941906 CEST	49756	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:28:43.840959072 CEST	443	49756	20.109.210.53	192.168.2.4
Oct 13, 2024 05:28:43.859415054 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.875412941 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.875425100 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.875437021 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.875447989 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.875507116 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.875507116 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.886756897 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.886838913 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.886852026 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.886862993 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.886874914 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.886887074 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.886898041 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.886913061 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.886913061 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.886946917 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.894113064 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.894131899 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.894330978 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.925386906 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.925398111 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.925504923 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.925515890 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.925551891 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.925628901 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.947724104 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.947877884 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.948064089 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.952701092 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.952712059 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.952843904 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.959753036 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.959774017 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.959847927 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.959881067 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.959892035 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.959907055 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.959940910 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.959950924 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:43.959959984 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.959980011 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:43.965737104 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.965754986 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.965765953 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.965776920 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.965787888 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.965805054 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.965805054 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.965847015 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.966157913 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.966169119 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.966186047 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.966231108 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.966494083 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.966505051 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.966795921 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.977041006 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.977051973 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.977150917 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.977164030 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.977176905 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.977188110 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.977190018 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.977190018 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.977214098 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.977818012 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.977829933 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.977843046 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.977854013 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.977865934 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:28:43.977876902 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.977910042 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:43.977941990 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:28:44.004621983 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.009546041 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.011411905 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.047862053 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.060952902 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.095335007 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.123414040 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.128302097 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.278908968 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.280332088 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.352421999 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.352715015 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.354069948 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.354082108 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.354173899 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.354187012 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.354211092 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.354223967 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.354234934 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.354247093 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.354273081 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.354273081 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.355040073 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.355062962 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.355072021 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.355083942 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.355112076 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.392594099 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.396800041 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.409950018 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.409967899 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.409979105 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.409990072 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.410038948 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.487791061 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.487807989 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.487821102 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.487832069 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.487874031 CEST	49752	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.487915039 CEST	49752	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.493591070 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.498388052 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.526731968 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.569221973 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.629858017 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.631623983 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.631949902 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.633121014 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.634699106 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.636363983 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.636676073 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.637866974 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.663693905 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.663707018 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.663718939 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.663768053 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.663849115 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.663861036 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.663876057 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.663902044 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.663908005 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.663914919 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.663937092 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.663960934 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.664733887 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.667082071 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.793462038 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.793571949 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.799916983 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.799976110 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.800013065 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.800036907 CEST	49752	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.800046921 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.800086975 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:44.800144911 CEST	49752	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:44.897790909 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.035680056 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.035696030 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.035707951 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.035720110 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.035732985 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.035737991 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.035749912 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.035825968 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.041027069 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.042140007 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.042861938 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.043859959 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.047014952 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.048679113 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.097886086 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.330888987 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.347687006 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.347723007 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.347735882 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.347749949 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.347768068 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.347829103 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.347876072 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.347953081 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.347966909 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.347979069 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.348195076 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.348195076 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.383335114 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.452172041 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.452189922 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.452203989 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.452214956 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.452229023 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.452234983 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.452246904 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.452256918 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.452308893 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.453942060 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.456954002 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.461831093 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.463565111 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.473654985 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.474478006 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.474767923 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.478557110 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.479289055 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.479507923 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.487183094 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.488187075 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.488454103 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.492036104 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.492981911 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.493194103 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.686304092 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.686317921 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.686331034 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.686342955 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.686453104 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.689080000 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.693903923 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.704854965 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.753422976 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.762438059 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.762451887 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.762465000 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.762475967 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.762490034 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.762501955 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.762551069 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.762819052 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.762831926 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.762845039 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.762870073 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.762886047 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.867588997 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.905615091 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.905639887 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.905653000 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.905689001 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.905695915 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.905709028 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.905720949 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.905742884 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.905752897 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.905766010 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.905766010 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.905792952 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.905921936 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.905998945 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.906111956 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.906122923 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.906140089 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.906152964 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.906161070 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.906162977 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.906177998 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.906186104 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.906227112 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.906554937 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.912534952 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.912548065 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.912559986 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.912570953 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.912672043 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.912672043 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.917841911 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.917854071 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.917865038 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.917876005 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.917886972 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.917896986 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.917908907 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.917917967 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.917929888 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.917941093 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.917960882 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.917960882 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.918056011 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.918880939 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.918893099 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.918906927 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.918922901 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.919065952 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.921283007 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.922996998 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.927231073 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.929209948 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:45.995445967 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.995446920 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:45.996350050 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.009735107 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.010037899 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.014777899 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.015245914 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.072309971 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.072325945 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.072339058 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.072393894 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.097554922 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.100670099 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.223051071 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.223072052 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.223083973 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.223107100 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.223121881 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.223138094 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.223299026 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.223440886 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.223462105 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.223474979 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.223488092 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.223500013 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.223974943 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.223974943 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.223974943 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.227281094 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.227344990 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.227356911 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.227370024 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.227389097 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.227560997 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.227616072 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.227725029 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.227792025 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.227803946 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.227813959 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.227814913 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.227828979 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.228322029 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.228322029 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.231683016 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.231703043 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.231715918 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.231725931 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.231739044 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.231751919 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.231815100 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.231815100 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.231815100 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.232076883 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.232099056 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.232135057 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.232409954 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.232422113 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.232434988 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.232475996 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.232475996 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.232492924 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.232510090 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.233140945 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.233316898 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.233352900 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.233828068 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.233882904 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.233891964 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.233903885 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.233916998 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.233928919 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.233941078 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.233947992 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.233983994 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.327802896 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.329632044 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.331459045 CEST	49760	80	192.168.2.4	90.84.161.27
Oct 13, 2024 05:28:46.336477041 CEST	80	49760	90.84.161.27	192.168.2.4
Oct 13, 2024 05:28:46.336586952 CEST	49760	80	192.168.2.4	90.84.161.27
Oct 13, 2024 05:28:46.337965012 CEST	49760	80	192.168.2.4	90.84.161.27
Oct 13, 2024 05:28:46.342315912 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.342546940 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.343874931 CEST	80	49760	90.84.161.27	192.168.2.4
Oct 13, 2024 05:28:46.347263098 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.347450972 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.380000114 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.395786047 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.415270090 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.423196077 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.459629059 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.531497955 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.531572104 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.531589031 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.531605959 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.531645060 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.531651974 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.531672955 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.531714916 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.531730890 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.531747103 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.531761885 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.531811953 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.531811953 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.532695055 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.532732964 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.532777071 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.536901951 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.536943913 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.536959887 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.536974907 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.537023067 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.537139893 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.537483931 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.537501097 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.537517071 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.537679911 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.538016081 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.538032055 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.538048029 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.538063049 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.538100004 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.538100004 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.542351007 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.542370081 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.542385101 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.542411089 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.542434931 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.542448997 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.542536974 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.542536974 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.548600912 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.548625946 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.548643112 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.548696995 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.548729897 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.548746109 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.548763037 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.548774958 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.548813105 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.548896074 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.562892914 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.568348885 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.579637051 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.581888914 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.584762096 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.587245941 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.603140116 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.603140116 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.603596926 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.754575014 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.758755922 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.815960884 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.868356943 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.873384953 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.966439962 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.983036041 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.983156919 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.987425089 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.987454891 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.987471104 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.987487078 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.987503052 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.987518072 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.987534046 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.987550020 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.987595081 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.987675905 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.990158081 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.990176916 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.990194082 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.990209103 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.990223885 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.990272045 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.990504026 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.990530014 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.990545034 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:46.990598917 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.990598917 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:46.990814924 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.023816109 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.077923059 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.084503889 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.084870100 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.134644985 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.278666973 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.278688908 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.278713942 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.278731108 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.278747082 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.278763056 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.278780937 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.278836012 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.278902054 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.279500008 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.279555082 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.279566050 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.279572010 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.279588938 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.279603958 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.279620886 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.279663086 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.296385050 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.296418905 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.296433926 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.296451092 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.296468973 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.296468019 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.296506882 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.296693087 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.296734095 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.296749115 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.296775103 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.296789885 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.296812057 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.300484896 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.300503016 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.300520897 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.300559044 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.300575972 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.300630093 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.300631046 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.300649881 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.300664902 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.300832033 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.301368952 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.301426888 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.301439047 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.301461935 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.301503897 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.301770926 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.339545012 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.340563059 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.344986916 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.356462955 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.380707979 CEST	80	49760	90.84.161.27	192.168.2.4
Oct 13, 2024 05:28:47.411590099 CEST	49761	80	192.168.2.4	38.54.26.75
Oct 13, 2024 05:28:47.416630983 CEST	80	49761	38.54.26.75	192.168.2.4
Oct 13, 2024 05:28:47.416788101 CEST	49761	80	192.168.2.4	38.54.26.75
Oct 13, 2024 05:28:47.417061090 CEST	49761	80	192.168.2.4	38.54.26.75
Oct 13, 2024 05:28:47.421911001 CEST	80	49761	38.54.26.75	192.168.2.4
Oct 13, 2024 05:28:47.426754951 CEST	49760	80	192.168.2.4	90.84.161.27
Oct 13, 2024 05:28:47.477019072 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.477045059 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.477062941 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.477194071 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.522932053 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.588987112 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.589035988 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.589049101 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.589071035 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.589087009 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.589102983 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.589118004 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.589145899 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.589196920 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.589909077 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.589924097 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.589939117 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.589955091 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.589970112 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.590008020 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.590029001 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.590029001 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.590663910 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.593389988 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.593416929 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.593466043 CEST	49752	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.593472004 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.593487024 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.593528986 CEST	49752	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.605344057 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.605370998 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.605384111 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.605453014 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.605489969 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.605531931 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.605559111 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.605573893 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.605590105 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.605607033 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.605614901 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.605643034 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.606398106 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.606414080 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.606430054 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.606445074 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.606457949 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.606482983 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.610995054 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.611016989 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.611038923 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.611052990 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.611068010 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.611115932 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.611115932 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.611433983 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.611448050 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.611463070 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.611476898 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.611545086 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.611545086 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.634824038 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.745927095 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.788063049 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.788089037 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.788104057 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.788157940 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.794888973 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.841104031 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.899041891 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.899097919 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.899111986 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.899146080 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.899144888 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.899193048 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.899194956 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.899211884 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.899229050 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.899244070 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.899892092 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.899934053 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.905431986 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.914453983 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:47.952239037 CEST	49752	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.968229055 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:47.993453979 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:48.047966003 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:48.097554922 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:48.097572088 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:48.097587109 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:48.097732067 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:48.407943964 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:48.407978058 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:48.408010960 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:48.408046007 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:48.408164024 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:48.467170000 CEST	80	49761	38.54.26.75	192.168.2.4
Oct 13, 2024 05:28:48.509360075 CEST	49761	80	192.168.2.4	38.54.26.75
Oct 13, 2024 05:28:51.138082027 CEST	443	49742	172.217.18.4	192.168.2.4
Oct 13, 2024 05:28:51.138187885 CEST	443	49742	172.217.18.4	192.168.2.4
Oct 13, 2024 05:28:51.138360023 CEST	49742	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:28:53.061420918 CEST	49742	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:28:53.061453104 CEST	443	49742	172.217.18.4	192.168.2.4
Oct 13, 2024 05:28:54.046241045 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:54.046277046 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:54.046348095 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:54.046356916 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:54.046367884 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:54.046437025 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:54.359471083 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:54.359493017 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:54.359504938 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:54.359621048 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:54.408339977 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:54.672449112 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:54.707367897 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:54.707828045 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:54.711436033 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:54.712316990 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:54.712630987 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:54.716267109 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.111666918 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.111690044 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.111831903 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:55.116552114 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.116564035 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.116575956 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.116585970 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.116683006 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:55.116714954 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:55.187952042 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.188452959 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.188463926 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.188505888 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.188580036 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:55.188580036 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:55.194734097 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:55.199695110 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.209197998 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:55.214138985 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.426637888 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.426651001 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.426692963 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.426704884 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.426717043 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.426717997 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:55.426762104 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:55.620410919 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.672684908 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.673254967 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.673320055 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.673366070 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:55.673671007 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:55.723536015 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:55.738804102 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.738816023 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.738827944 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.738851070 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.738862991 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:55.738888979 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:55.738945007 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:56.049252987 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:56.049283028 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:56.049295902 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:56.049308062 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:56.049323082 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:56.049395084 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:56.335774899 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:56.340719938 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:56.638485909 CEST	49763	80	192.168.2.4	43.129.254.124
Oct 13, 2024 05:28:56.638818026 CEST	49764	80	192.168.2.4	43.129.254.124
Oct 13, 2024 05:28:56.644603968 CEST	80	49763	43.129.254.124	192.168.2.4
Oct 13, 2024 05:28:56.644637108 CEST	80	49764	43.129.254.124	192.168.2.4
Oct 13, 2024 05:28:56.644705057 CEST	49763	80	192.168.2.4	43.129.254.124
Oct 13, 2024 05:28:56.644799948 CEST	49764	80	192.168.2.4	43.129.254.124
Oct 13, 2024 05:28:56.665601015 CEST	49763	80	192.168.2.4	43.129.254.124
Oct 13, 2024 05:28:56.670521021 CEST	80	49763	43.129.254.124	192.168.2.4
Oct 13, 2024 05:28:56.745666027 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:56.785150051 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:57.626563072 CEST	80	49763	43.129.254.124	192.168.2.4
Oct 13, 2024 05:28:57.644886017 CEST	49765	443	192.168.2.4	43.154.254.90
Oct 13, 2024 05:28:57.644920111 CEST	443	49765	43.154.254.90	192.168.2.4
Oct 13, 2024 05:28:57.644984007 CEST	49765	443	192.168.2.4	43.154.254.90
Oct 13, 2024 05:28:57.645220041 CEST	49765	443	192.168.2.4	43.154.254.90
Oct 13, 2024 05:28:57.645231009 CEST	443	49765	43.154.254.90	192.168.2.4
Oct 13, 2024 05:28:57.676634073 CEST	49763	80	192.168.2.4	43.129.254.124
Oct 13, 2024 05:28:57.867104053 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:57.867120981 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:57.867132902 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:28:57.867214918 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:28:58.604665995 CEST	443	49765	43.154.254.90	192.168.2.4
Oct 13, 2024 05:28:58.622987032 CEST	49765	443	192.168.2.4	43.154.254.90
Oct 13, 2024 05:28:58.623013973 CEST	443	49765	43.154.254.90	192.168.2.4
Oct 13, 2024 05:28:58.624201059 CEST	443	49765	43.154.254.90	192.168.2.4
Oct 13, 2024 05:28:58.624269009 CEST	49765	443	192.168.2.4	43.154.254.90
Oct 13, 2024 05:28:58.624281883 CEST	443	49765	43.154.254.90	192.168.2.4
Oct 13, 2024 05:28:58.624357939 CEST	49765	443	192.168.2.4	43.154.254.90
Oct 13, 2024 05:28:58.666630030 CEST	49765	443	192.168.2.4	43.154.254.90
Oct 13, 2024 05:28:58.666821957 CEST	443	49765	43.154.254.90	192.168.2.4
Oct 13, 2024 05:28:58.667129993 CEST	49765	443	192.168.2.4	43.154.254.90
Oct 13, 2024 05:28:58.667151928 CEST	443	49765	43.154.254.90	192.168.2.4
Oct 13, 2024 05:28:58.712439060 CEST	49765	443	192.168.2.4	43.154.254.90
Oct 13, 2024 05:28:59.205005884 CEST	443	49765	43.154.254.90	192.168.2.4
Oct 13, 2024 05:28:59.205102921 CEST	443	49765	43.154.254.90	192.168.2.4
Oct 13, 2024 05:28:59.205153942 CEST	49765	443	192.168.2.4	43.154.254.90
Oct 13, 2024 05:28:59.215390921 CEST	49765	443	192.168.2.4	43.154.254.90
Oct 13, 2024 05:28:59.215410948 CEST	443	49765	43.154.254.90	192.168.2.4
Oct 13, 2024 05:28:59.291608095 CEST	49766	80	192.168.2.4	43.154.240.170
Oct 13, 2024 05:28:59.292387009 CEST	49767	80	192.168.2.4	43.154.240.170
Oct 13, 2024 05:28:59.296533108 CEST	80	49766	43.154.240.170	192.168.2.4
Oct 13, 2024 05:28:59.296646118 CEST	49766	80	192.168.2.4	43.154.240.170
Oct 13, 2024 05:28:59.296855927 CEST	49766	80	192.168.2.4	43.154.240.170
Oct 13, 2024 05:28:59.297265053 CEST	80	49767	43.154.240.170	192.168.2.4
Oct 13, 2024 05:28:59.297329903 CEST	49767	80	192.168.2.4	43.154.240.170
Oct 13, 2024 05:28:59.301652908 CEST	80	49766	43.154.240.170	192.168.2.4
Oct 13, 2024 05:28:59.692711115 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:28:59.692761898 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:28:59.692859888 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:28:59.693681955 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:28:59.693694115 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.214782000 CEST	80	49766	43.154.240.170	192.168.2.4
Oct 13, 2024 05:29:00.268740892 CEST	49766	80	192.168.2.4	43.154.240.170
Oct 13, 2024 05:29:00.279943943 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.280118942 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.286951065 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.286959887 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.287269115 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.303941011 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.351408958 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.412058115 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.412081957 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.412098885 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.412287951 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.412301064 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.412424088 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.412875891 CEST	49769	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:00.412929058 CEST	443	49769	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:00.413001060 CEST	49769	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:00.413774014 CEST	49769	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:00.413785934 CEST	443	49769	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:00.496546984 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.496577024 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.497009993 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.497029066 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.498400927 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.498419046 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.498686075 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.498693943 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.501753092 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.593365908 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.593388081 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.593692064 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.593703985 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.594274998 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.594290972 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.594677925 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.594677925 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.594685078 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.594744921 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.595710039 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.595724106 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.595791101 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.595796108 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.596673965 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.596688986 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.596712112 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.596715927 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.596889019 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.596889019 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.682357073 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.682379007 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.682467937 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.682507992 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.682518005 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.682533026 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.682774067 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.683549881 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.683563948 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.683751106 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.683758974 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.684187889 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.684204102 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.684252024 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.684257030 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.684674025 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.685152054 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.685164928 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.685223103 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.685229063 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.685971022 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.685980082 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.686018944 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.686031103 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.686037064 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.686067104 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.686090946 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.686095953 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.686132908 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.686187029 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.686346054 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.686346054 CEST	49768	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.686366081 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.686374903 CEST	443	49768	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.749233007 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.749279022 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.749376059 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.749463081 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.749510050 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.750030994 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.750093937 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.750116110 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.750122070 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.750149012 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.750174999 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.750200987 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.750216007 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.750224113 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.750296116 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.750308037 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.750662088 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.750679016 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.750730038 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.750745058 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.750799894 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.750808954 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:00.752732992 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.752839088 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:00.752851963 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.039037943 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:29:01.079574108 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:29:01.414973974 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.432418108 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.437808990 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.439275026 CEST	443	49769	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:01.451267958 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.457763910 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.481645107 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.482043982 CEST	49769	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:01.482044935 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.499732971 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.508816957 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.539402008 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.539428949 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.543196917 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.543205976 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.547125101 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.547137022 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.547688007 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.547694921 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.548819065 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.548826933 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.550461054 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.550467968 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.551764011 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.551776886 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.552092075 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.552104950 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.552123070 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.552129030 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.552618027 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.552623987 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.552762985 CEST	49769	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:01.552772045 CEST	443	49769	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:01.553986073 CEST	443	49769	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:01.554048061 CEST	49769	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:01.554053068 CEST	443	49769	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:01.554090023 CEST	49769	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:01.555211067 CEST	49769	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:01.555274963 CEST	443	49769	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:01.555512905 CEST	49769	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:01.555520058 CEST	443	49769	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:01.597153902 CEST	49769	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:01.647476912 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.647496939 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.647583008 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.647607088 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.648339033 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.648355007 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.648363113 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.648509979 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.648535013 CEST	443	49774	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.648600101 CEST	49774	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.649522066 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.649545908 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.649595976 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.649607897 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.649636030 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.649838924 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.649859905 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.649869919 CEST	49773	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.649876118 CEST	443	49773	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.650290012 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.650345087 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.650484085 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.650496006 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.650559902 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.650564909 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.650624990 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.650717974 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.650717974 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.650739908 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.650821924 CEST	49771	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.650830984 CEST	443	49771	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.653042078 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.653081894 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.653119087 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.653145075 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.653147936 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.653281927 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.653294086 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.653300047 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.653429985 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.653485060 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.653538942 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.653546095 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.653548956 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.653685093 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.653685093 CEST	49770	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.653707027 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.653716087 CEST	443	49770	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.654381037 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.654437065 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.654854059 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.654942036 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.655009985 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.655097008 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.655112028 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.655121088 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.655210018 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.655210018 CEST	49772	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.655217886 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.655225992 CEST	443	49772	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.655433893 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.655448914 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.655512094 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.655616045 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.655632973 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.657171011 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.657181025 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:01.657247066 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.657366991 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:01.657371998 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.000560045 CEST	443	49769	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:02.000667095 CEST	443	49769	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:02.001276970 CEST	49769	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:02.001306057 CEST	443	49769	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:02.001317978 CEST	49769	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:02.001353025 CEST	49769	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:02.004228115 CEST	49780	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:02.004278898 CEST	443	49780	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:02.004374027 CEST	49780	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:02.004599094 CEST	49780	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:02.004616976 CEST	443	49780	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:02.328936100 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.329847097 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.330351114 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.330388069 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.330612898 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.330656052 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.331054926 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.331063032 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.331255913 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.331269979 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.339797974 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.340173960 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.340183020 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.340686083 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.340691090 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.343130112 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.343472004 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.343498945 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.343949080 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.343955994 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.376363039 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.377126932 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.377140999 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.377571106 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.377574921 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.430377960 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.430526972 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.430618048 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.430758953 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.430783987 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.430794954 CEST	49775	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.430803061 CEST	443	49775	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.431114912 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.431174040 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.431221008 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.431307077 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.431328058 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.431337118 CEST	49777	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.431343079 CEST	443	49777	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.433623075 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.433675051 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.433686018 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.433696985 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.433795929 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.433795929 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.433931112 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.433931112 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.433950901 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.433969021 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.441509962 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.441564083 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.441649914 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.441826105 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.441838980 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.441874981 CEST	49779	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.441880941 CEST	443	49779	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.444561958 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.444612980 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.444688082 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.444839954 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.444854975 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.445296049 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.445441961 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.445502043 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.445535898 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.445547104 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.445554972 CEST	49778	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.445559978 CEST	443	49778	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.447438002 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.447490931 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.447581053 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.447734118 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.447751045 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.478678942 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.478837967 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.478955030 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.479147911 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.479172945 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.479187012 CEST	49776	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.479193926 CEST	443	49776	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.483117104 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.483175039 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.483264923 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.483407974 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:02.483421087 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:02.627181053 CEST	80	49763	43.129.254.124	192.168.2.4
Oct 13, 2024 05:29:02.627290964 CEST	49763	80	192.168.2.4	43.129.254.124
Oct 13, 2024 05:29:02.922785044 CEST	443	49780	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:02.923121929 CEST	49780	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:02.923142910 CEST	443	49780	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:02.923494101 CEST	443	49780	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:02.925055027 CEST	49780	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:02.925121069 CEST	443	49780	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:02.925322056 CEST	49780	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:02.971399069 CEST	443	49780	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:03.051126003 CEST	49763	80	192.168.2.4	43.129.254.124
Oct 13, 2024 05:29:03.055907965 CEST	80	49763	43.129.254.124	192.168.2.4
Oct 13, 2024 05:29:03.093966961 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.094652891 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.094676018 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.095118999 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.095125914 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.103324890 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.103806019 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.103841066 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.104229927 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.104237080 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.108076096 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.108339071 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.108360052 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.108652115 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.108663082 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.122035980 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.122513056 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.122528076 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.122958899 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.122967958 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.162909985 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.168206930 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.168267012 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.168958902 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.168972015 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.195455074 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.195509911 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.195626974 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.195879936 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.195904016 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.195914984 CEST	49783	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.195920944 CEST	443	49783	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.198964119 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.199004889 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.199089050 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.199278116 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.199291945 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.206015110 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.206152916 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.206228018 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.206268072 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.206284046 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.206296921 CEST	49784	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.206304073 CEST	443	49784	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.208709002 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.208728075 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.208797932 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.208908081 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.208921909 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.213202000 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.213255882 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.213342905 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.213474035 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.213474035 CEST	49781	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.213496923 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.213507891 CEST	443	49781	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.215297937 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.215326071 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.215400934 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.215497017 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.215508938 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.226722002 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.226854086 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.226955891 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.226955891 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.226955891 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.228966951 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.228993893 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.229073048 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.229180098 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.229191065 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.270201921 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.270354986 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.270437002 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.270487070 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.270500898 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.270515919 CEST	49785	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.270523071 CEST	443	49785	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.272622108 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.272650003 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.272716999 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.273173094 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.273188114 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.471093893 CEST	443	49780	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:03.471182108 CEST	443	49780	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:03.471237898 CEST	49780	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:03.472978115 CEST	49780	443	192.168.2.4	43.155.124.49
Oct 13, 2024 05:29:03.472989082 CEST	443	49780	43.155.124.49	192.168.2.4
Oct 13, 2024 05:29:03.501235008 CEST	49791	443	192.168.2.4	43.153.248.110
Oct 13, 2024 05:29:03.501271963 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:03.501322985 CEST	49791	443	192.168.2.4	43.153.248.110
Oct 13, 2024 05:29:03.502466917 CEST	49791	443	192.168.2.4	43.153.248.110
Oct 13, 2024 05:29:03.502485991 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:03.527407885 CEST	49782	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.527432919 CEST	443	49782	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.578015089 CEST	80	49764	43.129.254.124	192.168.2.4
Oct 13, 2024 05:29:03.578109980 CEST	49764	80	192.168.2.4	43.129.254.124
Oct 13, 2024 05:29:03.871866941 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.876889944 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.879468918 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.886368990 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.886395931 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.886908054 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.886914015 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.887159109 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.887187004 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.887548923 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.887556076 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.887751102 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.887783051 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.888106108 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.888113022 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.930380106 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.932740927 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.971797943 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.971816063 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.972248077 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.972251892 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.975167036 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.984121084 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.984174013 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.984231949 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.988903999 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.988945007 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.988996029 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.992419004 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.992548943 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.992614985 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.995743990 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.995769978 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.995779991 CEST	49788	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.995786905 CEST	443	49788	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:03.995858908 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:03.995867968 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.003016949 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.003022909 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.016195059 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.016210079 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.016243935 CEST	49787	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.016251087 CEST	443	49787	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.016304016 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.016350031 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.016364098 CEST	49786	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.016370058 CEST	443	49786	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.053853035 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.053910017 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.053997993 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.054749012 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.054810047 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.054876089 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.055008888 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.055022001 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.055152893 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.055171967 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.055958033 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.055967093 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.056020975 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.056107998 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.056117058 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.071393013 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.071439028 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.071482897 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.071614981 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.071614981 CEST	49790	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.071630955 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.071639061 CEST	443	49790	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.074084997 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.074119091 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.074279070 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.074279070 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.074314117 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.105460882 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.105645895 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.105703115 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.105720997 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.105726957 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.105736971 CEST	49789	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.105741024 CEST	443	49789	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.107595921 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.107645035 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.107753038 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.107948065 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:04.107966900 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:04.446100950 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:04.446397066 CEST	49791	443	192.168.2.4	43.153.248.110
Oct 13, 2024 05:29:04.446412086 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:04.447407961 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:04.447504044 CEST	49791	443	192.168.2.4	43.153.248.110
Oct 13, 2024 05:29:04.447511911 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:04.447562933 CEST	49791	443	192.168.2.4	43.153.248.110
Oct 13, 2024 05:29:04.448368073 CEST	49791	443	192.168.2.4	43.153.248.110
Oct 13, 2024 05:29:04.448426008 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:04.448617935 CEST	49791	443	192.168.2.4	43.153.248.110
Oct 13, 2024 05:29:04.448625088 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:04.489703894 CEST	49791	443	192.168.2.4	43.153.248.110
Oct 13, 2024 05:29:05.049544096 CEST	49764	80	192.168.2.4	43.129.254.124
Oct 13, 2024 05:29:05.354486942 CEST	49764	80	192.168.2.4	43.129.254.124
Oct 13, 2024 05:29:05.526725054 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:05.526751995 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:05.526760101 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:05.526792049 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:05.526846886 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:05.526885986 CEST	49791	443	192.168.2.4	43.153.248.110
Oct 13, 2024 05:29:05.526932001 CEST	49791	443	192.168.2.4	43.153.248.110
Oct 13, 2024 05:29:05.527595997 CEST	80	49764	43.129.254.124	192.168.2.4
Oct 13, 2024 05:29:05.527616024 CEST	80	49764	43.129.254.124	192.168.2.4
Oct 13, 2024 05:29:05.527689934 CEST	49764	80	192.168.2.4	43.129.254.124
Oct 13, 2024 05:29:05.541363001 CEST	49791	443	192.168.2.4	43.153.248.110
Oct 13, 2024 05:29:05.541379929 CEST	443	49791	43.153.248.110	192.168.2.4
Oct 13, 2024 05:29:05.611763000 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.611802101 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:05.611874104 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.611969948 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.611978054 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:05.612036943 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.612188101 CEST	49799	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.612231016 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:05.612319946 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.612337112 CEST	49799	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.612354040 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:05.612396002 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.612519026 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.612550020 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:05.612598896 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.614260912 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.614278078 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:05.614424944 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.614439011 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:05.614554882 CEST	49799	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.614568949 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:05.614765882 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.614778996 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:05.614949942 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:05.614959002 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:05.632778883 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.636751890 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.636775017 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.637207985 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.637214899 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.719507933 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.720190048 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.720210075 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.720773935 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.720781088 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.723771095 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.724282026 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.724299908 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.724777937 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.724785089 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.727842093 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.728315115 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.728351116 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.728739977 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.728745937 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.730556011 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.730866909 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.730880976 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.731221914 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.731225967 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.734771013 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.734926939 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.735094070 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.735131025 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.735131025 CEST	49796	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.735148907 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.735157967 CEST	443	49796	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.738698959 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.738732100 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.738806009 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.739842892 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.739856958 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.822448015 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.822509050 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.822757959 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.822779894 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.822798014 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.822808027 CEST	49795	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.822814941 CEST	443	49795	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.825747967 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.825779915 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.825869083 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.826023102 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.826035976 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.828783989 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.828838110 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.828979969 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.828979969 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.828995943 CEST	49792	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.829000950 CEST	443	49792	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.834007025 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.834043026 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.834115982 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.834268093 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.834281921 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.834697962 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.834837914 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.835022926 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.835066080 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.835087061 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.835105896 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.835189104 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.835203886 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.835212946 CEST	49794	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.835220098 CEST	443	49794	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.835227966 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.835232019 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.835264921 CEST	49793	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.835268974 CEST	443	49793	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.837977886 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.838035107 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.838207960 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.838346004 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.838365078 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.838726997 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.838736057 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:05.838810921 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.838896036 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:05.838910103 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.149621010 CEST	80	49767	43.154.240.170	192.168.2.4
Oct 13, 2024 05:29:06.150288105 CEST	49767	80	192.168.2.4	43.154.240.170
Oct 13, 2024 05:29:06.193172932 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.193517923 CEST	49799	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.193527937 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.194626093 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.194701910 CEST	49799	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.195681095 CEST	49799	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.195744038 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.195975065 CEST	49799	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.195981979 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.238229990 CEST	49799	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.270653009 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.271245956 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.271259069 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.272286892 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.272388935 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.272753000 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.272800922 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.272805929 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.272829056 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.273333073 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.276477098 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.282450914 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.292978048 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.294270039 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.294280052 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.294311047 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.294353008 CEST	49799	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.294368982 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.294410944 CEST	49799	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.294437885 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.294492006 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.294538021 CEST	49799	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.306744099 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.306757927 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.306847095 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.306860924 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.306926012 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.306934118 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.307933092 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.307943106 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.307955980 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.308001995 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.308064938 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.308067083 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.308959007 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.309031010 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.309267998 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.309329987 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.309567928 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.309624910 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.310098886 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.310106993 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.310206890 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.310215950 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.310283899 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.310290098 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.316276073 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.316284895 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.353326082 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.353326082 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.354305029 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.369324923 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.369477987 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.374878883 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.374888897 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.374916077 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.374927044 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.374937057 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.374964952 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.374978065 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.375010014 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.375025034 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.375049114 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.406641960 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.408310890 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.408432961 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.408453941 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.408488989 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.408492088 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.408507109 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.408523083 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.408524990 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.408539057 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.408552885 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.408569098 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.408582926 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.408613920 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.408660889 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.409281969 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.411745071 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.411753893 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.411782980 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.411792040 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.411793947 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.411801100 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.411827087 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.411847115 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.411878109 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.413893938 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.413906097 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.413933039 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.413948059 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.413954973 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.413959026 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.413975000 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.413985968 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.414012909 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.414032936 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.415231943 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.416251898 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.457864046 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.459167004 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.459177017 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.459204912 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.459213018 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.459306955 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.459306955 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.459321022 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.459371090 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.460230112 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.460238934 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.460261106 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.460302114 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.460310936 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.460350990 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.460350990 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.498759031 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.499208927 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.499231100 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.499331951 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.499342918 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.499356031 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.499382019 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.500601053 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.500623941 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.500689030 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.500694990 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.500731945 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.500750065 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.501846075 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.501866102 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.501956940 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.501971006 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.502016068 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.503786087 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.503803015 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.503885984 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.503900051 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.503942013 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.507209063 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.511501074 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.546750069 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.546775103 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.546875000 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.546890020 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.546925068 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.547174931 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.548567057 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.548589945 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.548671961 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.548672915 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.548681021 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.548721075 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.549215078 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.549256086 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.549305916 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.549313068 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.549323082 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.549390078 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.550231934 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.550251961 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.550323963 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.550323963 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.550333023 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.550595999 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.551989079 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.551985979 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.553760052 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.553803921 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.588345051 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.588370085 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.588445902 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.588462114 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.588489056 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.588505983 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.589168072 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.589186907 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.589246035 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.589251995 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.589282036 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.589299917 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.589893103 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.589940071 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.589953899 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.589962006 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.589993000 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.590297937 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.590342045 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.591469049 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.591490984 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.591562033 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.591583967 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.591629028 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.592931032 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.592948914 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.593008995 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.593017101 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.593031883 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.593055010 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.593082905 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.593166113 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.593722105 CEST	49799	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.593739986 CEST	443	49799	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.593766928 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.593820095 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.593827963 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.593837023 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.593848944 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.593863010 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.593873978 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.593899965 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.594912052 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.635035038 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.635078907 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.635246038 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.635246038 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.635257006 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.635400057 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.635906935 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.635946989 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.636003017 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.636009932 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.636037111 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.636143923 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.636379004 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.636401892 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.636440039 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.636446953 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.636468887 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.636493921 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.636493921 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.636502028 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.636527061 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.636565924 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.636672020 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.638489008 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.638500929 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.651289940 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.651295900 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.652872086 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.652877092 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.653409004 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.653414965 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.653805017 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.653819084 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.654181004 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.654185057 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.655622959 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.655654907 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.655670881 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.655683994 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.656024933 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.656033039 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.656402111 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.656411886 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.658271074 CEST	49767	80	192.168.2.4	43.154.240.170
Oct 13, 2024 05:29:06.658552885 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.658592939 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.658644915 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.661844015 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.661864996 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.663036108 CEST	80	49767	43.154.240.170	192.168.2.4
Oct 13, 2024 05:29:06.663667917 CEST	49808	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.663691998 CEST	443	49808	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.663748026 CEST	49808	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.663938999 CEST	49808	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.663949013 CEST	443	49808	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.667823076 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.670289993 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.676915884 CEST	49798	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.676928997 CEST	443	49798	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.677448988 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.677478075 CEST	443	49809	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.677539110 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.678316116 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.678329945 CEST	443	49809	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.700340033 CEST	49800	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.700381041 CEST	443	49800	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.700812101 CEST	49810	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.700824976 CEST	443	49810	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.700890064 CEST	49810	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.701709986 CEST	49810	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.701721907 CEST	443	49810	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.701906919 CEST	49797	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.701921940 CEST	443	49797	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.702228069 CEST	49811	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.702250957 CEST	443	49811	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.702305079 CEST	49811	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.703223944 CEST	49811	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.703236103 CEST	443	49811	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.741419077 CEST	49801	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.741446972 CEST	443	49801	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.741668940 CEST	49812	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.741712093 CEST	443	49812	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.741770983 CEST	49812	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.742486000 CEST	49812	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:06.742497921 CEST	443	49812	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:06.751422882 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.751595020 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.751671076 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.752305984 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.752470016 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.752532005 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.753959894 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.754102945 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.754180908 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.754441977 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.754492044 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.754538059 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.754543066 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.754606962 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.754650116 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.771846056 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.771846056 CEST	49802	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.771868944 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.771878004 CEST	443	49802	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.772041082 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.772058010 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.772068977 CEST	49806	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.772074938 CEST	443	49806	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.772130966 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.772161961 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.772197008 CEST	49804	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.772203922 CEST	443	49804	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.774072886 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.774080038 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.774087906 CEST	49805	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.774091959 CEST	443	49805	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.774178028 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.774204969 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.774219036 CEST	49803	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.774228096 CEST	443	49803	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.786029100 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.786068916 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.786144972 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.786144972 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.786175013 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.786231041 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.787883997 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.787924051 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.787986994 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.788541079 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.788570881 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.788630962 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.788774967 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.788789988 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.788866043 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.788888931 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.789499998 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.789515018 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.789872885 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.789886951 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.791327953 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.791357040 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:06.791491985 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.791683912 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:06.791696072 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.061657906 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.061703920 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.061780930 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.061816931 CEST	49819	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.061873913 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.061933994 CEST	49819	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.061960936 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.062016010 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.062063932 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.062088966 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.062113047 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.062161922 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.062320948 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.062336922 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.062472105 CEST	49819	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.062484980 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.062587023 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.062602043 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.062722921 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.062736988 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.131948948 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.132242918 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.132256031 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.132608891 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.132946968 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.133003950 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.133099079 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.179408073 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.209445953 CEST	443	49812	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.209836006 CEST	49812	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.209865093 CEST	443	49812	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.210882902 CEST	443	49812	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.210978031 CEST	49812	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.213680983 CEST	49812	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.213742971 CEST	443	49812	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.213862896 CEST	49812	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.213871956 CEST	443	49812	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.235373974 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.254729986 CEST	49812	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.285844088 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.310532093 CEST	443	49812	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.324863911 CEST	443	49808	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.325103045 CEST	49808	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.325118065 CEST	443	49808	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.325452089 CEST	443	49808	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.325820923 CEST	49808	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.325877905 CEST	443	49808	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.326006889 CEST	49808	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.330744028 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.330754042 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.330790997 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.330818892 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.330826998 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.330845118 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.330871105 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.330888987 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.332791090 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.332809925 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.332858086 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.332865000 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.332921982 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.345545053 CEST	443	49812	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.345609903 CEST	49812	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.345623970 CEST	443	49812	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.345658064 CEST	443	49812	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.345705032 CEST	49812	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.350487947 CEST	49812	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.350505114 CEST	443	49812	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.355519056 CEST	443	49811	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.355725050 CEST	49811	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.355731964 CEST	443	49811	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.356724977 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.356755018 CEST	443	49822	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.356812954 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.356993914 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.357007027 CEST	443	49822	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.357271910 CEST	443	49811	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.357327938 CEST	49811	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.357646942 CEST	49811	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.357742071 CEST	443	49811	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.357780933 CEST	49811	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.364116907 CEST	443	49810	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.364315987 CEST	49810	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.364332914 CEST	443	49810	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.365338087 CEST	443	49810	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.365406990 CEST	49810	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.365482092 CEST	443	49809	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.365736961 CEST	49810	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.365801096 CEST	443	49810	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.365931034 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.365937948 CEST	443	49809	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.366036892 CEST	49810	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.366045952 CEST	443	49810	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.366966009 CEST	443	49809	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.367018938 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.367449999 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.367507935 CEST	443	49809	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.367551088 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.371402025 CEST	443	49808	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.403409004 CEST	443	49811	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.409742117 CEST	49811	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.409750938 CEST	443	49811	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.409759045 CEST	49810	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.409789085 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.409801006 CEST	443	49809	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.422285080 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.422308922 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.422348022 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.422364950 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.422388077 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.422408104 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.423701048 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.423718929 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.423773050 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.423779011 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.423813105 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.423825979 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.424719095 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.424735069 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.424788952 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.424794912 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.424824953 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.424844027 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.425383091 CEST	443	49808	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.425884962 CEST	443	49808	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.425940990 CEST	49808	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.425949097 CEST	443	49808	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.425992012 CEST	49808	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.426106930 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.426139116 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.426146030 CEST	443	49808	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.426163912 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.426168919 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.426204920 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.426213026 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.426249027 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.426255941 CEST	443	49808	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.426304102 CEST	49808	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.426831007 CEST	49808	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.426846027 CEST	443	49808	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.426853895 CEST	49808	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.426897049 CEST	49808	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.428276062 CEST	49807	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.428288937 CEST	443	49807	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.431984901 CEST	49823	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.432086945 CEST	443	49823	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.432178020 CEST	49823	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.432408094 CEST	49823	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.432446003 CEST	443	49823	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.448633909 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.452646017 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.454933882 CEST	443	49811	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.455035925 CEST	49811	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.455049038 CEST	443	49811	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.455085039 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.455096960 CEST	49811	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.455447912 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.455580950 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.455602884 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.456079960 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.456084967 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.456428051 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.456465006 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.456957102 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.457016945 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.457721949 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.457731009 CEST	49811	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.457745075 CEST	443	49811	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.459194899 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.459213972 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.459691048 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.459696054 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.460050106 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.460064888 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.460413933 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.460419893 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.461674929 CEST	49824	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.461709976 CEST	443	49824	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.461781979 CEST	49824	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.462208986 CEST	49825	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.462249041 CEST	443	49825	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.462310076 CEST	49825	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.462483883 CEST	49824	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.462502956 CEST	443	49824	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.462646008 CEST	49825	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.462661028 CEST	443	49825	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.464838028 CEST	443	49810	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.465189934 CEST	443	49810	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.465241909 CEST	49810	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.465248108 CEST	443	49810	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.465296984 CEST	49810	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.465512991 CEST	49810	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.465526104 CEST	443	49810	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.469808102 CEST	443	49809	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.470319986 CEST	443	49809	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.470341921 CEST	443	49809	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.470401049 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.470411062 CEST	443	49809	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.470453978 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.470509052 CEST	443	49809	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.470623970 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.470637083 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.470638990 CEST	443	49809	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.470685959 CEST	49809	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.478245020 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.478784084 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.478809118 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.479273081 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.479278088 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.554999113 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.555084944 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.555227041 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.555438042 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.555464029 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.555475950 CEST	49817	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.555481911 CEST	443	49817	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.556751966 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.556890965 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.556973934 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.557185888 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.557185888 CEST	49816	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.557226896 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.557250977 CEST	443	49816	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.559495926 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.559551954 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.559608936 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.560971975 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.561033010 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.561080933 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.610210896 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.610263109 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.610351086 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.610871077 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.610871077 CEST	49813	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.610892057 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.610901117 CEST	443	49813	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.612982988 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.612988949 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.612998009 CEST	49814	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.613003969 CEST	443	49814	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.613178015 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.613188982 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.614759922 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.614794016 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.614862919 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.615509033 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.615576029 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.615655899 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.615747929 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.615763903 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.615869999 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.615906000 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.616046906 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.616099119 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.616163015 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.616271019 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.616285086 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.638739109 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.638881922 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.639053106 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.639053106 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.639053106 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.641072989 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.641109943 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.641186953 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.641304970 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.641318083 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.847619057 CEST	49831	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:07.847661972 CEST	443	49831	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:07.847733974 CEST	49831	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:07.847796917 CEST	49832	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:07.847834110 CEST	443	49832	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:07.847898960 CEST	49832	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:07.847995996 CEST	49831	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:07.848011971 CEST	443	49831	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:07.848124981 CEST	49832	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:07.848146915 CEST	443	49832	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:07.854959011 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.855207920 CEST	49819	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.855222940 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.856257915 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.856343031 CEST	49819	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.856642008 CEST	49819	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.856708050 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.856904984 CEST	49819	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.856914997 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.898053885 CEST	49819	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.929089069 CEST	443	49824	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.929380894 CEST	49824	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.929394007 CEST	443	49824	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.930531025 CEST	443	49824	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.930833101 CEST	49824	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.930969000 CEST	49824	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:07.930974960 CEST	443	49824	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.931014061 CEST	443	49824	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:07.940156937 CEST	49815	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:07.940184116 CEST	443	49815	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:07.950747967 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.950997114 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.951015949 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.952150106 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.952210903 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.952581882 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.952645063 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.952760935 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.952768087 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.970478058 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.971168995 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.971189976 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.974525928 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.974590063 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.974895000 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.974972963 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.975029945 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.975034952 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.976049900 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.976222992 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.976246119 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.979863882 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.979927063 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.980151892 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.980240107 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:07.980314016 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:07.985981941 CEST	49824	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:08.002022982 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.017167091 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.017659903 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.019618988 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.019628048 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.019665003 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.019695044 CEST	49819	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.019707918 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.019718885 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.019730091 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.019735098 CEST	49819	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.019757986 CEST	49819	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.019778967 CEST	49819	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.020061970 CEST	49819	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.020077944 CEST	443	49819	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.020454884 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.020499945 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.020559072 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.021657944 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.021673918 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.028641939 CEST	443	49824	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:08.028964996 CEST	443	49824	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:08.029017925 CEST	49824	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:08.029624939 CEST	49824	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:08.029632092 CEST	443	49824	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:08.030916929 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.030936003 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.078310966 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.116143942 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.118655920 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.118666887 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.118680000 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.118707895 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.118740082 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.118753910 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.118777037 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.118799925 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.139014959 CEST	443	49825	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:08.139348030 CEST	49825	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:08.139357090 CEST	443	49825	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:08.139858007 CEST	443	49825	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:08.140204906 CEST	49825	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:08.140300989 CEST	443	49825	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:08.140381098 CEST	49825	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:08.141601086 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.143837929 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.143862963 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.143908024 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.143943071 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.143950939 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.144004107 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.144021034 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.144021034 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.144073009 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.149111986 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.151958942 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.151983023 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.152000904 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.152029991 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.152046919 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.152067900 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.152076006 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.152096987 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.152101040 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.152120113 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.152120113 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.152151108 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.187401056 CEST	443	49825	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:08.187757969 CEST	49825	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:08.203020096 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.206424952 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.206459999 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.206563950 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.206583023 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.206628084 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.208179951 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.208204031 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.208266973 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.208276033 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.208322048 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.225140095 CEST	443	49822	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.225397110 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.225420952 CEST	443	49822	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.226469994 CEST	443	49822	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.226547003 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.226826906 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.226888895 CEST	443	49822	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.226963997 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.226972103 CEST	443	49822	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.236284971 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.236341953 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.236370087 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.236377001 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.236402988 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.236418962 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.244384050 CEST	443	49825	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:08.244822979 CEST	443	49825	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:08.244880915 CEST	49825	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:08.245098114 CEST	49825	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:08.245115995 CEST	443	49825	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:08.245564938 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.245590925 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.245634079 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.245637894 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.245654106 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.245667934 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.245683908 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.245695114 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.245711088 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.245726109 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.247416019 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.247481108 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.247503996 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.247520924 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.247551918 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.247567892 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.261635065 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.262181997 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.262203932 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.262670040 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.262675047 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.264863014 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.266145945 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.266164064 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.269517899 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.274291039 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.289904118 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.292330980 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.292336941 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.292553902 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.292582035 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.292671919 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.292695999 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.292996883 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.293001890 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.293091059 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.293097019 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.295006037 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.295027018 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.295094967 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.295104980 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.295146942 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.296088934 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.296103954 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.296183109 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.296190023 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.296241999 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.296350956 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.296751976 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.296767950 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.296797037 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.296837091 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.296868086 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.296875954 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.296901941 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.296932936 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.296946049 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.297221899 CEST	49818	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.297236919 CEST	443	49818	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.297533989 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.297539949 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.297704935 CEST	49834	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.297760963 CEST	443	49834	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.297827959 CEST	49834	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.298443079 CEST	49834	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.298460960 CEST	443	49834	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.303575039 CEST	443	49823	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.303807020 CEST	49823	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.303833961 CEST	443	49823	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.304922104 CEST	443	49823	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.304991961 CEST	49823	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.305334091 CEST	49823	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.305398941 CEST	443	49823	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.305461884 CEST	49823	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.305473089 CEST	443	49823	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.327615023 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.327672958 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.327712059 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.327725887 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.327759027 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.327780008 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.328891039 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.328933001 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.328960896 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.328965902 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.329015017 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.330003023 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.330044985 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.330087900 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.330092907 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.330137014 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.331787109 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.331830978 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.331855059 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.331861019 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.331922054 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.331927061 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.331971884 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.332001925 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.332055092 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.332117081 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.332129002 CEST	443	49821	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.332165003 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.332344055 CEST	49821	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.332698107 CEST	49835	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.332731962 CEST	443	49835	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.332796097 CEST	49835	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.333498955 CEST	49835	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.333508968 CEST	443	49835	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.338929892 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.338979006 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.339010954 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.339023113 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.339046955 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.339068890 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.340138912 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.340182066 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.340210915 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.340220928 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.340255976 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.340275049 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.341188908 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.341228962 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.341263056 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.341269970 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.341296911 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.341320038 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.342206955 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.342247009 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.342271090 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.342278957 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.342297077 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.342323065 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.348668098 CEST	49823	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.362947941 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.363020897 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.363070011 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.363313913 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.363326073 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.363336086 CEST	49826	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.363341093 CEST	443	49826	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.366976976 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.366992950 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.367062092 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.367214918 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.367223978 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.390665054 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.390703917 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.390750885 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.390918970 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.390930891 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.390940905 CEST	49829	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.390944958 CEST	443	49829	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.391264915 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.391382933 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.391455889 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.392039061 CEST	443	49822	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.392251968 CEST	443	49822	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.392273903 CEST	443	49822	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.392307997 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.392318964 CEST	443	49822	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.392350912 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.392623901 CEST	443	49822	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.392676115 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.392878056 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.392879963 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.392899036 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.392910004 CEST	49828	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.392918110 CEST	443	49828	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.392990112 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.393047094 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.393829107 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.393846035 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.393857956 CEST	49827	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.393867016 CEST	443	49827	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.397001982 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.397007942 CEST	443	49822	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.397026062 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.397053957 CEST	49822	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.397270918 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.397332907 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.397373915 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.397466898 CEST	49837	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.397510052 CEST	443	49837	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.397610903 CEST	49837	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.398127079 CEST	49837	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.398149967 CEST	443	49837	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.398281097 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.398323059 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.398376942 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.398693085 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.398699999 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.398708105 CEST	49830	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.398711920 CEST	443	49830	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.399224043 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.399247885 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.399298906 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.399518967 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.399535894 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.400121927 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.400137901 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.400197029 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.400229931 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.400240898 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.400314093 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.400326014 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.401349068 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.401367903 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.401422024 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.401729107 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:08.401742935 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:08.433895111 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.433958054 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.434004068 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.434025049 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.434043884 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.434070110 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.434421062 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.434468985 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.434503078 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.434509993 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.434535027 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.434554100 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.435158968 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.435200930 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.435233116 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.435239077 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.435264111 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.435286999 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.435300112 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.435317993 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.435344934 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.435741901 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.435755968 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.435794115 CEST	443	49820	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.435805082 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.435847044 CEST	49820	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.436027050 CEST	49842	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.436069012 CEST	443	49842	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.436136961 CEST	49842	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.436543941 CEST	49842	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.436559916 CEST	443	49842	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.481815100 CEST	443	49823	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.481879950 CEST	443	49823	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.481945038 CEST	443	49823	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.481945992 CEST	49823	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.481997013 CEST	49823	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.482506990 CEST	49823	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.482522011 CEST	443	49823	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.482939005 CEST	49843	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.482975006 CEST	443	49843	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.483037949 CEST	49843	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.483411074 CEST	49843	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.483422041 CEST	443	49843	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.634283066 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.634638071 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.634658098 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.635138988 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.635560036 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.635627031 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.635771036 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.683399916 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.809444904 CEST	443	49831	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:08.810621977 CEST	49831	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:08.810645103 CEST	443	49831	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:08.812199116 CEST	443	49831	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:08.812261105 CEST	49831	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:08.812269926 CEST	443	49831	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:08.812313080 CEST	49831	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:08.816243887 CEST	49831	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:08.816342115 CEST	443	49831	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:08.816606998 CEST	49831	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:08.816621065 CEST	443	49831	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:08.818337917 CEST	443	49832	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:08.819304943 CEST	49832	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:08.819324017 CEST	443	49832	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:08.822967052 CEST	443	49832	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:08.823080063 CEST	49832	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:08.823095083 CEST	443	49832	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:08.823200941 CEST	49832	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:08.824326038 CEST	49832	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:08.824472904 CEST	49832	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:08.824479103 CEST	443	49832	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:08.824501991 CEST	443	49832	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:08.862555981 CEST	49831	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:08.864531040 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.872142076 CEST	49832	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:08.872162104 CEST	443	49832	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:08.899162054 CEST	443	49834	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.912919044 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.916090965 CEST	49832	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:08.953460932 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.953512907 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.953560114 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.953596115 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.953627110 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.953640938 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.953658104 CEST	49834	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.953697920 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.953711033 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.953754902 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.954902887 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.954926968 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.954988956 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:08.954997063 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:08.955049038 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.006771088 CEST	49834	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.006787062 CEST	443	49834	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.008291006 CEST	443	49834	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.024629116 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.042299032 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.042371035 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.042433977 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.042449951 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.042500973 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.043461084 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.043524027 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.043543100 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.043554068 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.043589115 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.043616056 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.044949055 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.044991016 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.045028925 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.045036077 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.045104980 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.045799017 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.045841932 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.045871973 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.045876026 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.045918941 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.045926094 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.046000004 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.048333883 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.048371077 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.050411940 CEST	443	49842	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.052925110 CEST	49834	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.058022022 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.070106030 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.070115089 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.086918116 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.094854116 CEST	443	49843	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.098033905 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.100480080 CEST	49842	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.100965977 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.105834007 CEST	49834	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.105966091 CEST	49842	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.105973005 CEST	443	49842	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.106075048 CEST	49843	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.106089115 CEST	443	49843	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.106297970 CEST	443	49834	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.107007027 CEST	443	49842	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.107074022 CEST	49842	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.107095003 CEST	443	49843	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.107148886 CEST	49843	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.109951973 CEST	49834	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.114398003 CEST	49843	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.114459038 CEST	443	49843	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.114521980 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.118376970 CEST	49842	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.118446112 CEST	443	49842	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.118561983 CEST	49843	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.118567944 CEST	443	49843	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.118598938 CEST	49842	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.118607044 CEST	443	49842	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.122770071 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.122792959 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.123267889 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.123291969 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.123514891 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.123531103 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.123821974 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.123828888 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.142402887 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.142438889 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.152017117 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.152026892 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.152309895 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.152328968 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.155416012 CEST	443	49834	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.157798052 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.157803059 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.162548065 CEST	49842	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.162628889 CEST	49843	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.185707092 CEST	443	49835	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.201009989 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.201018095 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.201389074 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.201394081 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.203773975 CEST	49835	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.203783035 CEST	443	49835	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.204302073 CEST	443	49835	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.206386089 CEST	49835	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.206465960 CEST	443	49835	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.206630945 CEST	49835	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.217258930 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.225085974 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.225251913 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.225303888 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.225333929 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.225460052 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.225642920 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.225661039 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.225663900 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.225675106 CEST	49838	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.225680113 CEST	443	49838	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.250190020 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.250262022 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.250399113 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.251411915 CEST	443	49835	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.255419970 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.255496025 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.255594969 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.262782097 CEST	443	49837	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.272806883 CEST	443	49834	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.273070097 CEST	443	49834	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.273255110 CEST	443	49834	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.273355007 CEST	49834	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.285806894 CEST	443	49842	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.286164045 CEST	443	49842	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.286174059 CEST	443	49842	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.286250114 CEST	443	49842	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.286298990 CEST	49842	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.286315918 CEST	49842	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.300882101 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.301039934 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.301157951 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.310981035 CEST	49837	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.329034090 CEST	443	49843	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.329061031 CEST	443	49843	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.329252005 CEST	443	49843	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.329289913 CEST	49843	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.329323053 CEST	49843	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.331036091 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.331057072 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.331070900 CEST	49839	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.331075907 CEST	443	49839	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.331331968 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.331362963 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.331377029 CEST	49841	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.331393003 CEST	443	49841	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.332391024 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.332423925 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.332436085 CEST	49840	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.332442045 CEST	443	49840	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.334381104 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.334389925 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.334398985 CEST	49836	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.334403038 CEST	443	49836	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.355027914 CEST	49837	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.355036974 CEST	443	49837	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.355509996 CEST	49833	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.355531931 CEST	443	49833	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.356641054 CEST	443	49837	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.360356092 CEST	49837	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.360620022 CEST	49837	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.360714912 CEST	443	49837	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.370309114 CEST	443	49835	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.370531082 CEST	443	49835	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.370599031 CEST	49835	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.388164997 CEST	443	49831	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:09.388262033 CEST	443	49831	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:09.388345957 CEST	49831	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:09.406114101 CEST	49831	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:09.406148911 CEST	443	49831	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:09.408363104 CEST	443	49832	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:09.408442974 CEST	443	49832	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:09.408514023 CEST	49832	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:09.410200119 CEST	49837	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.414714098 CEST	49834	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.414735079 CEST	443	49834	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.415292025 CEST	49843	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.415319920 CEST	443	49843	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.415750980 CEST	49835	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.415766954 CEST	443	49835	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.416230917 CEST	49842	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.416250944 CEST	443	49842	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.424328089 CEST	49832	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:09.424340963 CEST	443	49832	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:09.431040049 CEST	49844	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:09.431081057 CEST	443	49844	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:09.431349039 CEST	49844	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:09.431531906 CEST	49844	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:09.431545019 CEST	443	49844	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:09.435412884 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.435440063 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.435641050 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.452424049 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.452444077 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.452517033 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.453031063 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.453111887 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.453197956 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.454632998 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.454657078 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.454745054 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.455763102 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.455777884 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.455951929 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.455965042 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.462990999 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.463011980 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.463169098 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.463216066 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.464721918 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.464747906 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.464822054 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.465070009 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:09.465080976 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:09.533029079 CEST	443	49837	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.533375978 CEST	443	49837	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.533437967 CEST	49837	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.546756029 CEST	49837	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:09.546771049 CEST	443	49837	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:09.587179899 CEST	49850	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:09.587222099 CEST	443	49850	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:09.587337971 CEST	49850	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:09.587459087 CEST	49851	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:09.587507963 CEST	443	49851	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:09.587677002 CEST	49850	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:09.587692022 CEST	443	49850	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:09.587707043 CEST	49851	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:09.587912083 CEST	49851	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:09.587920904 CEST	443	49851	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.075898886 CEST	443	49844	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:10.076407909 CEST	49844	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:10.076427937 CEST	443	49844	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:10.076906919 CEST	443	49844	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:10.077260971 CEST	49844	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:10.077344894 CEST	443	49844	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:10.077924967 CEST	49844	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:10.116153955 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.116833925 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.116852999 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.117562056 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.117566109 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.119437933 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.119847059 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.119868994 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.120364904 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.120372057 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.123400927 CEST	443	49844	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:10.130110979 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.130604982 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.130626917 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.131026983 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.131033897 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.147001028 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.147604942 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.147639036 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.148046017 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.148053885 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.149429083 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.149832010 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.149847984 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.150482893 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.150489092 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.174304962 CEST	443	49844	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:10.174748898 CEST	443	49844	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:10.174823999 CEST	49844	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:10.175307989 CEST	49844	443	192.168.2.4	43.152.183.74
Oct 13, 2024 05:29:10.175329924 CEST	443	49844	43.152.183.74	192.168.2.4
Oct 13, 2024 05:29:10.179490089 CEST	49854	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:10.179533958 CEST	443	49854	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:10.179626942 CEST	49854	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:10.179877043 CEST	49854	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:10.179888010 CEST	443	49854	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:10.216515064 CEST	80	49766	43.154.240.170	192.168.2.4
Oct 13, 2024 05:29:10.216656923 CEST	49766	80	192.168.2.4	43.154.240.170
Oct 13, 2024 05:29:10.217773914 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.217927933 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.217992067 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.218199015 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.218211889 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.218228102 CEST	49847	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.218234062 CEST	443	49847	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.219790936 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.219943047 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.220031023 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.220251083 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.220274925 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.220287085 CEST	49849	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.220293045 CEST	443	49849	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.222037077 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.222067118 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.222165108 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.222330093 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.222346067 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.222665071 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.222708941 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.222779989 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.222959995 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.222980022 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.232538939 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.232688904 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.232795954 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.232892036 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.232908010 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.232933998 CEST	49846	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.232950926 CEST	443	49846	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.235572100 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.235598087 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.235662937 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.236006975 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.236016989 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.254245996 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.254298925 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.254369020 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.254561901 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.254595995 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.254611969 CEST	49848	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.254621029 CEST	443	49848	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.255400896 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.255538940 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.255624056 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.255624056 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.255644083 CEST	49845	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.255651951 CEST	443	49845	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.257122993 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.257141113 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.257232904 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.257344007 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.257354021 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.257920980 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.257958889 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.258027077 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.258203030 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.258223057 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.539041996 CEST	443	49850	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.539411068 CEST	49850	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:10.539448023 CEST	443	49850	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.540448904 CEST	443	49850	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.540534019 CEST	49850	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:10.540544033 CEST	443	49850	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.540596008 CEST	49850	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:10.540949106 CEST	49850	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:10.541009903 CEST	443	49850	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.541105986 CEST	49850	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:10.541120052 CEST	443	49850	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.541672945 CEST	443	49851	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.541851997 CEST	49851	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:10.541872978 CEST	443	49851	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.542933941 CEST	443	49851	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.543004036 CEST	49851	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:10.543016911 CEST	443	49851	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.543066025 CEST	49851	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:10.543282032 CEST	49851	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:10.543348074 CEST	443	49851	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.543366909 CEST	49851	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:10.587404013 CEST	443	49851	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.595086098 CEST	49851	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:10.595123053 CEST	443	49851	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:10.595192909 CEST	49850	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:10.642000914 CEST	49851	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:10.876147985 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.877018929 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.877036095 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.877604008 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.877610922 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.912565947 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.913161039 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.913186073 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.913683891 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.913691044 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.916315079 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.916661024 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.916692972 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.917078018 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.917093039 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.925015926 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.925410986 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.925437927 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.925815105 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.925822020 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.940422058 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.940809965 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.940834999 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.941189051 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.941195965 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.978276014 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.978364944 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.978457928 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.993398905 CEST	49855	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.993423939 CEST	443	49855	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.996783972 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.996818066 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:10.996896982 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.997802973 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:10.997822046 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.015670061 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.015722036 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.015810966 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.015966892 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.015989065 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.016001940 CEST	49857	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.016010046 CEST	443	49857	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.019355059 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.019403934 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.019493103 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.019628048 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.019648075 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.021583080 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.021646976 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.021699905 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.021761894 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.021786928 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.021800995 CEST	49859	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.021809101 CEST	443	49859	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.023716927 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.023729086 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.023807049 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.023924112 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.023936033 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.031215906 CEST	443	49854	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:11.033512115 CEST	49854	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:11.033538103 CEST	443	49854	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:11.034048080 CEST	443	49854	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:11.034672022 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.034831047 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.035105944 CEST	49854	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:11.035125017 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.035147905 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.035157919 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.035170078 CEST	49856	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.035176992 CEST	443	49856	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.035202026 CEST	443	49854	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:11.035445929 CEST	49854	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:11.037174940 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.037194014 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.037344933 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.038163900 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.038181067 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.045075893 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.045195103 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.045265913 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.045382977 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.045398951 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.045408964 CEST	49858	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.045413971 CEST	443	49858	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.047225952 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.047262907 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.047344923 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.047472954 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.047486067 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.049886942 CEST	49766	80	192.168.2.4	43.154.240.170
Oct 13, 2024 05:29:11.054913998 CEST	80	49766	43.154.240.170	192.168.2.4
Oct 13, 2024 05:29:11.079458952 CEST	49854	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:11.079484940 CEST	443	49854	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:11.125072956 CEST	443	49850	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:11.125181913 CEST	443	49850	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:11.125329971 CEST	49850	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:11.125930071 CEST	49850	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:11.125947952 CEST	443	49850	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:11.131201982 CEST	443	49851	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:11.131376982 CEST	443	49851	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:11.131459951 CEST	49851	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:11.131767988 CEST	49851	443	192.168.2.4	43.159.26.129
Oct 13, 2024 05:29:11.131781101 CEST	443	49851	43.159.26.129	192.168.2.4
Oct 13, 2024 05:29:11.198208094 CEST	443	49854	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:11.198612928 CEST	443	49854	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:11.200382948 CEST	49854	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:11.200545073 CEST	49854	443	192.168.2.4	101.33.21.91
Oct 13, 2024 05:29:11.200556040 CEST	443	49854	101.33.21.91	192.168.2.4
Oct 13, 2024 05:29:11.660958052 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.665292978 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.665312052 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.665740013 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.665746927 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.682655096 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.691723108 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.697933912 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.705606937 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.705626011 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.706197977 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.706204891 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.709613085 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.709629059 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.710051060 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.710056067 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.710252047 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.710280895 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.710639000 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.710647106 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.768407106 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.768579006 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.768757105 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.772361994 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.806837082 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.807084084 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.807199001 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.808917046 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.809073925 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.809196949 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.811160088 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.811218977 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.812676907 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.813797951 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.896678925 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.896678925 CEST	49860	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.896717072 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.896733046 CEST	443	49860	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.908912897 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.908912897 CEST	49863	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.908926964 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.908937931 CEST	443	49863	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.917222023 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.917222023 CEST	49862	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.917256117 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.917268991 CEST	443	49862	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.925704002 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.925731897 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.926218987 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.926227093 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.942771912 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.942784071 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:11.942823887 CEST	49861	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:11.942831993 CEST	443	49861	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.014794111 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.014868975 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.014954090 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.034801006 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.034826994 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.034920931 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.034924984 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.035079002 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.035149097 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.036134958 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.036166906 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.037772894 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.037811041 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.037878036 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.038005114 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.038017988 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.038886070 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.038913012 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.039314985 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.039326906 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.039336920 CEST	49864	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.039340973 CEST	443	49864	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.043133974 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.043175936 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.043240070 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.043359995 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.043375015 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.044312000 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.044347048 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.044406891 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.045036077 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.045053005 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.685878038 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.687555075 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.687572956 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.688055992 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.688061953 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.690090895 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.690893888 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.690917015 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.691689014 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.691701889 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.698627949 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.709549904 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.709567070 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.710105896 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.710112095 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.724508047 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.725068092 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.725085974 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.725548983 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.725555897 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.736912012 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.737509966 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.737550020 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.738013983 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.738030910 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.787085056 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.787226915 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.787298918 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.787436008 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.787463903 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.787486076 CEST	49867	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.787493944 CEST	443	49867	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.790612936 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.790646076 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.790730953 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.790901899 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.790918112 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.792583942 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.792749882 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.792815924 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.792848110 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.792861938 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.792872906 CEST	49866	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.792880058 CEST	443	49866	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.794992924 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.795041084 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.795109987 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.795242071 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.795264006 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.807987928 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.808068037 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.808128119 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.808221102 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.808238029 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.808249950 CEST	49869	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.808257103 CEST	443	49869	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.810272932 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.810283899 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.810354948 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.810482025 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.810492992 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.831701994 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.831784010 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.831942081 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.831942081 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.831942081 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.833874941 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.833899975 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.833982944 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.834110022 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.834126949 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.843854904 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.843907118 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.843956947 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.844039917 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.844059944 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.844072104 CEST	49868	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.844079018 CEST	443	49868	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.846096992 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.846108913 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:12.846183062 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.846308947 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:12.846326113 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.142081022 CEST	49865	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.142113924 CEST	443	49865	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.459247112 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.459985971 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.460005999 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.460521936 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.460530043 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.465210915 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.465550900 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.465590000 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.465866089 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.465873957 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.480956078 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.481462955 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.481482029 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.481806040 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.481810093 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.495286942 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.495666981 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.495685101 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.496102095 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.496109962 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.503592014 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.504014969 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.504031897 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.504407883 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.504416943 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.561171055 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.561326981 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.561413050 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.561556101 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.561579943 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.561595917 CEST	49870	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.561604977 CEST	443	49870	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.564939022 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.564980030 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.565083027 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.565212011 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.565223932 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.567231894 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.567435026 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.567504883 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.567550898 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.567550898 CEST	49871	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.567578077 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.567591906 CEST	443	49871	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.569534063 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.569566965 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.569626093 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.569762945 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.569773912 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.587507963 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.587678909 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.587749958 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.587838888 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.587848902 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.587861061 CEST	49872	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.587867022 CEST	443	49872	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.590226889 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.590272903 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.590358973 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.590471029 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.590487003 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.600506067 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.600577116 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.600663900 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.600769043 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.600769043 CEST	49873	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.600795031 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.600807905 CEST	443	49873	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.603108883 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.603121996 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.603203058 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.603316069 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.603327990 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.605158091 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.605326891 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.605402946 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.605402946 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.605442047 CEST	49874	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.605457067 CEST	443	49874	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.607393026 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.607430935 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:13.607501030 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.607626915 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:13.607637882 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.220334053 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.220887899 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.220915079 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.221385002 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.221389055 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.224669933 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.224982977 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.225012064 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.225310087 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.225316048 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.253366947 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.253710985 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.253750086 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.254102945 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.254111052 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.257388115 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.257668018 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.257685900 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.258055925 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.258061886 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.260982037 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.261231899 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.261245966 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.261545897 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.261549950 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.320220947 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.320382118 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.320450068 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.320581913 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.320597887 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.320611954 CEST	49875	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.320619106 CEST	443	49875	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.323668003 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.323733091 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.323810101 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.323961020 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.323980093 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.326231003 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.326442957 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.326504946 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.326539040 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.326539040 CEST	49876	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.326555967 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.326565981 CEST	443	49876	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.328650951 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.328691006 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.328762054 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.328887939 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.328907013 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.358083963 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.358160973 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.358222961 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.358963013 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.359035969 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.359095097 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.363219023 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.363284111 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.363338947 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.369467974 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.369488001 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.369501114 CEST	49877	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.369508982 CEST	443	49877	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.434161901 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.434194088 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.434209108 CEST	49878	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.434217930 CEST	443	49878	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.435941935 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.435973883 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.435986996 CEST	49879	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.435993910 CEST	443	49879	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.444473028 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.444536924 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.444605112 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.445772886 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.445811987 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.445864916 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.447117090 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.447149038 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.447202921 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.447617054 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.447640896 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.447736025 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.447756052 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.447927952 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.447947025 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.989274025 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.989929914 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.989964962 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.990462065 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.990474939 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.993216991 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.993576050 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.993613958 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:14.993926048 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:14.993937016 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.091276884 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.091303110 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.091490030 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.091516972 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.091538906 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.091589928 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.091891050 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.091912031 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.091926098 CEST	49880	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.091936111 CEST	443	49880	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.093816042 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.093908072 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.093991041 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.094633102 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.094665051 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.094682932 CEST	49881	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.094691992 CEST	443	49881	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.098427057 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.098490953 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.098588943 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.098910093 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.098926067 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.099706888 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.099721909 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.099793911 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.099894047 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.099909067 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.173953056 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.174753904 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.174787045 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.175270081 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.175276995 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.175565004 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.175760984 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.176001072 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.176039934 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.176130056 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.176162958 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.176515102 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.176525116 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.176714897 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.176723003 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.437916040 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.437936068 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.437985897 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.437994957 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.438036919 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.438102007 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.438122988 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.438143015 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.438169003 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.438173056 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.438229084 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.438277960 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.438338041 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.438386917 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.438406944 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.438417912 CEST	49883	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.438422918 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.438422918 CEST	49882	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.438424110 CEST	443	49883	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.438442945 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.438457012 CEST	443	49882	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.444132090 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.444159031 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.444161892 CEST	49884	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.444169044 CEST	443	49884	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.449913979 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.449945927 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.450036049 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.451091051 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.451107979 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.452915907 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.452928066 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.453000069 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.453191996 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.453206062 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.456068993 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.456137896 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.456201077 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.456742048 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.456756115 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.780092955 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.780745029 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.780776024 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.781327009 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.781332016 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.797576904 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.804977894 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.804989100 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.805628061 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.805634022 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.881624937 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.881683111 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.881817102 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.881822109 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.881886959 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.882152081 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.882170916 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.882186890 CEST	49885	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.882193089 CEST	443	49885	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.885833979 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.885867119 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.885951042 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.886178017 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.886188984 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.906958103 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.907053947 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.907130957 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.907193899 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.907208920 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.907224894 CEST	49886	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.907229900 CEST	443	49886	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.910166025 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.910222054 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:15.910309076 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.910450935 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:15.910466909 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.298408985 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.299036026 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.299710035 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.299710035 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.299746990 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.299767971 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.300200939 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.300205946 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.300237894 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.300241947 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.301703930 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.302016973 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.302047014 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.302349091 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.302354097 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.400945902 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.401175976 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.401184082 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.401292086 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.401591063 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.401591063 CEST	49887	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.401639938 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.401669025 CEST	443	49887	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.401834011 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.402163029 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.402353048 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.402353048 CEST	49888	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.402369976 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.402390003 CEST	443	49888	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.405334949 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.405375957 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.405478954 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.405523062 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.405524015 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.405710936 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.405725002 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.405730009 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.405904055 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.405919075 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.410047054 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.410201073 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.410269022 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.410309076 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.410309076 CEST	49889	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.410331964 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.410343885 CEST	443	49889	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.412816048 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.412842989 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.412905931 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.413072109 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.413084030 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.554465055 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.556818962 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.556847095 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.557461023 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.557466984 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.594764948 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.596851110 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.596889019 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.597489119 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.597496033 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.657303095 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.657509089 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.657629013 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.657679081 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.657699108 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.657711983 CEST	49890	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.657717943 CEST	443	49890	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.660777092 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.660831928 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.660922050 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.661115885 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.661139011 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.726334095 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.726499081 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.726766109 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.726766109 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.726809025 CEST	49891	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.726828098 CEST	443	49891	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.730334997 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.730395079 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:16.730482101 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.730633020 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:16.730648994 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.104188919 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.104831934 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.104854107 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.105372906 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.105380058 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.108515978 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.108907938 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.108928919 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.109340906 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.109354019 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.113761902 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.114099979 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.114120007 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.114521027 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.114526987 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.205287933 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.205511093 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.205570936 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.205643892 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.205666065 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.205678940 CEST	49893	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.205686092 CEST	443	49893	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.208870888 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.208936930 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.209000111 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.209160089 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.209182024 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.213906050 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.213984013 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.214035034 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.214220047 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.214247942 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.214262009 CEST	49892	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.214270115 CEST	443	49892	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.217375994 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.217416048 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.217485905 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.217638969 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.217655897 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.217926979 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.218081951 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.218135118 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.218158960 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.218178034 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.218206882 CEST	49894	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.218213081 CEST	443	49894	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.220813036 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.220851898 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.220927954 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.221036911 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.221050024 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.414020061 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.414625883 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.414649010 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.415230036 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.415235996 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.519073009 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.519917011 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.519982100 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.520009995 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.520036936 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.520087957 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.520935059 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.520961046 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.520977020 CEST	49896	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.520982981 CEST	443	49896	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.524063110 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.524111986 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.524216890 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.524418116 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.524431944 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.870095015 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.870661974 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.870707035 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.871159077 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.871171951 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.871256113 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.871586084 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.871597052 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.871958971 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.871968031 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.904716969 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.905349970 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.905373096 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.905904055 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.905915976 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.971151114 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.971333981 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.971425056 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.971653938 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.971681118 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.971697092 CEST	49897	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.971704960 CEST	443	49897	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.973814964 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.974354029 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.974416018 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.974426985 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.974469900 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.974534035 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.974548101 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.974575043 CEST	49898	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.974581957 CEST	443	49898	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.975598097 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.975634098 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.975722075 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.975912094 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.975925922 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.976928949 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.976939917 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:17.977019072 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.977179050 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:17.977189064 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.009278059 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.009947062 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.010025978 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.010068893 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.010088921 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.010102987 CEST	49899	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.010107994 CEST	443	49899	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.013261080 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.013303041 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.013431072 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.013659954 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.013674021 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.184580088 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.187043905 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.187084913 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.187470913 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.187479019 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.286142111 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.286293030 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.286402941 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.286602974 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.286602974 CEST	49900	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.286628962 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.286643982 CEST	443	49900	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.289987087 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.290034056 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.290117979 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.290296078 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.290312052 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.607897043 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.608752966 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.608769894 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.609230995 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.609237909 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.639079094 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.640177965 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.640193939 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.640667915 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.640675068 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.661503077 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.662111044 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.662131071 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.662487984 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.662493944 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.664092064 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.664364100 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.664378881 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.664679050 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.664685965 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.716463089 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.716624022 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.716907024 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.716948986 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.716970921 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.716981888 CEST	49895	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.716986895 CEST	443	49895	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.720232010 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.720276117 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.720421076 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.720741987 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.720757008 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.740303993 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.740338087 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.740387917 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.740499020 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.740499020 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.740792990 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.740792990 CEST	49902	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.740813971 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.740824938 CEST	443	49902	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.744384050 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.744409084 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.744518995 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.744705915 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.744721889 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.765515089 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.765683889 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.765839100 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.765839100 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.765875101 CEST	49903	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.765894890 CEST	443	49903	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.766652107 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.766835928 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.766921043 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.767132044 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.767132044 CEST	49901	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.767143011 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.767152071 CEST	443	49901	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.768814087 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.768856049 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.769090891 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.769117117 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.769124985 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.769169092 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.769308090 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.769319057 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.769323111 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.769336939 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.968432903 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.969163895 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.969188929 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:18.969666004 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:18.969679117 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.071419954 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.071872950 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.071959972 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.072002888 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.072002888 CEST	49904	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.072025061 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.072035074 CEST	443	49904	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.075557947 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.075622082 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.075706005 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.075845003 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.075861931 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.376343012 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.377320051 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.377341032 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.377912045 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.377917051 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.410717010 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.411536932 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.411546946 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.412000895 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.412009001 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.433569908 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.435884953 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.435895920 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.437011957 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.437016964 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.459079981 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.459520102 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.459551096 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.459973097 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.459979057 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.477365971 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.477524996 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.477611065 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.477771997 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.477791071 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.477802038 CEST	49905	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.477807999 CEST	443	49905	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.481614113 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.481666088 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.481751919 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.481898069 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.481913090 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.518322945 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.518362999 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.518419027 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.518527985 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.518799067 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.518799067 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.522301912 CEST	49906	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.522311926 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.522324085 CEST	443	49906	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.522361994 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.522461891 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.522608042 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.522620916 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.535733938 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.536010981 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.536077023 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.536865950 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.536881924 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.536895990 CEST	49907	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.536900997 CEST	443	49907	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.540385008 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.540426016 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.540512085 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.540715933 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.540731907 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.565999031 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.566035986 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.566097021 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.566128016 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.566173077 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.571690083 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.571707964 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.571722984 CEST	49908	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.571727991 CEST	443	49908	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.575432062 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.575486898 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.575588942 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.575788975 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.575802088 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.744399071 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.745795965 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.745829105 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.746387959 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.746395111 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.846678972 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.846997023 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.847157955 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.847157955 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.847157955 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.850867033 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.850904942 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:19.850984097 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.851147890 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:19.851159096 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:20.063932896 CEST	49909	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:20.063982010 CEST	443	49909	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:20.932116985 CEST	49915	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:29:20.932163954 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:20.932245016 CEST	49915	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:29:20.932667971 CEST	49915	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:29:20.932682037 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:21.137010098 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.138144016 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.138169050 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.138567924 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.138675928 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.138683081 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.138935089 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.138961077 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.139658928 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.139663935 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.140559912 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.140923023 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.140935898 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.141437054 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.141441107 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.141585112 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.141823053 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.141853094 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.142281055 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.142286062 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.145167112 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.145486116 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.145510912 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.145972967 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.145977974 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.239589930 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.239619970 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.239664078 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.239759922 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.239801884 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.240130901 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.240130901 CEST	49912	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.240149975 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.240158081 CEST	443	49912	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.241925955 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.242003918 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.242134094 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.242218971 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.242218971 CEST	49914	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.242244005 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.242258072 CEST	443	49914	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.243802071 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.243839979 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.243927956 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.244108915 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.244115114 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.244122982 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.244467974 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.244519949 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.244581938 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.244705915 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.244716883 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.245542049 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.245570898 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.245618105 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.245637894 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.245683908 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.245683908 CEST	49913	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.245698929 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.245697975 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.245711088 CEST	443	49913	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.245937109 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.245968103 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.246014118 CEST	49910	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.246031046 CEST	443	49910	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.248500109 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.248533964 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.248610973 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.248744965 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.248754978 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.248792887 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.248807907 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.248819113 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.249006033 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.249021053 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.250221968 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.250278950 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.250327110 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.250433922 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.250433922 CEST	49911	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.250444889 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.250453949 CEST	443	49911	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.252931118 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.252947092 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.253209114 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.253209114 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.253230095 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.630590916 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:21.630683899 CEST	49915	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:29:21.633295059 CEST	49915	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:29:21.633311987 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:21.633550882 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:21.639389992 CEST	49915	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:29:21.683407068 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:21.895659924 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:21.895688057 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:21.895740986 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:21.895833969 CEST	49915	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:29:21.895914078 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:21.895948887 CEST	49915	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:29:21.895977974 CEST	49915	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:29:21.896028042 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.896543026 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.896576881 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.896689892 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:21.896764994 CEST	49915	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:29:21.896775961 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:21.896845102 CEST	49915	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:29:21.897046089 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.897054911 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.899482012 CEST	49915	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:29:21.899522066 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:21.899549007 CEST	49915	443	192.168.2.4	20.109.210.53
Oct 13, 2024 05:29:21.899565935 CEST	443	49915	20.109.210.53	192.168.2.4
Oct 13, 2024 05:29:21.906903028 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.907706976 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.907744884 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.908216000 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.908221960 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.917519093 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.918076038 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.918087959 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.918437958 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.918442965 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.922574043 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.922916889 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.922940969 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.923335075 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.923341990 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.936891079 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.937314987 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.937346935 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.937850952 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.937858105 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.997433901 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.997495890 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.997544050 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.997545004 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.997608900 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.997893095 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.997899055 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:21.997910976 CEST	49917	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:21.997916937 CEST	443	49917	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.002866983 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.002907991 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.003225088 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.003225088 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.003257990 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.009671926 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.009871960 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.009939909 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.009989977 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.009989977 CEST	49916	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.010011911 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.010021925 CEST	443	49916	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.013581991 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.013619900 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.013725042 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.013962030 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.013981104 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.024741888 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.025305986 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.025404930 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.025475025 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.025475025 CEST	49920	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.025494099 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.025505066 CEST	443	49920	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.027091026 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.027262926 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.027317047 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.027352095 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.027373075 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.027393103 CEST	49918	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.027400017 CEST	443	49918	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.028747082 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.028774023 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.029079914 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.029079914 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.029103994 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.029947996 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.029973984 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.030030012 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.030185938 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.030194998 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.043163061 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.043241978 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.043288946 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.043442011 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.043467999 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.043483019 CEST	49919	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.043490887 CEST	443	49919	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.046097994 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.046145916 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.046196938 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.046354055 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.046375990 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.657931089 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.660788059 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.660815954 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.661616087 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.661628008 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.714736938 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.719074011 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.719115019 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.719553947 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.719559908 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.725744009 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.727006912 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.727036953 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.727685928 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.727695942 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.759018898 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.759047031 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.759103060 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.759162903 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.759162903 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.759443998 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.759443998 CEST	49921	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.759462118 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.759476900 CEST	443	49921	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.762993097 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.763056040 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.763120890 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.763314962 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.763334036 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.766587019 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.766983986 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.767005920 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.767899036 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.767908096 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.822247028 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.822313070 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.822396994 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.822627068 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.822639942 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.822668076 CEST	49922	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.822674990 CEST	443	49922	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.826638937 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.826688051 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.826798916 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.826970100 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.826983929 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.831862926 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.831954002 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.832032919 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.832218885 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.832220078 CEST	49923	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.832242012 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.832252979 CEST	443	49923	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.835222006 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.835262060 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.835328102 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.835493088 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.835508108 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.873675108 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.873706102 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.873753071 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.873780966 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.873809099 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.873990059 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.874011040 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.874022961 CEST	49925	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.874030113 CEST	443	49925	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.877649069 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.877690077 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:22.877948046 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.878371000 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:22.878382921 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.344358921 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.350369930 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.350398064 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.350979090 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.350986958 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.410687923 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.413217068 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.413233995 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.413635015 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.413640022 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.448502064 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.448576927 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.448646069 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.448925972 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.448950052 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.448962927 CEST	49924	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.448971033 CEST	443	49924	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.453016996 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.453052044 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.453205109 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.453404903 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.453416109 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.475207090 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.475735903 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.475761890 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.476264954 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.476274967 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.509696007 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.510554075 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.510566950 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.511332035 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.511342049 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.512773037 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.512862921 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.512965918 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.513256073 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.513277054 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.513292074 CEST	49926	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.513299942 CEST	443	49926	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.518035889 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.518059969 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.518234968 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.518507004 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.518520117 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.526287079 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.526716948 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.526741982 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.527266979 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.527271986 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.578216076 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.578253984 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.578300953 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.578326941 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.578382969 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.578623056 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.578650951 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.578663111 CEST	49927	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.578669071 CEST	443	49927	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.581671953 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.581721067 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.581798077 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.581952095 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.581967115 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.622987032 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.623074055 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.623171091 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.623409986 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.623423100 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.623433113 CEST	49928	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.623437881 CEST	443	49928	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.626414061 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.626456022 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.626552105 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.626833916 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.626847982 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.629534006 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.629844904 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.629895926 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.630007029 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.630079031 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.630093098 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.630104065 CEST	49929	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.630110025 CEST	443	49929	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.632370949 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.632381916 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:23.632445097 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.632575989 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:23.632585049 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.109231949 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.109848976 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.109863997 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.110660076 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.110666990 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.166279078 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.167004108 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.167017937 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.167510033 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.167515039 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.213818073 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.213901997 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.213999987 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.214277983 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.214301109 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.214308023 CEST	49930	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.214313984 CEST	443	49930	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.217852116 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.217899084 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.218002081 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.218184948 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.218202114 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.263158083 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.263843060 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.263871908 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.264348030 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.264353991 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.267667055 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.267896891 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.267949104 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.268009901 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.268009901 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.268085957 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.268085957 CEST	49931	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.268098116 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.268105984 CEST	443	49931	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.271254063 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.271291018 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.271390915 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.271569014 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.271585941 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.274101973 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.274454117 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.274476051 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.274879932 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.274887085 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.297960043 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.298470020 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.298477888 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.298881054 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.298886061 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.368479967 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.368537903 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.368731022 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.374946117 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.374999046 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.375017881 CEST	49932	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.375035048 CEST	443	49932	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.375448942 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.375531912 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.375576973 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.375581026 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.375627041 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.375754118 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.375771046 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.375792980 CEST	49933	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.375798941 CEST	443	49933	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.378739119 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.378774881 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.378784895 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.378793001 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.378843069 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.378869057 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.379026890 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.379026890 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.379039049 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.379050970 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.421387911 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.422075033 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.422142029 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.422321081 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.422321081 CEST	49934	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.422342062 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.422353983 CEST	443	49934	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.424984932 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.425043106 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.425129890 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.425302982 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.425322056 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.874592066 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.875174046 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.875212908 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.875766039 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.875772953 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.931461096 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.932033062 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.932056904 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.932698011 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.932704926 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.976891994 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.976950884 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.977003098 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.977320910 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.977348089 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.977363110 CEST	49935	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.977369070 CEST	443	49935	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.980824947 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.980869055 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:24.981096029 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.981096029 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:24.981132030 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.009815931 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.010329962 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.010349989 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.010833025 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.010838032 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.026659012 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.027156115 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.027170897 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.027594090 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.027599096 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.032140017 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.032396078 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.032402992 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.032721996 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.032726049 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.035327911 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.035453081 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.035516977 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.035738945 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.035738945 CEST	49936	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.035758972 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.035770893 CEST	443	49936	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.038908005 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.038944960 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.039235115 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.039235115 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.039267063 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.115266085 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.115304947 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.115349054 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.115408897 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.115447044 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.115741014 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.115762949 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.115777016 CEST	49939	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.115784883 CEST	443	49939	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.119407892 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.119448900 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.119601965 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.121422052 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.121433973 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.127840996 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.127917051 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.128047943 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.128081083 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.128097057 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.128113031 CEST	49938	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.128120899 CEST	443	49938	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.130361080 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.130398035 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.130456924 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.131403923 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.131418943 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.140260935 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.140352964 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.140396118 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.140441895 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.140505075 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.140516043 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.140523911 CEST	49937	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.140530109 CEST	443	49937	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.142705917 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.142734051 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.142798901 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.142908096 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.142916918 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.634555101 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.635248899 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.635265112 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.635785103 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.635793924 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.687925100 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.688780069 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.688806057 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.690080881 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.690087080 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.736913919 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.737102032 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.737222910 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.737399101 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.737399101 CEST	49940	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.737421989 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.737432957 CEST	443	49940	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.740319014 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.740375996 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.740467072 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.741318941 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.741338015 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.797256947 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.797765970 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.797782898 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.798223972 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.798228979 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.799784899 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.799853086 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.800153017 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.800179005 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.800194979 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.800230026 CEST	49941	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.800246000 CEST	443	49941	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.802789927 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.802810907 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.802875996 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.803000927 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.803014040 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.803133965 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.803462982 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.803478003 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.803886890 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.803891897 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.812732935 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.813152075 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.813163042 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.813498974 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.813503981 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.898159027 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.898302078 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.898473024 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.898529053 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.898541927 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.898577929 CEST	49944	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.898585081 CEST	443	49944	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.901148081 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.901168108 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.901249886 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.901422024 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.901429892 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.909771919 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.909837961 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.910398960 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.910433054 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.910448074 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.910458088 CEST	49942	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.910464048 CEST	443	49942	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.912790060 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.912812948 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.912983894 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.913096905 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.913106918 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.917913914 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.918246984 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.918297052 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.918301105 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.918461084 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.918461084 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.918461084 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.920373917 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.920411110 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:25.920497894 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.920604944 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:25.920619011 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.220650911 CEST	49943	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.220681906 CEST	443	49943	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.423531055 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.424180984 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.424223900 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.424690008 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.424695969 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.450218916 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.450987101 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.451011896 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.451508999 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.451513052 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.549532890 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.550036907 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.550057888 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.550621033 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.550626993 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.551356077 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.551843882 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.551909924 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.551953077 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.551970959 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.551983118 CEST	49946	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.551989079 CEST	443	49946	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.553755999 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.553940058 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.553991079 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.553992987 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.554039001 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.554092884 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.554097891 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.554121017 CEST	49945	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.554125071 CEST	443	49945	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.555658102 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.555708885 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.555764914 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.556111097 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.556127071 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.556318045 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.556354046 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.556457996 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.556557894 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.556569099 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.568418026 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.569192886 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.569211960 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.569710970 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.569716930 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.573137999 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.573426008 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.573438883 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.573736906 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.573740959 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.650834084 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.651156902 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.651216030 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.651262999 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.651285887 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.651294947 CEST	49947	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.651299953 CEST	443	49947	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.654019117 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.654051065 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.654153109 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.654318094 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.654333115 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.670264959 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.670355082 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.670411110 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.670610905 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.670629025 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.670634985 CEST	49949	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.670640945 CEST	443	49949	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.673713923 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.673743010 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.674530029 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.674657106 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.674674034 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.675884008 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.675977945 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.676026106 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.676075935 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.676083088 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.676094055 CEST	49948	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.676099062 CEST	443	49948	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.678508043 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.678525925 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:26.678601027 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.678736925 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:26.678750038 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.205734968 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.206377983 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.206398010 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.206856966 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.206861019 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.231509924 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.232011080 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.232052088 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.232347965 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.232355118 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.306796074 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.307229996 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.307254076 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.307363033 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.307444096 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.307497025 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.307641029 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.307657003 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.307673931 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.307677984 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.307699919 CEST	49951	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.307704926 CEST	443	49951	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.310291052 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.310316086 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.310384035 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.310507059 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.310516119 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.336458921 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.336518049 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.336587906 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.336774111 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.336796045 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.336807013 CEST	49950	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.336813927 CEST	443	49950	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.339436054 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.339490891 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.339735031 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.339735031 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.339771032 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.347809076 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.348323107 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.348351002 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.348375082 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.348632097 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.348654985 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.349004030 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.349009037 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.349100113 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.349104881 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.407784939 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.407871008 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.407974958 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.408308983 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.408317089 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.408327103 CEST	49952	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.408332109 CEST	443	49952	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.411473989 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.411533117 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.411623001 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.411791086 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.411808968 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.448235989 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.448415995 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.448498011 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.448679924 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.448690891 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.448892117 CEST	49954	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.448896885 CEST	443	49954	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.451162100 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.451261044 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.451313972 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.451318026 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.451359987 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.451510906 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.451529980 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.451610088 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.451706886 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.451711893 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.451725006 CEST	49953	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.451729059 CEST	443	49953	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.452775002 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.452788115 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.453881979 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.453926086 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.453990936 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.455594063 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.455605030 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.986445904 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.987014055 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.987032890 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.987375975 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.987381935 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.992918015 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.993202925 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.993226051 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:27.993623972 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:27.993628979 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.048963070 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:29:28.053854942 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:29:28.064914942 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.065660000 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.065690994 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.066028118 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.066039085 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.091356993 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.091586113 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.091842890 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.091842890 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.091842890 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.094976902 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.095021009 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.095125914 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.095309019 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.095331907 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.095670938 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.095736980 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.095880985 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.095925093 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.095925093 CEST	49956	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.095944881 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.095954895 CEST	443	49956	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.098197937 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.098243952 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.098331928 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.098629951 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.098640919 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.107062101 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.107532024 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.107568979 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.107994080 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.108000040 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.111007929 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.114527941 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.114545107 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.114913940 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.114917994 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.168068886 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.168087006 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.168140888 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.168170929 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.168210983 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.168512106 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.168535948 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.168546915 CEST	49957	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.168554068 CEST	443	49957	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.171823025 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.171858072 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.171988964 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.172231913 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.172249079 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.208498001 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.208583117 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.208635092 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.208683968 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.208733082 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.208978891 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.208986998 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.209002018 CEST	49958	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.209006071 CEST	443	49958	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.211843967 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.211878061 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.211886883 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.211982012 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.211994886 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.212137938 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.212146997 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.212157011 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.212167025 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.212363005 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.212369919 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.212378979 CEST	49959	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.212790966 CEST	443	49959	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.214371920 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.214407921 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.218466997 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.218626976 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.218646049 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.392399073 CEST	49955	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.392432928 CEST	443	49955	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.762401104 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.765007019 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.765028000 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.765461922 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.765467882 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.787081003 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.789076090 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.789092064 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.789563894 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.789575100 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.826504946 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.829552889 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.829569101 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.830025911 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.830037117 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.864193916 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.864499092 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.868613958 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.868613958 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.868613958 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.871277094 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.871331930 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.871436119 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.871571064 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.871584892 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.900461912 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.905153036 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.905175924 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.905787945 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.905801058 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.907107115 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.909976006 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.910037994 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.910192013 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.910192966 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.910285950 CEST	49961	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.910307884 CEST	443	49961	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.912889004 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.912906885 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.912992954 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.913122892 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.913130999 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.913248062 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.917629004 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.917659044 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.918070078 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.918081045 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.928457022 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.928642988 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.928742886 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.929014921 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.929014921 CEST	49962	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.929037094 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.929053068 CEST	443	49962	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.931427002 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.931476116 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.931560040 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.931689978 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:28.931706905 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:28.986076117 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:29:28.991051912 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:29:29.007227898 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.007260084 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.007333040 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.007534981 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.007534981 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.007694006 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.007694006 CEST	49963	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.007718086 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.007726908 CEST	443	49963	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.010413885 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.010514975 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.010612011 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.010862112 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.010898113 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.019566059 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.019634008 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.019741058 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.019743919 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.019795895 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.019963980 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.019980907 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.019994020 CEST	49964	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.019999981 CEST	443	49964	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.022272110 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.022311926 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.022393942 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.022516966 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.022531033 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.173640013 CEST	49960	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.173669100 CEST	443	49960	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.542357922 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.549941063 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.549958944 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.550570965 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.550575018 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.615324020 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.616005898 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.616024971 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.616430998 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.616436005 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.643986940 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.644408941 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.644417048 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.644851923 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.644855976 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.646599054 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.646904945 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.646931887 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.647237062 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.647244930 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.648466110 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.648530960 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.648634911 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.648694038 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.648746014 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.649020910 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.649022102 CEST	49965	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.649039030 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.649055004 CEST	443	49965	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.652437925 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.652471066 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.652534962 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.652659893 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.652672052 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.716669083 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.716753006 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.716834068 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.717020035 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.717041969 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.717051983 CEST	49967	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.717056990 CEST	443	49967	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.721008062 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.721054077 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.721124887 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.721326113 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.721339941 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.749667883 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.749804974 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.749859095 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.749885082 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.749913931 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.750139952 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.750155926 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.750169039 CEST	49969	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.750174046 CEST	443	49969	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.750792027 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.750960112 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.751008034 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.751033068 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.751043081 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.751055002 CEST	49966	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.751060963 CEST	443	49966	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.753624916 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.753647089 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.753663063 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.753679991 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.753729105 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.753791094 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.753923893 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.753923893 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:29.753940105 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:29.753940105 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.347296953 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.347878933 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.347908974 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.348396063 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.348402023 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.374133110 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.374562025 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.374593973 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.375009060 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.375015020 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.408430099 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.409085035 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.409117937 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.409554005 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.409559965 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.447170973 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.447834015 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.447863102 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.448314905 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.448321104 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.453413010 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.453557968 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.453710079 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.453748941 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.453748941 CEST	49970	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.453768015 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.453775883 CEST	443	49970	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.457118988 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.457154989 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.457235098 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.457391977 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.457397938 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.478838921 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.478904009 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.478945017 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.479010105 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.479126930 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.479146004 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.479154110 CEST	49971	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.479160070 CEST	443	49971	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.482088089 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.482125044 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.482189894 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.482302904 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.482316971 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.514127970 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.516926050 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.516983986 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.516993046 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.517050028 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.517074108 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.517090082 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.517107010 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.517112970 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.517157078 CEST	49973	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.517160892 CEST	443	49973	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.521682024 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.521718979 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.521778107 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.521913052 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.521924973 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.556402922 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.556618929 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.556694031 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.565102100 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.565115929 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.565140963 CEST	49972	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.565146923 CEST	443	49972	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.568659067 CEST	49977	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.568707943 CEST	443	49977	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:30.568770885 CEST	49977	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.568917036 CEST	49977	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:30.568932056 CEST	443	49977	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.139503956 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.140281916 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.140297890 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.140759945 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.140764952 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.165054083 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.166834116 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.166848898 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.167305946 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.167311907 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.183438063 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.186855078 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.186873913 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.187318087 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.187323093 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.221035004 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.222771883 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.222795963 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.223239899 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.223247051 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.240694046 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.241241932 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.241336107 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.241661072 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.241661072 CEST	49975	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.241682053 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.241692066 CEST	443	49975	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.245112896 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.245184898 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.245268106 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.245413065 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.245431900 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.262975931 CEST	443	49977	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.271234035 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.271373987 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.271470070 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.279495955 CEST	49977	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.279516935 CEST	443	49977	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.280448914 CEST	49977	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.280452967 CEST	443	49977	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.280709028 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.280730009 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.280740023 CEST	49974	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.280745983 CEST	443	49974	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.284183025 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.284225941 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.284290075 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.284423113 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.284434080 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.288223028 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.288335085 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.288429976 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.288542986 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.288562059 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.288572073 CEST	49968	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.288578987 CEST	443	49968	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.291037083 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.291064978 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.291137934 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.291255951 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.291275978 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.326008081 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.326176882 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.326351881 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.326411009 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.326425076 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.326433897 CEST	49976	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.326438904 CEST	443	49976	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.328664064 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.328704119 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.328790903 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.328941107 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.328958035 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.330861092 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:29:31.330874920 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:29:31.335629940 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:29:31.335652113 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:29:31.383083105 CEST	443	49977	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.383203030 CEST	443	49977	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.383337975 CEST	49977	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.383688927 CEST	49977	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.383688927 CEST	49977	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.383708000 CEST	443	49977	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.383716106 CEST	443	49977	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.386828899 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.386857033 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.386964083 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.387182951 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.387197018 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.534152031 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:29:31.539223909 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:29:31.549420118 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:29:31.554373026 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:29:31.894974947 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.898921013 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.898952961 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.899414062 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.899421930 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.948935986 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.959487915 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.959510088 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.979348898 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.979358912 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.984246969 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.986885071 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.986905098 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.987272978 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.987277985 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.995677948 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.996221066 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.996243000 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.996618032 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.996630907 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.996819019 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.996931076 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.997998953 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.998045921 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.998063087 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:31.998074055 CEST	49978	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:31.998080015 CEST	443	49978	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.001338005 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.001368046 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.001440048 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.001676083 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.001686096 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.055893898 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.056386948 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.056406021 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.056843042 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.056848049 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.076188087 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.076251030 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.076318026 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.076334000 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.076373100 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.076428890 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.076572895 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.076586962 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.076597929 CEST	49979	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.076603889 CEST	443	49979	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.079363108 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.079391956 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.079471111 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.079619884 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.079627037 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.086795092 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.086828947 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.086874008 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.086894989 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.086999893 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.087104082 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.087120056 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.087188005 CEST	49981	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.087194920 CEST	443	49981	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.089674950 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.089714050 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.089775085 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.089901924 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.089919090 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.100660086 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.101008892 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.101066113 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.101180077 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.101180077 CEST	49980	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.101201057 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.101210117 CEST	443	49980	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.103470087 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.103496075 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.103565931 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.103719950 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.103734016 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.158015966 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.158166885 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.158242941 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.158409119 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.158409119 CEST	49982	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.158420086 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.158427954 CEST	443	49982	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.161567926 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.161607981 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.161669970 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.162009001 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.162015915 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.384536982 CEST	49760	80	192.168.2.4	90.84.161.27
Oct 13, 2024 05:29:32.389600039 CEST	80	49760	90.84.161.27	192.168.2.4
Oct 13, 2024 05:29:32.618896008 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:29:32.623768091 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:29:32.655673981 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.656261921 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.656277895 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.656923056 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.656929016 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.745399952 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.746249914 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.746264935 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.747097015 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.747102976 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.750890017 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.751945019 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.751966953 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.752440929 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.752448082 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.757646084 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.757761955 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.757788897 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.757841110 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.757854939 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.757905960 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.758101940 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.758116007 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.758451939 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.758477926 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.758490086 CEST	49983	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.758497000 CEST	443	49983	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.758609056 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.758615017 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.759524107 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:29:32.763453960 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.763490915 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.763573885 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.763861895 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.763886929 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.764372110 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:29:32.824788094 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.825531960 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.825567961 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.826025963 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.826035976 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.845402002 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.845561981 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.845655918 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.845783949 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.845813036 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.845825911 CEST	49984	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.845834017 CEST	443	49984	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.849046946 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.849081993 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.849168062 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.849380016 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.849392891 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.850961924 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.851038933 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.851095915 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.851115942 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.851154089 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.851205111 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.851226091 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.851226091 CEST	49985	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.851242065 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.851248980 CEST	443	49985	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.853701115 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.853710890 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.853789091 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.853929043 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.853940964 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.860582113 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.860661983 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.860712051 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.860836029 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.860843897 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.860852003 CEST	49986	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.860857010 CEST	443	49986	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.862951994 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.862997055 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.863071918 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.863238096 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.863244057 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.916023970 CEST	49752	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:29:32.918431997 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:29:32.920979023 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:29:32.923343897 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:29:32.943586111 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.943659067 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.943763971 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.943784952 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.943809986 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.943865061 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.944130898 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.944150925 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.944164991 CEST	49987	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.944171906 CEST	443	49987	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.947666883 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.947716951 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:32.947793007 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.948123932 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:32.948142052 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.454412937 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.460442066 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.460458994 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.460933924 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.460938931 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.481365919 CEST	49761	80	192.168.2.4	38.54.26.75
Oct 13, 2024 05:29:33.486277103 CEST	80	49761	38.54.26.75	192.168.2.4
Oct 13, 2024 05:29:33.536879063 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.537339926 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.537355900 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.537895918 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.537902117 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.543477058 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.543981075 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.544008017 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.544837952 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.544852018 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.545232058 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.545727015 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.545737982 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.546480894 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.546489000 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.558135986 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.558176041 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.558267117 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.558269024 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.558315039 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.558526039 CEST	49988	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.558542013 CEST	443	49988	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.561506987 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.561561108 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.561628103 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.562992096 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.563016891 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.633704901 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.635123968 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.635157108 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.635757923 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.635762930 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.637526989 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.637584925 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.637629986 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.637649059 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.637702942 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.643471956 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.643681049 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.643774033 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.646840096 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.647043943 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.647145987 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.647166014 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.647367001 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.647392988 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.647403002 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.647418976 CEST	49991	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.647423983 CEST	443	49991	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.649111986 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.649133921 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.649146080 CEST	49990	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.649152040 CEST	443	49990	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.650248051 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.650262117 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.650274992 CEST	49989	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.650279999 CEST	443	49989	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.657289028 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.657335043 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.657658100 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.670412064 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.670433044 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.670763016 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.670805931 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.671188116 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.721765995 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.721810102 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.724998951 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.725044012 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.725830078 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.726358891 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.726370096 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.734061956 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.734536886 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.735028982 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.757857084 CEST	49992	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.757884979 CEST	443	49992	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.795089006 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.795130014 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:33.795205116 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.814416885 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:33.814434052 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.257668972 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.258260012 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.258279085 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.258766890 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.258771896 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.358933926 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.359096050 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.359334946 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.359400034 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.359416008 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.359431028 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.359500885 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.359561920 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.359572887 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.359602928 CEST	49993	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.359608889 CEST	443	49993	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.359709024 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.359724998 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.360192060 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.360198021 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.362965107 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.363003969 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.363111019 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.363405943 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.363420963 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.388448954 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.388976097 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.389041901 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.389446020 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.389466047 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.400046110 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.400403976 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.400419950 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.400814056 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.400819063 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.462230921 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.462291956 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.462366104 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.462589025 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.462610006 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.462621927 CEST	49994	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.462627888 CEST	443	49994	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.465795994 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.465842009 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.465939999 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.466111898 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.466125011 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.494378090 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.494407892 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.494448900 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.494488001 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.494549036 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.494678020 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.494719028 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.494745016 CEST	49995	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.494761944 CEST	443	49995	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.497009993 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.497040987 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.497154951 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.497515917 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.497525930 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.500360966 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.500705957 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.500766993 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.500788927 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.500801086 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.500809908 CEST	49996	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.500814915 CEST	443	49996	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.501979113 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.502341986 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.502356052 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.502702951 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.502738953 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.502799034 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.502851963 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.502856970 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.502906084 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.502919912 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.603950977 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.604029894 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.604094028 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.604109049 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.604150057 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.604223967 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.604398012 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.604414940 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.604446888 CEST	49997	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.604454041 CEST	443	49997	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.607340097 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.607388973 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:34.607461929 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.607616901 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:34.607631922 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.016913891 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.017621994 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.017643929 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.018001080 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.018004894 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.114253044 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.114831924 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.114852905 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.115305901 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.115312099 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.118544102 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.118664026 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.118733883 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.118818998 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.118844032 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.118859053 CEST	49998	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.118865013 CEST	443	49998	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.121711969 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.121756077 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.121862888 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.122467041 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.122483015 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.162516117 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.163055897 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.163072109 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.163494110 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.163501978 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.179974079 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.180429935 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.180439949 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.180742025 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.180747032 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.215276003 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.215759993 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.215848923 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.215883017 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.215899944 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.215909958 CEST	49999	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.215914965 CEST	443	49999	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.218790054 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.218833923 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.218913078 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.219069958 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.219084978 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.262685061 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.262841940 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.262934923 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.263035059 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.263035059 CEST	50001	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.263056993 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.263066053 CEST	443	50001	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.265927076 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.265971899 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.266042948 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.266171932 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.266187906 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.284862041 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.285044909 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.285178900 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.285181046 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.285258055 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.286489964 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.286506891 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.286513090 CEST	50000	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.286520004 CEST	443	50000	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.296226978 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.296257019 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.296418905 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.297049999 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.297063112 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.298830986 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.302964926 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.302989960 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.304466963 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.304474115 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.411065102 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.411154985 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.411272049 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.411379099 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.411393881 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.411407948 CEST	50002	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.411412954 CEST	443	50002	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.414004087 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.414051056 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.414117098 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.414274931 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.414288998 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.812114954 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.812774897 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.812788010 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.813252926 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.813266039 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.867316008 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.867845058 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.867870092 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.868267059 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.868273020 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.921083927 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.921129942 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.921185017 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.921200991 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.921226025 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.921443939 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.921456099 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.922406912 CEST	50003	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.922413111 CEST	443	50003	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.923942089 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.923974991 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.924042940 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.924397945 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.924411058 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.945565939 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.945884943 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.945905924 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.946249008 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.946254015 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.975096941 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.975151062 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.975200891 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.975311995 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.975326061 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.975358009 CEST	50004	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.975363016 CEST	443	50004	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.977758884 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.977777958 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.977838993 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.978003979 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.978008986 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.995786905 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.996165991 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.996181011 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:35.996529102 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:35.996532917 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.020066977 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.020509958 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.020530939 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.020911932 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.020917892 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.051127911 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.051197052 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.051255941 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.051265955 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.051362038 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.051436901 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.051470041 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.051486969 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.051497936 CEST	50005	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.051503897 CEST	443	50005	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.054140091 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.054174900 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.054239035 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.054371119 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.054385900 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.104504108 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.104665995 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.104739904 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.104954004 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.104954004 CEST	50006	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.104976892 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.104989052 CEST	443	50006	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.107667923 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.107712030 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.109615088 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.109775066 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.109791040 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.127985954 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.128074884 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.128171921 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.128329039 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.128343105 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.128354073 CEST	50007	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.128360033 CEST	443	50007	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.130784035 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.130831957 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.130933046 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.131048918 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.131063938 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.631970882 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.641465902 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.641488075 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.641990900 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.641997099 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.697942019 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.725622892 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.725644112 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.726260900 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.726264954 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.741359949 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.741400957 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.741451025 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.741533041 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.741722107 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.741722107 CEST	50009	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.741740942 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.741750002 CEST	443	50009	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.745285988 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.745342970 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.745412111 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.745558023 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.745575905 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.750467062 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.750902891 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.750921011 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.751405954 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.751413107 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.791635990 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.792076111 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.792095900 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.792536974 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.792541981 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.825474977 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.825927973 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.825947046 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.826399088 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.826404095 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.829719067 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.829786062 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.829865932 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.830152988 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.830152988 CEST	50010	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.830171108 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.830178976 CEST	443	50010	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.832469940 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.832515955 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.832592964 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.832724094 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.832741022 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.854424000 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.854484081 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.854651928 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.854687929 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.854687929 CEST	50011	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.854708910 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.854718924 CEST	443	50011	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.856992006 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.857012033 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.857084036 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.857218981 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.857233047 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.892055035 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.892146111 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.892230034 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.892246008 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.892266035 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.892317057 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.892393112 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.892409086 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.892420053 CEST	50012	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.892424107 CEST	443	50012	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.894498110 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.894517899 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.894588947 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.894712925 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.894731998 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.976165056 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.976305962 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.976531982 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.976531982 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.976531982 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.978647947 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.978667974 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:36.978734016 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.978866100 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:36.978877068 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.279910088 CEST	50013	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.279937983 CEST	443	50013	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.437740088 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.449574947 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.449614048 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.450131893 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.450139046 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.524689913 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.525458097 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.525495052 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.525820971 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.525830030 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.547935963 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.548743010 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.548841953 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.548918009 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.548933983 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.549011946 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.549182892 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.549216032 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.549742937 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.549757004 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.549837112 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.549875975 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.549902916 CEST	50014	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.549918890 CEST	443	50014	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.550555944 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.551248074 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.551261902 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.551752090 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.551757097 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.554424047 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.554454088 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.554544926 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.554764032 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.554774046 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.626538992 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.626717091 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.626777887 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.627243996 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.627266884 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.627279043 CEST	50015	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.627285004 CEST	443	50015	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.630923986 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.630975008 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.631053925 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.631206036 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.631222963 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.636173010 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.636601925 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.636656046 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.637212038 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.637228966 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.647185087 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.647660017 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.647731066 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.647784948 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.647784948 CEST	50017	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.647816896 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.647857904 CEST	443	50017	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.650590897 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.650623083 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.650691986 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.650810003 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.650823116 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.654810905 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.655010939 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.655066013 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.655086040 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.655097008 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.655097961 CEST	50016	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.655105114 CEST	443	50016	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.657866955 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.657876015 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.657942057 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.658057928 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.658067942 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.737087011 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.737226963 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.737289906 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.737334967 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.737528086 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.737581968 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.737787962 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.737788916 CEST	50018	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.737834930 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.737858057 CEST	443	50018	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.743694067 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.743737936 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:37.743825912 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.744081974 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:37.744098902 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.202785015 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.203512907 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.203530073 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.204024076 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.204030037 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.311341047 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.312230110 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.312266111 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.312741041 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.312747002 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.315915108 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.316345930 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.316366911 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.316766977 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.316772938 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.320408106 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.320852995 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.320871115 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.321182966 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.321188927 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.330478907 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.330857992 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.330944061 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.330975056 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.330990076 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.331002951 CEST	50019	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.331008911 CEST	443	50019	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.334194899 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.334237099 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.334307909 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.334474087 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.334489107 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.410450935 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.410650969 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.410820007 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.410844088 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.410862923 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.410872936 CEST	50021	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.410878897 CEST	443	50021	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.414074898 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.414113998 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.414200068 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.414395094 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.414407969 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.420213938 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.420579910 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.420624971 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.420743942 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.420770884 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.420802116 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.420847893 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.420871019 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.420883894 CEST	50020	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.420890093 CEST	443	50020	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.421307087 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.421348095 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.421403885 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.421458006 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.421464920 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.421520948 CEST	50022	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.421526909 CEST	443	50022	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.423233986 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.423243999 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.423319101 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.423427105 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.423441887 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.423455000 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.423472881 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.423538923 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.423621893 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.423636913 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.445051908 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.448956013 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.448987007 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.449460983 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.449469090 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.550803900 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.550962925 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.551023960 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.551356077 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.551381111 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.551403999 CEST	50023	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.551410913 CEST	443	50023	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.555408001 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.555448055 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.555690050 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.555919886 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.555933952 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.986633062 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.987287045 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.987308025 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:38.987787962 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:38.987793922 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.081182957 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.081305027 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.081986904 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.082010984 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.082659006 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.082664967 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.082954884 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.082962036 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.083437920 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.083441973 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.086272001 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.086724043 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.086750984 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.087163925 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.087168932 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.088855982 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.088929892 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.088980913 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.089119911 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.089135885 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.089145899 CEST	50024	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.089150906 CEST	443	50024	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.092113018 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.092160940 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.092237949 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.092381954 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.092398882 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.182643890 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.182904959 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.182956934 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.182970047 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.182985067 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.183048010 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.183073997 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.183092117 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.183129072 CEST	50026	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.183135033 CEST	443	50026	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.183732033 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.183886051 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.183937073 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.184756994 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.184761047 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.184784889 CEST	50025	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.184787989 CEST	443	50025	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.188035965 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.188036919 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.188066959 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.188071012 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.188147068 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.188216925 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.188441038 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.188452959 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.188457966 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.188472986 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.189011097 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.189165115 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.189227104 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.189249039 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.189260960 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.189270973 CEST	50027	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.189275980 CEST	443	50027	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.191411972 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.191442013 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.191518068 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.191627026 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.191637993 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.238415956 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.239110947 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.239135027 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.239728928 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.239734888 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.346349955 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.346935034 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.347052097 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.347111940 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.347120047 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.347151041 CEST	50028	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.347156048 CEST	443	50028	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.350696087 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.350745916 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.350832939 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.351026058 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.351046085 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.741060972 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.741594076 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.741610050 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.742201090 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.742204905 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.843931913 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.844075918 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.844166040 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.844177008 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.844528913 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.844528913 CEST	50029	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.844554901 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.844563961 CEST	443	50029	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.844758034 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.844769001 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.845264912 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.845269918 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.845578909 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.846035957 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.846050024 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.846493006 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.846498966 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.847961903 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.848004103 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.848081112 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.848227978 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.848241091 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.859631062 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.859941006 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.859954119 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.860342979 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.860348940 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.955542088 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.955737114 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.955815077 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.955852985 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.955985069 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.955992937 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.956010103 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.956020117 CEST	50031	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.956026077 CEST	443	50031	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.956039906 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.956067085 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.956088066 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.956099987 CEST	50030	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.956105947 CEST	443	50030	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.959450006 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.959470987 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.959481955 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.959508896 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.959554911 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.959589005 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.959728956 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.959742069 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.959759951 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.959770918 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.962832928 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.963013887 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.963074923 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.963110924 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.963119030 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.963129997 CEST	50032	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.963134050 CEST	443	50032	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.965389967 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.965435982 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:39.965517998 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.965650082 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:39.965667009 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.043582916 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.044365883 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.044405937 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.044879913 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.044888020 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.127229929 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:29:40.132055044 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:29:40.150017023 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.150100946 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.150161982 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.150407076 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.150435925 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.150448084 CEST	50033	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.150454044 CEST	443	50033	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.153810978 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.153870106 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.153971910 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.154150963 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.154169083 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.529233932 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.529833078 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.529850006 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.530375957 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.530380011 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.624614000 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.626638889 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:29:40.629858017 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.630484104 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.630543947 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.630959034 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.630974054 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.631253958 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.631272078 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.631666899 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.631674051 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.631680012 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:29:40.631757021 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.631795883 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.631836891 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.631840944 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.631886005 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.632081032 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.632105112 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.632116079 CEST	50034	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.632122993 CEST	443	50034	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.634937048 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.634994984 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.635072947 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.635210991 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.635241032 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.641606092 CEST	50040	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:29:40.641638994 CEST	443	50040	172.217.18.4	192.168.2.4
Oct 13, 2024 05:29:40.641732931 CEST	50040	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:29:40.641994953 CEST	50040	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:29:40.642016888 CEST	443	50040	172.217.18.4	192.168.2.4
Oct 13, 2024 05:29:40.643013000 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.643357992 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.643368959 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.643764973 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.643769979 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.728347063 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.728415012 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.728477955 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.728506088 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.728529930 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.728576899 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.728764057 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.728779078 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.728789091 CEST	50036	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.728795052 CEST	443	50036	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.731723070 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.731755972 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.731863022 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.732017040 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.732031107 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.732788086 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.732847929 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.732897043 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.732980013 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.733001947 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.733014107 CEST	50037	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.733020067 CEST	443	50037	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.735275984 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.735285997 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.735351086 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.735965014 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.735981941 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.820242882 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.820806026 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.820818901 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.821419001 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.821424007 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.852667093 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.853770018 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.853857040 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.862756968 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.862771034 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.862817049 CEST	50035	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.862823963 CEST	443	50035	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.866298914 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.866341114 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.866419077 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.866728067 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.866743088 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.926887035 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.926922083 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.926975965 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.927000999 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.927038908 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.927274942 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.927294970 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.927304983 CEST	50038	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.927310944 CEST	443	50038	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.930444002 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.930484056 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:40.930558920 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.930712938 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:40.930732012 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.288866997 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.291085958 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.291115999 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.291615009 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.291620970 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.299890041 CEST	443	50040	172.217.18.4	192.168.2.4
Oct 13, 2024 05:29:41.302741051 CEST	50040	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:29:41.302756071 CEST	443	50040	172.217.18.4	192.168.2.4
Oct 13, 2024 05:29:41.303158045 CEST	443	50040	172.217.18.4	192.168.2.4
Oct 13, 2024 05:29:41.306766987 CEST	50040	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:29:41.306863070 CEST	443	50040	172.217.18.4	192.168.2.4
Oct 13, 2024 05:29:41.360763073 CEST	50040	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:29:41.385626078 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.387058973 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.387079954 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.387566090 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.387569904 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.389957905 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.390247107 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.390260935 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.390574932 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.390580893 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.391226053 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.391347885 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.391402960 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.391616106 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.391630888 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.391639948 CEST	50039	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.391645908 CEST	443	50039	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.394979000 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.395013094 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.395102024 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.395247936 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.395260096 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.495796919 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.495855093 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.495858908 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.495944977 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.495966911 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.495992899 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.496239901 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.496265888 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.496277094 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.496277094 CEST	50042	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.496277094 CEST	50041	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.496284008 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.496292114 CEST	443	50042	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.496299028 CEST	443	50041	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.499598026 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.499649048 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.499713898 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.499727011 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.499744892 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.499804020 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.499944925 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.499960899 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.499960899 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.499977112 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.538786888 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.539839983 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.539858103 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.540492058 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.540498018 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.596218109 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.596894026 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.596911907 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.597527981 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.597533941 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.641438961 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.641510010 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.641609907 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.641618013 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.641789913 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.642081976 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.642096043 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.642105103 CEST	50043	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.642110109 CEST	443	50043	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.656374931 CEST	50048	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.656409025 CEST	443	50048	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.656465054 CEST	50048	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.657073975 CEST	50048	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.657088041 CEST	443	50048	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.700238943 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.700401068 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.700464964 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.700670004 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.700687885 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.700697899 CEST	50044	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.700705051 CEST	443	50044	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.703603029 CEST	50049	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.703639984 CEST	443	50049	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.703702927 CEST	50049	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.703824043 CEST	50049	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:41.703835964 CEST	443	50049	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:41.751374006 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:29:41.756253958 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:29:42.053838015 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.054646015 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.054673910 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.055244923 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.055252075 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.147928953 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.148672104 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.148698092 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.149301052 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.149307966 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.157002926 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.157073975 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.157145023 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.157372952 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.157387018 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.157398939 CEST	50045	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.157403946 CEST	443	50045	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.159709930 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.160532951 CEST	50050	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.160574913 CEST	443	50050	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.160643101 CEST	50050	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.161016941 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.161031961 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.161554098 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.161560059 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.161602020 CEST	50050	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.161617041 CEST	443	50050	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.250787020 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.250806093 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.250858068 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.250880957 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.250907898 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.251775026 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.251785040 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.251796007 CEST	50046	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.251801014 CEST	443	50046	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.255528927 CEST	50051	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.255568981 CEST	443	50051	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.255630970 CEST	50051	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.255800009 CEST	50051	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.255812883 CEST	443	50051	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.273780107 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.273833990 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.273875952 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.274193048 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.274208069 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.274218082 CEST	50047	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.274224043 CEST	443	50047	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.277029037 CEST	50052	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.277053118 CEST	443	50052	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.277126074 CEST	50052	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.277281046 CEST	50052	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.277295113 CEST	443	50052	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.309250116 CEST	443	50048	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.309696913 CEST	50048	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.309741020 CEST	443	50048	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.310328960 CEST	50048	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.310347080 CEST	443	50048	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.383569956 CEST	443	50049	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.384167910 CEST	50049	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.384186029 CEST	443	50049	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.384768009 CEST	50049	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.384773016 CEST	443	50049	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.410746098 CEST	443	50048	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.410767078 CEST	443	50048	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.410834074 CEST	443	50048	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.410947084 CEST	50048	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.410947084 CEST	50048	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.411138058 CEST	50048	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.411160946 CEST	443	50048	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.411173105 CEST	50048	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.411179066 CEST	443	50048	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.414591074 CEST	50053	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.414639950 CEST	443	50053	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.414729118 CEST	50053	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.414885044 CEST	50053	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.414896965 CEST	443	50053	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.487828016 CEST	443	50049	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.487879992 CEST	443	50049	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.488060951 CEST	50049	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.488076925 CEST	443	50049	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.488344908 CEST	50049	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.488358021 CEST	443	50049	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.488365889 CEST	50049	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.488689899 CEST	443	50049	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.488770962 CEST	443	50049	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.488820076 CEST	50049	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.491765022 CEST	50054	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.491796017 CEST	443	50054	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.491887093 CEST	50054	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.492085934 CEST	50054	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.492099047 CEST	443	50054	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.808352947 CEST	443	50050	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.808933973 CEST	50050	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.808984041 CEST	443	50050	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.809494972 CEST	50050	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.809508085 CEST	443	50050	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.904597998 CEST	443	50051	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.905271053 CEST	50051	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.905298948 CEST	443	50051	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.905775070 CEST	50051	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.905780077 CEST	443	50051	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.909332991 CEST	443	50050	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.909352064 CEST	443	50050	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.909396887 CEST	443	50050	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.909440041 CEST	50050	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.909496069 CEST	50050	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.909629107 CEST	50050	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.909629107 CEST	50050	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.909658909 CEST	443	50050	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.909682035 CEST	443	50050	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.912390947 CEST	50055	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.912431002 CEST	443	50055	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.912508965 CEST	50055	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.912622929 CEST	50055	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.912637949 CEST	443	50055	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.977379084 CEST	443	50052	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.977915049 CEST	50052	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.977932930 CEST	443	50052	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:42.978406906 CEST	50052	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:42.978413105 CEST	443	50052	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.007188082 CEST	443	50051	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.007210016 CEST	443	50051	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.007261038 CEST	443	50051	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.007282972 CEST	50051	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.007323980 CEST	50051	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.007550955 CEST	50051	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.007575035 CEST	443	50051	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.007586002 CEST	50051	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.007591963 CEST	443	50051	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.010741949 CEST	50056	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.010786057 CEST	443	50056	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.010876894 CEST	50056	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.011048079 CEST	50056	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.011059046 CEST	443	50056	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.077764988 CEST	443	50053	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.078444958 CEST	50053	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.078485012 CEST	443	50053	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.078761101 CEST	443	50052	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.078811884 CEST	50053	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.078820944 CEST	443	50053	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.078871965 CEST	443	50052	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.078923941 CEST	50052	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.079088926 CEST	50052	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.079103947 CEST	443	50052	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.079113007 CEST	50052	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.079118967 CEST	443	50052	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.082148075 CEST	50057	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.082182884 CEST	443	50057	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.082251072 CEST	50057	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.082413912 CEST	50057	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.082429886 CEST	443	50057	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.169910908 CEST	443	50054	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.171175957 CEST	50054	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.171206951 CEST	443	50054	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.171572924 CEST	50054	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.171578884 CEST	443	50054	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.179059982 CEST	443	50053	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.179112911 CEST	443	50053	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.179194927 CEST	50053	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.179429054 CEST	50053	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.179442883 CEST	443	50053	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.179451942 CEST	50053	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.179459095 CEST	443	50053	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.182331085 CEST	50058	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.182363033 CEST	443	50058	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.182451963 CEST	50058	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.182574987 CEST	50058	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.182590008 CEST	443	50058	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.271003008 CEST	443	50054	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.271147966 CEST	443	50054	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.271392107 CEST	50054	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.271475077 CEST	50054	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.271498919 CEST	443	50054	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.271512032 CEST	50054	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.271521091 CEST	443	50054	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.274420023 CEST	50059	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.274437904 CEST	443	50059	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.278490067 CEST	50059	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.278646946 CEST	50059	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.278656006 CEST	443	50059	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.570378065 CEST	443	50055	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.570866108 CEST	50055	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.570883036 CEST	443	50055	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.571315050 CEST	50055	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.571319103 CEST	443	50055	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.667824984 CEST	443	50056	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.668381929 CEST	50056	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.668410063 CEST	443	50056	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.669022083 CEST	50056	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.669028044 CEST	443	50056	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.671375990 CEST	443	50055	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.671448946 CEST	443	50055	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.671658039 CEST	50055	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.671683073 CEST	50055	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.671696901 CEST	443	50055	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.674793959 CEST	50060	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.674841881 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.674953938 CEST	50060	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.675067902 CEST	50060	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.675091982 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.731367111 CEST	443	50057	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.731802940 CEST	50057	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.731825113 CEST	443	50057	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.732250929 CEST	50057	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.732259035 CEST	443	50057	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.769318104 CEST	443	50056	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.769345999 CEST	443	50056	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.769442081 CEST	50056	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.769464016 CEST	443	50056	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.769505978 CEST	50056	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.769516945 CEST	443	50056	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.769567966 CEST	443	50056	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.769615889 CEST	50056	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.769777060 CEST	50056	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.769792080 CEST	443	50056	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.769800901 CEST	50056	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.769805908 CEST	443	50056	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.772983074 CEST	50061	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.773021936 CEST	443	50061	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.773094893 CEST	50061	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.773395061 CEST	50061	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.773408890 CEST	443	50061	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.834645987 CEST	443	50057	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.834667921 CEST	443	50057	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.834728003 CEST	443	50057	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.834800959 CEST	50057	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.834847927 CEST	50057	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.835144997 CEST	50057	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.835171938 CEST	443	50057	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.835186005 CEST	50057	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.835192919 CEST	443	50057	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.837805986 CEST	443	50058	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.838501930 CEST	50062	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.838522911 CEST	443	50062	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.838602066 CEST	50062	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.838762045 CEST	50062	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.838776112 CEST	443	50062	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.838915110 CEST	50058	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.838934898 CEST	443	50058	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.839354992 CEST	50058	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.839360952 CEST	443	50058	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.952903032 CEST	443	50058	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.952928066 CEST	443	50058	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.952944040 CEST	443	50058	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.953155994 CEST	50058	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.953183889 CEST	443	50058	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.953280926 CEST	50058	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.962579966 CEST	443	50059	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.968056917 CEST	50059	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.968066931 CEST	443	50059	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:43.968780994 CEST	50059	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:43.968785048 CEST	443	50059	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.036933899 CEST	443	50058	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.037018061 CEST	443	50058	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.037137985 CEST	50058	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.037137985 CEST	50058	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.037183046 CEST	50058	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.037183046 CEST	50058	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.037199020 CEST	443	50058	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.037209988 CEST	443	50058	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.040375948 CEST	50063	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.040421009 CEST	443	50063	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.040563107 CEST	50063	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.040759087 CEST	50063	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.040774107 CEST	443	50063	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.070024967 CEST	443	50059	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.070074081 CEST	443	50059	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.070199966 CEST	443	50059	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.070359945 CEST	50059	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.070359945 CEST	50059	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.070359945 CEST	50059	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.072496891 CEST	50064	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.072525024 CEST	443	50064	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.072591066 CEST	50064	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.072729111 CEST	50064	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.072741032 CEST	443	50064	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.360611916 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.361597061 CEST	50060	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.361618042 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.361846924 CEST	50060	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.361851931 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.376461983 CEST	50059	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.376493931 CEST	443	50059	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.428757906 CEST	443	50061	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.429438114 CEST	50061	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.429451942 CEST	443	50061	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.429795980 CEST	50061	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.429800987 CEST	443	50061	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.472053051 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.472079992 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.472100973 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.472182989 CEST	50060	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.472204924 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.472385883 CEST	50060	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.521157980 CEST	443	50062	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.521718025 CEST	50062	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.521732092 CEST	443	50062	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.522269964 CEST	50062	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.522277117 CEST	443	50062	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.530915022 CEST	443	50061	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.530946970 CEST	443	50061	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.531017065 CEST	443	50061	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.531075001 CEST	50061	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.531075001 CEST	50061	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.531281948 CEST	50061	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.531281948 CEST	50061	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.531301022 CEST	443	50061	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.531310081 CEST	443	50061	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.534456015 CEST	50065	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.534486055 CEST	443	50065	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.534565926 CEST	50065	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.534718037 CEST	50065	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.534730911 CEST	443	50065	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.562805891 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.562861919 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.562876940 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.562892914 CEST	50060	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.562994957 CEST	50060	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.563066959 CEST	50060	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.563066959 CEST	50060	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.563086987 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.563102961 CEST	443	50060	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.565612078 CEST	50066	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.565627098 CEST	443	50066	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.565711975 CEST	50066	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.565851927 CEST	50066	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.565865040 CEST	443	50066	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.628851891 CEST	443	50062	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.628875971 CEST	443	50062	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.628978968 CEST	50062	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.628999949 CEST	443	50062	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.629030943 CEST	443	50062	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.629086018 CEST	50062	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.629204988 CEST	50062	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.629204988 CEST	50062	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.629220963 CEST	443	50062	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.629229069 CEST	443	50062	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.645083904 CEST	50067	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.645131111 CEST	443	50067	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.645193100 CEST	50067	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.645349979 CEST	50067	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.645359039 CEST	443	50067	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.700912952 CEST	443	50063	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.701494932 CEST	50063	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.701514006 CEST	443	50063	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.702044964 CEST	50063	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.702049971 CEST	443	50063	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.727363110 CEST	443	50064	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.727794886 CEST	50064	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.727804899 CEST	443	50064	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.728250027 CEST	50064	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.728255033 CEST	443	50064	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.815049887 CEST	443	50063	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.815176964 CEST	443	50063	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.815401077 CEST	50063	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.815526009 CEST	50063	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.815541029 CEST	443	50063	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.815550089 CEST	50063	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.815556049 CEST	443	50063	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.819025993 CEST	50068	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.819082022 CEST	443	50068	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.819200993 CEST	50068	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.819401026 CEST	50068	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.819428921 CEST	443	50068	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.851713896 CEST	443	50064	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.851922989 CEST	443	50064	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.852018118 CEST	50064	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.852264881 CEST	50064	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.852264881 CEST	50064	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.852287054 CEST	443	50064	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.852296114 CEST	443	50064	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.855703115 CEST	50069	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.855777025 CEST	443	50069	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:44.855875969 CEST	50069	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.856062889 CEST	50069	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:44.856081009 CEST	443	50069	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.121136904 CEST	443	50065	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.121665001 CEST	50065	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.121680975 CEST	443	50065	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.122208118 CEST	50065	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.122212887 CEST	443	50065	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.225966930 CEST	443	50066	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.226305962 CEST	443	50065	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.226399899 CEST	443	50065	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.226474047 CEST	50065	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.226572037 CEST	50066	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.226582050 CEST	443	50066	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.226644993 CEST	50065	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.226660967 CEST	443	50065	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.226677895 CEST	50065	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.226685047 CEST	443	50065	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.227149963 CEST	50066	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.227154970 CEST	443	50066	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.229906082 CEST	50070	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.229943991 CEST	443	50070	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.230021954 CEST	50070	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.230178118 CEST	50070	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.230191946 CEST	443	50070	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.326811075 CEST	443	50066	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.326952934 CEST	443	50066	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.327009916 CEST	50066	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.327290058 CEST	50066	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.327291012 CEST	50066	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.327311039 CEST	443	50066	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.327320099 CEST	443	50066	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.336337090 CEST	443	50067	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.346734047 CEST	50071	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.346805096 CEST	443	50071	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.346875906 CEST	50071	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.347955942 CEST	50067	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.347970963 CEST	443	50067	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.348495960 CEST	50071	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.348515987 CEST	50067	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.348524094 CEST	443	50067	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.348529100 CEST	443	50071	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.458645105 CEST	443	50067	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.458666086 CEST	443	50067	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.458718061 CEST	443	50067	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.458739996 CEST	50067	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.458776951 CEST	50067	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.458997965 CEST	50067	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.459007978 CEST	443	50067	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.459017992 CEST	50067	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.459023952 CEST	443	50067	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.469563007 CEST	443	50068	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.470029116 CEST	50068	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.470071077 CEST	443	50068	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.471049070 CEST	50068	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.471064091 CEST	443	50068	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.521962881 CEST	443	50069	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.522341967 CEST	50069	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.522355080 CEST	443	50069	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.522752047 CEST	50069	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.522758961 CEST	443	50069	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.570216894 CEST	443	50068	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.570362091 CEST	443	50068	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.570586920 CEST	50068	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.570657015 CEST	50068	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.570684910 CEST	443	50068	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.570710897 CEST	50068	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.570727110 CEST	443	50068	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.625533104 CEST	443	50069	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.626887083 CEST	443	50069	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.626954079 CEST	50069	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.627315998 CEST	50069	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.627334118 CEST	443	50069	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:45.627343893 CEST	50069	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:45.627350092 CEST	443	50069	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:46.010554075 CEST	443	50071	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:46.015929937 CEST	50071	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:46.015970945 CEST	443	50071	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:46.016463995 CEST	50071	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:46.016477108 CEST	443	50071	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:46.048517942 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:29:46.053292990 CEST	80	49755	116.255.154.157	192.168.2.4
Oct 13, 2024 05:29:46.113663912 CEST	443	50071	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:46.113729000 CEST	443	50071	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:46.113800049 CEST	50071	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:46.114038944 CEST	50071	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:46.114069939 CEST	443	50071	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:46.114089966 CEST	50071	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:46.114103079 CEST	443	50071	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:48.895339966 CEST	443	50070	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:48.895931959 CEST	50070	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:48.895955086 CEST	443	50070	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:48.896334887 CEST	50070	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:48.896338940 CEST	443	50070	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:49.000082970 CEST	443	50070	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:49.000144005 CEST	443	50070	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:49.000200987 CEST	50070	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:49.000597000 CEST	50070	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:49.000624895 CEST	443	50070	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:49.000639915 CEST	50070	443	192.168.2.4	13.107.246.60
Oct 13, 2024 05:29:49.000647068 CEST	443	50070	13.107.246.60	192.168.2.4
Oct 13, 2024 05:29:51.206432104 CEST	443	50040	172.217.18.4	192.168.2.4
Oct 13, 2024 05:29:51.206509113 CEST	443	50040	172.217.18.4	192.168.2.4
Oct 13, 2024 05:29:51.210545063 CEST	50040	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:29:53.050565004 CEST	50040	443	192.168.2.4	172.217.18.4
Oct 13, 2024 05:29:53.050581932 CEST	443	50040	172.217.18.4	192.168.2.4
Oct 13, 2024 05:30:13.066632032 CEST	49748	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:30:13.071584940 CEST	80	49748	148.153.240.76	192.168.2.4
Oct 13, 2024 05:30:14.001621962 CEST	49757	80	192.168.2.4	148.153.240.76
Oct 13, 2024 05:30:14.006503105 CEST	80	49757	148.153.240.76	192.168.2.4
Oct 13, 2024 05:30:16.345563889 CEST	49739	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:30:16.345602036 CEST	49743	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:30:16.350332022 CEST	80	49739	116.255.154.157	192.168.2.4
Oct 13, 2024 05:30:16.350404978 CEST	80	49743	116.255.154.157	192.168.2.4
Oct 13, 2024 05:30:16.548760891 CEST	49746	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:30:16.553688049 CEST	80	49746	116.255.154.157	192.168.2.4
Oct 13, 2024 05:30:16.564377069 CEST	49745	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:30:16.569228888 CEST	80	49745	116.255.154.157	192.168.2.4
Oct 13, 2024 05:30:17.392465115 CEST	49760	80	192.168.2.4	90.84.161.27
Oct 13, 2024 05:30:17.397384882 CEST	80	49760	90.84.161.27	192.168.2.4
Oct 13, 2024 05:30:17.627166986 CEST	49753	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:30:17.632890940 CEST	80	49753	116.255.154.157	192.168.2.4
Oct 13, 2024 05:30:17.767608881 CEST	49754	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:30:17.788849115 CEST	80	49754	116.255.154.157	192.168.2.4
Oct 13, 2024 05:30:17.923727989 CEST	49752	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:30:17.923893929 CEST	49750	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:30:17.928508997 CEST	80	49752	116.255.154.157	192.168.2.4
Oct 13, 2024 05:30:17.928628922 CEST	80	49750	116.255.154.157	192.168.2.4
Oct 13, 2024 05:30:18.486206055 CEST	49761	80	192.168.2.4	38.54.26.75
Oct 13, 2024 05:30:18.491182089 CEST	80	49761	38.54.26.75	192.168.2.4
Oct 13, 2024 05:30:25.139286041 CEST	49740	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:30:25.144176960 CEST	80	49740	116.255.154.157	192.168.2.4
Oct 13, 2024 05:30:25.642370939 CEST	49744	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:30:25.647150040 CEST	80	49744	116.255.154.157	192.168.2.4
Oct 13, 2024 05:30:26.766695023 CEST	49749	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:30:26.771519899 CEST	80	49749	116.255.154.157	192.168.2.4
Oct 13, 2024 05:30:31.080082893 CEST	49755	80	192.168.2.4	116.255.154.157
Oct 13, 2024 05:30:31.085835934 CEST	80	49755	116.255.154.157	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 13, 2024 05:28:23.439415932 CEST	138	138	192.168.2.4	192.168.2.255
Oct 13, 2024 05:28:29.810585976 CEST	62563	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:30.183697939 CEST	53	62563	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:36.698555946 CEST	55909	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:36.698857069 CEST	63549	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:36.706913948 CEST	53	61922	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:36.770250082 CEST	53	64599	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:37.078921080 CEST	53	63549	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:37.090837955 CEST	53	55909	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:37.807781935 CEST	53	50487	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:40.581623077 CEST	56482	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:40.581773043 CEST	51006	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:40.589359999 CEST	53	56482	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:40.589500904 CEST	53	51006	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:41.482866049 CEST	49796	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:41.483007908 CEST	54747	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:41.891688108 CEST	59973	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:41.891890049 CEST	53017	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:42.093826056 CEST	53	49796	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:42.154736996 CEST	53	59973	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:42.222147942 CEST	53	54747	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:42.276587963 CEST	53	53017	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:43.050543070 CEST	60007	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:43.050765038 CEST	54944	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:43.057965994 CEST	53	54944	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:43.071636915 CEST	53	60007	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:45.750267982 CEST	51301	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:45.750663042 CEST	50505	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:45.775737047 CEST	53	49704	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:46.253640890 CEST	53	50505	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:46.317106962 CEST	53	51301	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:47.385034084 CEST	60798	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:47.385262966 CEST	51393	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:47.392426968 CEST	53	60798	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:47.790869951 CEST	53	51393	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:53.365421057 CEST	65382	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:53.365689993 CEST	63613	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:54.378127098 CEST	49788	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:54.378345966 CEST	57836	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:54.797858953 CEST	53	50302	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:54.939507961 CEST	53	63613	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:55.138062000 CEST	53	65382	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:56.095232964 CEST	53	49788	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:56.227296114 CEST	58739	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:56.227449894 CEST	64782	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:56.234103918 CEST	53	58739	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:56.587466002 CEST	53	64782	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:56.591773033 CEST	53	57836	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:56.628961086 CEST	54108	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:56.629173994 CEST	56462	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:56.636316061 CEST	53	54108	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:56.637149096 CEST	53	56462	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:57.633723974 CEST	50971	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:57.634175062 CEST	55622	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:57.640439987 CEST	53	50971	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:57.641258955 CEST	53	55622	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:59.277853966 CEST	51304	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:59.278055906 CEST	50527	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:28:59.284954071 CEST	53	51304	1.1.1.1	192.168.2.4
Oct 13, 2024 05:28:59.440336943 CEST	53	50527	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:00.219619036 CEST	54083	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:29:00.219835997 CEST	59182	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:29:00.402730942 CEST	53	59182	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:00.411206961 CEST	53	54083	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:03.475694895 CEST	58510	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:29:03.476134062 CEST	57321	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:29:03.483422995 CEST	53	58510	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:03.639322042 CEST	53	57321	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:05.583422899 CEST	54868	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:29:05.583564043 CEST	57026	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:29:05.591650963 CEST	53	54868	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:05.744141102 CEST	53	57026	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:06.802449942 CEST	64121	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:29:06.802607059 CEST	64896	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:29:07.054580927 CEST	53	64121	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:07.061176062 CEST	53	64896	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:07.467164040 CEST	58086	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:29:07.467305899 CEST	64107	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:29:07.783086061 CEST	53	64107	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:07.847006083 CEST	53	58086	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:09.561505079 CEST	51356	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:29:09.561626911 CEST	58074	53	192.168.2.4	1.1.1.1
Oct 13, 2024 05:29:09.569005013 CEST	53	51356	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:09.734555006 CEST	53	58074	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:14.899744987 CEST	53	58798	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:35.824249029 CEST	53	55901	1.1.1.1	192.168.2.4
Oct 13, 2024 05:29:39.150149107 CEST	53	63789	1.1.1.1	192.168.2.4
Oct 13, 2024 05:30:04.087855101 CEST	53	59426	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 13, 2024 05:28:31.370522022 CEST	192.168.2.4	43.154.112.29	4d5a		Echo
Oct 13, 2024 05:28:31.441499949 CEST	192.168.2.4	43.154.112.29	4d59		Echo
Oct 13, 2024 05:28:31.673122883 CEST	43.154.112.29	192.168.2.4	555a		Echo Reply
Oct 13, 2024 05:28:31.673546076 CEST	192.168.2.4	43.154.112.29	fcfd	(Protocol unreachable)	Destination Unreachable
Oct 13, 2024 05:28:31.744209051 CEST	43.154.112.29	192.168.2.4	5559		Echo Reply
Oct 13, 2024 05:28:31.746155977 CEST	192.168.2.4	47.102.203.90	4d58		Echo
Oct 13, 2024 05:28:31.940418959 CEST	192.168.2.4	14.212.227.51	4d57		Echo
Oct 13, 2024 05:28:32.012773037 CEST	47.102.203.90	192.168.2.4	5558		Echo Reply
Oct 13, 2024 05:28:32.013022900 CEST	192.168.2.4	47.102.203.90	fcfd	(Protocol unreachable)	Destination Unreachable
Oct 13, 2024 05:28:32.221803904 CEST	14.212.227.51	192.168.2.4	5557		Echo Reply
Oct 13, 2024 05:28:32.222419024 CEST	192.168.2.4	154.91.196.176	4d56		Echo
Oct 13, 2024 05:28:32.475060940 CEST	154.91.196.176	192.168.2.4	5556		Echo Reply
Oct 13, 2024 05:28:32.475164890 CEST	192.168.2.4	154.91.196.176	fcfd	(Protocol unreachable)	Destination Unreachable
Oct 13, 2024 05:28:42.222280025 CEST	192.168.2.4	1.1.1.1	c288	(Port unreachable)	Destination Unreachable
Oct 13, 2024 05:28:47.790951967 CEST	192.168.2.4	1.1.1.1	c296	(Port unreachable)	Destination Unreachable
Oct 13, 2024 05:28:56.095366001 CEST	192.168.2.4	1.1.1.1	c314	(Port unreachable)	Destination Unreachable
Oct 13, 2024 05:28:59.440408945 CEST	192.168.2.4	1.1.1.1	c215	(Port unreachable)	Destination Unreachable
Oct 13, 2024 05:29:03.639401913 CEST	192.168.2.4	1.1.1.1	c1e4	(Port unreachable)	Destination Unreachable
Oct 13, 2024 05:29:05.744276047 CEST	192.168.2.4	1.1.1.1	c1e7	(Port unreachable)	Destination Unreachable
Oct 13, 2024 05:29:09.738432884 CEST	192.168.2.4	1.1.1.1	c221	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 13, 2024 05:28:29.810585976 CEST	192.168.2.4	1.1.1.1	0xcd69	Standard query (0)	www.yishimei.cn	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:36.698555946 CEST	192.168.2.4	1.1.1.1	0x3adb	Standard query (0)	www.yishimei.cn	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:36.698857069 CEST	192.168.2.4	1.1.1.1	0x3520	Standard query (0)	www.yishimei.cn	65	IN (0x0001)	false
Oct 13, 2024 05:28:40.581623077 CEST	192.168.2.4	1.1.1.1	0xb213	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:40.581773043 CEST	192.168.2.4	1.1.1.1	0xc035	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 13, 2024 05:28:41.482866049 CEST	192.168.2.4	1.1.1.1	0xdd9c	Standard query (0)	sdk.51.la	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:41.483007908 CEST	192.168.2.4	1.1.1.1	0x9de6	Standard query (0)	sdk.51.la	65	IN (0x0001)	false
Oct 13, 2024 05:28:41.891688108 CEST	192.168.2.4	1.1.1.1	0xc412	Standard query (0)	www.yishimei.cn	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:41.891890049 CEST	192.168.2.4	1.1.1.1	0x609d	Standard query (0)	www.yishimei.cn	65	IN (0x0001)	false
Oct 13, 2024 05:28:43.050543070 CEST	192.168.2.4	1.1.1.1	0xe949	Standard query (0)	sdk.51.la	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:43.050765038 CEST	192.168.2.4	1.1.1.1	0x926a	Standard query (0)	sdk.51.la	65	IN (0x0001)	false
Oct 13, 2024 05:28:45.750267982 CEST	192.168.2.4	1.1.1.1	0x9ad2	Standard query (0)	collect-v6.51.la	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:45.750663042 CEST	192.168.2.4	1.1.1.1	0x45b	Standard query (0)	collect-v6.51.la	65	IN (0x0001)	false
Oct 13, 2024 05:28:47.385034084 CEST	192.168.2.4	1.1.1.1	0x8b4c	Standard query (0)	collect-v6.51.la	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:47.385262966 CEST	192.168.2.4	1.1.1.1	0x9657	Standard query (0)	collect-v6.51.la	65	IN (0x0001)	false
Oct 13, 2024 05:28:53.365421057 CEST	192.168.2.4	1.1.1.1	0x311b	Standard query (0)	wwod.lanzout.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:53.365689993 CEST	192.168.2.4	1.1.1.1	0x2d93	Standard query (0)	wwod.lanzout.com	65	IN (0x0001)	false
Oct 13, 2024 05:28:54.378127098 CEST	192.168.2.4	1.1.1.1	0x3168	Standard query (0)	wwod.lanzout.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:54.378345966 CEST	192.168.2.4	1.1.1.1	0xdad7	Standard query (0)	wwod.lanzout.com	65	IN (0x0001)	false
Oct 13, 2024 05:28:56.227296114 CEST	192.168.2.4	1.1.1.1	0x2dd6	Standard query (0)	pan.baidu.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.227449894 CEST	192.168.2.4	1.1.1.1	0x658b	Standard query (0)	pan.baidu.com	65	IN (0x0001)	false
Oct 13, 2024 05:28:56.628961086 CEST	192.168.2.4	1.1.1.1	0xab9f	Standard query (0)	weixin.qq.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.629173994 CEST	192.168.2.4	1.1.1.1	0x2962	Standard query (0)	weixin.qq.com	65	IN (0x0001)	false
Oct 13, 2024 05:28:57.633723974 CEST	192.168.2.4	1.1.1.1	0xea59	Standard query (0)	weixin.qq.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:57.634175062 CEST	192.168.2.4	1.1.1.1	0xe7e4	Standard query (0)	weixin.qq.com	65	IN (0x0001)	false
Oct 13, 2024 05:28:59.277853966 CEST	192.168.2.4	1.1.1.1	0xcc85	Standard query (0)	wechat.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:59.278055906 CEST	192.168.2.4	1.1.1.1	0x481e	Standard query (0)	wechat.com	65	IN (0x0001)	false
Oct 13, 2024 05:29:00.219619036 CEST	192.168.2.4	1.1.1.1	0x6cff	Standard query (0)	wechat.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:00.219835997 CEST	192.168.2.4	1.1.1.1	0x2db3	Standard query (0)	wechat.com	65	IN (0x0001)	false
Oct 13, 2024 05:29:03.475694895 CEST	192.168.2.4	1.1.1.1	0x316f	Standard query (0)	www.wechat.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:03.476134062 CEST	192.168.2.4	1.1.1.1	0x5eef	Standard query (0)	www.wechat.com	65	IN (0x0001)	false
Oct 13, 2024 05:29:05.583422899 CEST	192.168.2.4	1.1.1.1	0xcd60	Standard query (0)	newres.wechat.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.583564043 CEST	192.168.2.4	1.1.1.1	0x70c3	Standard query (0)	newres.wechat.com	65	IN (0x0001)	false
Oct 13, 2024 05:29:06.802449942 CEST	192.168.2.4	1.1.1.1	0x4d85	Standard query (0)	newres.wechat.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:06.802607059 CEST	192.168.2.4	1.1.1.1	0x9630	Standard query (0)	newres.wechat.com	65	IN (0x0001)	false
Oct 13, 2024 05:29:07.467164040 CEST	192.168.2.4	1.1.1.1	0x32b7	Standard query (0)	support.wechat.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.467305899 CEST	192.168.2.4	1.1.1.1	0x7ee0	Standard query (0)	support.wechat.com	65	IN (0x0001)	false
Oct 13, 2024 05:29:09.561505079 CEST	192.168.2.4	1.1.1.1	0xc91b	Standard query (0)	support.wechat.com	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:09.561626911 CEST	192.168.2.4	1.1.1.1	0x3348	Standard query (0)	support.wechat.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 13, 2024 05:28:30.183697939 CEST	1.1.1.1	192.168.2.4	0xcd69	No error (0)	www.yishimei.cn		116.255.154.157	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:37.090837955 CEST	1.1.1.1	192.168.2.4	0x3adb	No error (0)	www.yishimei.cn		116.255.154.157	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:40.589359999 CEST	1.1.1.1	192.168.2.4	0xb213	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:40.589500904 CEST	1.1.1.1	192.168.2.4	0xc035	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 13, 2024 05:28:42.093826056 CEST	1.1.1.1	192.168.2.4	0xdd9c	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:42.093826056 CEST	1.1.1.1	192.168.2.4	0xdd9c	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:42.093826056 CEST	1.1.1.1	192.168.2.4	0xdd9c	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.76	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:42.093826056 CEST	1.1.1.1	192.168.2.4	0xdd9c	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.27	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:42.154736996 CEST	1.1.1.1	192.168.2.4	0xc412	No error (0)	www.yishimei.cn		116.255.154.157	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:42.222147942 CEST	1.1.1.1	192.168.2.4	0x9de6	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:42.222147942 CEST	1.1.1.1	192.168.2.4	0x9de6	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:43.057965994 CEST	1.1.1.1	192.168.2.4	0x926a	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:43.057965994 CEST	1.1.1.1	192.168.2.4	0x926a	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:43.071636915 CEST	1.1.1.1	192.168.2.4	0xe949	No error (0)	sdk.51.la	sdk.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:43.071636915 CEST	1.1.1.1	192.168.2.4	0xe949	No error (0)	sdk.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:43.071636915 CEST	1.1.1.1	192.168.2.4	0xe949	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.76	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:43.071636915 CEST	1.1.1.1	192.168.2.4	0xe949	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.27	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:46.253640890 CEST	1.1.1.1	192.168.2.4	0x45b	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:46.253640890 CEST	1.1.1.1	192.168.2.4	0x45b	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:46.317106962 CEST	1.1.1.1	192.168.2.4	0x9ad2	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:46.317106962 CEST	1.1.1.1	192.168.2.4	0x9ad2	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:46.317106962 CEST	1.1.1.1	192.168.2.4	0x9ad2	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.161.27	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:46.317106962 CEST	1.1.1.1	192.168.2.4	0x9ad2	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		148.153.240.76	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:47.392426968 CEST	1.1.1.1	192.168.2.4	0x8b4c	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:47.392426968 CEST	1.1.1.1	192.168.2.4	0x8b4c	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:47.392426968 CEST	1.1.1.1	192.168.2.4	0x8b4c	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		38.54.26.75	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:47.392426968 CEST	1.1.1.1	192.168.2.4	0x8b4c	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.164.16	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:47.392426968 CEST	1.1.1.1	192.168.2.4	0x8b4c	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		38.54.26.73	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:47.392426968 CEST	1.1.1.1	192.168.2.4	0x8b4c	No error (0)	hcdnwsa120.v5.cdnhwczoy106.cn		90.84.164.13	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:47.790869951 CEST	1.1.1.1	192.168.2.4	0x9657	No error (0)	collect-v6.51.la	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:47.790869951 CEST	1.1.1.1	192.168.2.4	0x9657	No error (0)	collect-v6.51.la.d183e8b1.cdnhwcgqa21.com	hcdnwsa120.v5.cdnhwczoy106.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:54.939507961 CEST	1.1.1.1	192.168.2.4	0x2d93	No error (0)	wwod.lanzout.com	0b8ffbb9.lanzout.com.0b8ffbb9.cdnhwc8.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:54.939507961 CEST	1.1.1.1	192.168.2.4	0x2d93	No error (0)	0b8ffbb9.lanzout.com.0b8ffbb9.cdnhwc8.cn	hcdnw101.sme.cdnhwcibv122.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	wwod.lanzout.com	0b8ffbb9.lanzout.com.0b8ffbb9.cdnhwc8.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	0b8ffbb9.lanzout.com.0b8ffbb9.cdnhwc8.cn	hcdnw101.sme.cdnhwcibv122.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	hcdnw101.sme.cdnhwcibv122.com		120.52.95.234	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	hcdnw101.sme.cdnhwcibv122.com		120.39.165.50	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	hcdnw101.sme.cdnhwcibv122.com		116.153.39.128	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	hcdnw101.sme.cdnhwcibv122.com		218.12.77.90	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	hcdnw101.sme.cdnhwcibv122.com		116.196.132.80	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	hcdnw101.sme.cdnhwcibv122.com		60.165.116.42	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	hcdnw101.sme.cdnhwcibv122.com		106.8.246.201	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	hcdnw101.sme.cdnhwcibv122.com		218.11.1.241	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	hcdnw101.sme.cdnhwcibv122.com		221.229.162.62	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	hcdnw101.sme.cdnhwcibv122.com		223.247.106.57	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	hcdnw101.sme.cdnhwcibv122.com		218.60.101.80	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	hcdnw101.sme.cdnhwcibv122.com		61.54.86.137	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:55.138062000 CEST	1.1.1.1	192.168.2.4	0x311b	No error (0)	hcdnw101.sme.cdnhwcibv122.com		106.225.240.24	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	wwod.lanzout.com	0b8ffbb9.lanzout.com.0b8ffbb9.cdnhwc8.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	0b8ffbb9.lanzout.com.0b8ffbb9.cdnhwc8.cn	hcdnw101.sme.cdnhwcibv122.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	hcdnw101.sme.cdnhwcibv122.com		218.60.101.80	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	hcdnw101.sme.cdnhwcibv122.com		116.153.39.128	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	hcdnw101.sme.cdnhwcibv122.com		106.8.246.201	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	hcdnw101.sme.cdnhwcibv122.com		106.225.240.24	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	hcdnw101.sme.cdnhwcibv122.com		60.165.116.42	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	hcdnw101.sme.cdnhwcibv122.com		61.54.86.137	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	hcdnw101.sme.cdnhwcibv122.com		218.11.1.241	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	hcdnw101.sme.cdnhwcibv122.com		221.229.162.62	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	hcdnw101.sme.cdnhwcibv122.com		120.39.165.50	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	hcdnw101.sme.cdnhwcibv122.com		120.52.95.234	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	hcdnw101.sme.cdnhwcibv122.com		116.196.132.80	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	hcdnw101.sme.cdnhwcibv122.com		218.12.77.90	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.095232964 CEST	1.1.1.1	192.168.2.4	0x3168	No error (0)	hcdnw101.sme.cdnhwcibv122.com		223.247.106.57	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.234103918 CEST	1.1.1.1	192.168.2.4	0x2dd6	No error (0)	pan.baidu.com	yiyun.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:56.234103918 CEST	1.1.1.1	192.168.2.4	0x2dd6	No error (0)	yiyun.n.shifen.com		124.237.208.37	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.234103918 CEST	1.1.1.1	192.168.2.4	0x2dd6	No error (0)	yiyun.n.shifen.com		36.110.192.103	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.587466002 CEST	1.1.1.1	192.168.2.4	0x658b	No error (0)	pan.baidu.com	yiyun.n.shifen.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:56.591773033 CEST	1.1.1.1	192.168.2.4	0xdad7	No error (0)	wwod.lanzout.com	0b8ffbb9.lanzout.com.0b8ffbb9.cdnhwc8.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:56.591773033 CEST	1.1.1.1	192.168.2.4	0xdad7	No error (0)	0b8ffbb9.lanzout.com.0b8ffbb9.cdnhwc8.cn	hcdnw101.sme.cdnhwcibv122.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:56.636316061 CEST	1.1.1.1	192.168.2.4	0xab9f	No error (0)	weixin.qq.com	minorshort.weixin.qq.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:56.636316061 CEST	1.1.1.1	192.168.2.4	0xab9f	No error (0)	minorshort.weixin.qq.com		43.129.254.124	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:56.636316061 CEST	1.1.1.1	192.168.2.4	0xab9f	No error (0)	minorshort.weixin.qq.com		43.154.254.90	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:57.640439987 CEST	1.1.1.1	192.168.2.4	0xea59	No error (0)	weixin.qq.com	minorshort.weixin.qq.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:28:57.640439987 CEST	1.1.1.1	192.168.2.4	0xea59	No error (0)	minorshort.weixin.qq.com		43.154.254.90	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:57.640439987 CEST	1.1.1.1	192.168.2.4	0xea59	No error (0)	minorshort.weixin.qq.com		43.129.254.124	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:59.284954071 CEST	1.1.1.1	192.168.2.4	0xcc85	No error (0)	wechat.com		43.154.240.170	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:28:59.284954071 CEST	1.1.1.1	192.168.2.4	0xcc85	No error (0)	wechat.com		43.155.124.49	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:00.411206961 CEST	1.1.1.1	192.168.2.4	0x6cff	No error (0)	wechat.com		43.155.124.49	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:00.411206961 CEST	1.1.1.1	192.168.2.4	0x6cff	No error (0)	wechat.com		43.154.240.170	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:03.483422995 CEST	1.1.1.1	192.168.2.4	0x316f	No error (0)	www.wechat.com	newcomm.wechat.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:29:03.483422995 CEST	1.1.1.1	192.168.2.4	0x316f	No error (0)	newcomm.wechat.com		43.153.248.110	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:03.483422995 CEST	1.1.1.1	192.168.2.4	0x316f	No error (0)	newcomm.wechat.com		43.159.18.10	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	newres.wechat.com	newres.wechat.com.cdn.dnsv1.com.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	newres.wechat.com.cdn.dnsv1.com.cn	41jhoui9.ovslegodl.sched.ovscdns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.183.74	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		101.33.20.140	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		101.33.21.91	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.136.177	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.2.199	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.175.186.87	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		101.33.20.98	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.2.190	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.136.170	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		101.33.20.93	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		101.33.20.163	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.2.154	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.2.243	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		101.33.20.175	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:05.591650963 CEST	1.1.1.1	192.168.2.4	0xcd60	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		211.152.148.223	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	newres.wechat.com	newres.wechat.com.cdn.dnsv1.com.cn		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	newres.wechat.com.cdn.dnsv1.com.cn	41jhoui9.ovslegodl.sched.ovscdns.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		101.33.21.91	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		211.152.148.223	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.136.170	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		101.33.20.175	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.2.154	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.2.199	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.2.190	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		101.33.20.163	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.175.186.87	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		101.33.20.93	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.183.74	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.2.243	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		101.33.20.98	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		101.33.20.140	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.054580927 CEST	1.1.1.1	192.168.2.4	0x4d85	No error (0)	41jhoui9.ovslegodl.sched.ovscdns.com		43.152.136.177	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.847006083 CEST	1.1.1.1	192.168.2.4	0x32b7	No error (0)	support.wechat.com	sgminorshort.wechat.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:29:07.847006083 CEST	1.1.1.1	192.168.2.4	0x32b7	No error (0)	sgminorshort.wechat.com		43.159.26.129	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:07.847006083 CEST	1.1.1.1	192.168.2.4	0x32b7	No error (0)	sgminorshort.wechat.com		101.32.133.53	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:09.569005013 CEST	1.1.1.1	192.168.2.4	0xc91b	No error (0)	support.wechat.com	sgminorshort.wechat.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 13, 2024 05:29:09.569005013 CEST	1.1.1.1	192.168.2.4	0xc91b	No error (0)	sgminorshort.wechat.com		43.159.26.129	A (IP address)	IN (0x0001)	false
Oct 13, 2024 05:29:09.569005013 CEST	1.1.1.1	192.168.2.4	0xc91b	No error (0)	sgminorshort.wechat.com		101.32.133.53	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

weixin.qq.com

otelrules.azureedge.net

wechat.com

www.wechat.com

https:

newres.wechat.com

support.wechat.com

www.yishimei.cn

sdk.51.la

collect-v6.51.la

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49732	116.255.154.157	80	7256	C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:30.220478058 CEST	92	OUT	GET /go/DragonKMS/DragonKMS.html HTTP/1.1 Host: www.yishimei.cn Connection: Keep-Alive
Oct 13, 2024 05:28:31.350528002 CEST	581	IN	HTTP/1.1 200 OK Content-Length: 333 Content-Type: text/html Last-Modified: Wed, 09 Oct 2024 03:00:55 GMT Accept-Ranges: bytes ETag: "c546475f719db1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:29 GMT Data Raw: 3c 61 70 70 56 65 72 73 69 6f 6e 3e 44 72 61 67 6f 6e 4b 4d 53 20 76 32 34 2e 31 30 2e 30 33 3c 2f 61 70 70 56 65 72 73 69 6f 6e 3e 0d 0a 3c 6b 6d 73 48 6f 73 74 3e 34 33 2e 31 35 34 2e 31 31 32 2e 32 39 3c 2f 6b 6d 73 48 6f 73 74 3e 0d 0a 3c 6b 6d 73 32 48 6f 73 74 3e 34 33 2e 31 35 34 2e 31 31 32 2e 32 39 3c 2f 6b 6d 73 32 48 6f 73 74 3e 0d 0a 3c 6b 6d 73 33 48 6f 73 74 3e 34 37 2e 31 30 32 2e 32 30 33 2e 39 30 3c 2f 6b 6d 73 33 48 6f 73 74 3e 0d 0a 3c 6b 6d 73 34 48 6f 73 74 3e 31 34 2e 32 31 32 2e 32 32 37 2e 35 31 3c 2f 6b 6d 73 34 48 6f 73 74 3e 0d 0a 3c 6b 6d 73 35 48 6f 73 74 3e 31 35 34 2e 39 31 2e 31 39 36 2e 31 37 36 3c 2f 6b 6d 73 35 48 6f 73 74 3e 0d 0a 3c 77 65 62 50 61 67 65 31 3e 68 74 74 70 3a 2f 2f 77 77 77 2e 79 69 73 68 69 6d 65 69 2e 63 6e 2f 63 6f 6d 70 75 74 65 72 2f 31 34 34 2e 68 74 6d 6c 3c 2f 77 65 62 50 61 67 65 31 3e 0d 0a 3c 77 65 62 50 61 67 65 32 3e 68 74 74 70 3a 2f 2f 77 77 77 2e 79 69 73 68 69 6d 65 69 2e 63 6e 3c 2f 77 65 62 50 61 67 65 32 3e 0d 0a Data Ascii: <appVersion>DragonKMS v24.10.03</appVersion><kmsHost>43.154.112.29</kmsHost><kms2Host>43.154.112.29</kms2Host><kms3Host>47.102.203.90</kms3Host><kms4Host>14.212.227.51</kms4Host><kms5Host>154.91.196.176</kms5Host><webPage1>http://www.yishimei.cn/computer/144.html</webPage1><webPage2>http://www.yishimei.cn</webPage2>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	116.255.154.157	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:37.097104073 CEST	456	OUT	GET /network/319.html?=23:28:29 HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:41.161815882 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 3349 Content-Type: text/html Content-Encoding: gzip Last-Modified: Thu, 03 Oct 2024 14:22:28 GMT Accept-Ranges: bytes ETag: "0eac2ac9f15db1:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:38 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b4 5a fb 53 db 56 f6 ff 39 9d e9 ff a0 6a 67 be b3 3b 89 2c 3f 80 00 c1 ee 37 21 69 37 2d 69 b2 0d 6d b7 fb 0b 23 5b c2 16 c8 92 22 c9 3c ba bb 1d 20 50 4c 78 26 e5 11 1e 79 b6 90 6c 12 ec b4 79 11 cc 63 66 ff 95 fa 4a f6 4f fd 17 f6 5c 5d 09 64 63 88 4d 27 9e 41 b6 ae ee 3d f7 73 ce f9 9c 73 cf bd e2 f7 dc 6e cb 47 e7 2f b7 b6 7f 7b e5 02 95 30 92 12 75 e5 ab 73 6d 17 5b 29 9a 61 d9 6f 42 ad 2c 7b be fd 3c f5 f7 bf b6 5f 6a a3 02 3e 3f d5 ae 71 b2 2e 1a a2 22 73 12 cb 5e f8 82 a6 e8 84 61 a8 cd 2c db db db eb eb 0d f9 14 2d ce b6 7f c9 f6 61 59 01 3c d8 f9 c9 18 9e 91 3e de e0 e9 c8 87 1f b4 d8 33 f6 25 25 59 0f 57 90 13 68 6a 6a 22 c3 69 dc a9 59 e2 e4 78 98 fe 2e c1 b4 c2 bc de 1b 5b 94 c0 f1 f0 7d a2 25 29 18 1c 85 85 31 c2 b5 94 d8 13 a6 5b 15 d9 10 64 83 69 ef 57 05 9a 8a 91 bb 30 6d 08 7d 06 8b 85 9f a1 62 09 4e d3 05 23 9c 32 3a 99 46 9a 3d 5a 4c 1b 4c 9c e2 e2 5e 51 0e 24 cf 40 99 4b 0a 61 ba 47 14 7a 55 45 33 3c 5d 7b 45 de 48 84 79 a1 47 8c 09 8c 7d 73 8a 12 [TRUNCATED] Data Ascii: ZSV9jg;,?7!i7-im#["< PLx&ylycfJO\]dcM'A=ssnG/{0usm[)aoB,{<_j>?q."s^a,-aY<>3%%YWhjj"iYx.[}%)1[diW0m}bN#2:F=ZLL^Q$@KaGzUE3<]{EHyG}se'1z00G01.2H)`4D3(JSEM=BfA%sU9#p5DC"_V[2(KpiN7\|-W4KT>ouYw;XoZsnz<2o+?`k3E:P-,R^cb{)Da%2oX/rVf+`l:hlvt!bx!t{f$S yQ`f/$&HaZ7%AOhU@D_LftUM}1]q:x vbh)"4A$CdLlg$Gcv>\)<XM 'dS@HMGBQ;0"uq=@GZL1p7;).P!QD-Qb$NC<sVh[ND'O+i<$%}x
Oct 13, 2024 05:28:41.161842108 CEST	1236	IN	Data Raw: c9 40 47 ca a2 b7 85 e5 40 c9 44 c0 95 18 dc 93 78 35 15 75 84 fe e1 f0 86 09 82 44 0f 16 14 38 a0 d1 17 5c cf 39 4e 23 ab 60 28 82 b2 5b 85 f4 13 18 12 c2 0d 29 09 5f 25 b1 76 cd 8a 6b f3 c5 07 af 88 7e 30 be 3a 29 40 3a 35 05 21 e7 b3 57 ed 08 Data Ascii: @G@Dx5uD8\9N#`([)_%vk~0:)@:5!WQk)dnWb\DUSL\[ ]/<8Q>yp>]oF3%JiHsqare!oEJb{{=@X\(.t#(v+@i{-W}SP
Oct 13, 2024 05:28:41.161858082 CEST	448	IN	Data Raw: 2e bf cc 6f 4c a2 ec 5b e7 20 60 70 29 9f cb e5 b7 e7 f2 bb 19 73 f6 ed f7 07 a7 39 82 94 c5 85 4c f1 e1 6d 34 3d 59 5c 83 1c b9 e4 12 3c 26 ff ff b5 6b 18 36 4e 85 6b 43 b0 de 13 1b 14 76 47 ed 7d f3 7a 71 70 14 a5 9f 93 d1 c4 48 85 ec 1a 7a be Data Ascii: .oL[ `p)s9Lm4=Y\<&k6NkCvG}zqpHzmNOv`aE!ZX_\Nr'4sy~LS\a<"(_2Sdi%9Je!~(CC.S^xhkhTP~s0Tn.M
Oct 13, 2024 05:28:41.470573902 CEST	725	IN	Data Raw: bb 5a a1 44 34 4e ba 72 f1 29 b4 67 63 85 8b 59 36 d1 50 71 53 e5 ad bf c7 8f ac bf f1 ee e8 f8 15 f8 31 f6 56 f6 7e d5 05 92 d4 e3 94 a1 71 b1 ee 28 fc d1 ce 21 be fb d0 88 e2 77 19 74 2d a7 47 7b ac 09 1e e3 f4 e8 e0 ce 8e 91 b9 1e 8c 0a f2 50 Data Ascii: ZD4Nr)gcY6PqS1V~q(!wt-G{P~c7nx5Nx2zykWH(\|hkLAf=\2M>'SAHo*l?.V;tA}&(3!?PnwZAv^+eUvj5
Oct 13, 2024 05:28:41.476336956 CEST	347	OUT	GET /script/ad_search.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:41.885533094 CEST	868	IN	HTTP/1.1 200 OK Content-Length: 558 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Thu, 28 Jul 2022 18:01:34 GMT Accept-Ranges: bytes ETag: "0d3be12aca2d81:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:39 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b4 94 cf 6e 13 31 10 c6 ef 48 bc 83 e9 25 70 d8 35 51 2f b4 50 0e 24 95 40 2a 50 a1 20 40 8a 84 bc f6 6c 6c ea b5 17 7b 36 7f fa 14 3c 00 27 9e 81 1b 07 de 06 8e bc 02 e3 a4 34 29 c9 ae 44 24 f6 b4 9e f1 f7 9b 19 cf d8 bf be 7d 57 5e 36 15 38 cc 67 c1 20 58 77 f7 e0 d1 9d e1 cb c1 e8 dd f9 29 d3 58 59 76 fe fa c9 d9 b3 01 1b f7 32 ce df 1c 0e 38 1f 8e 86 ec ed d3 d1 f3 33 d6 cf ef b3 51 10 2e 1a 34 de 09 cb f9 e9 8b 71 8f b6 6a c4 fa 98 f3 d9 6c 96 cf 0e 73 1f 26 7c f4 8a cf 13 ae 9f e4 57 bf 19 6e 68 73 85 6a dc 7b 7c 70 ef e1 ed 5b 3b 72 5a a6 62 85 9b 9c 8c 7b 97 3a 1b a4 38 f3 ca 1e 6f 9b 5c 3c d9 95 40 ff e8 e8 68 15 b7 2b 0a 08 d5 ea b4 c6 5d b0 00 96 f0 11 17 16 a2 06 40 8a 19 60 fa b7 49 07 28 6f 66 b1 30 51 9b 0a 4c 2e 1d 47 0d 15 44 fe 21 8b 75 30 6e c2 a3 6f 82 04 be 24 e4 32 c6 5c c4 9a 20 b8 a8 81 20 08 73 e4 64 25 4b 05 ca 88 14 4b 06 00 d7 51 07 ef 2c a4 f0 6a d1 ea 54 66 ca a4 15 31 9d 62 a1 64 cc a4 77 28 8c 83 d0 11 6f 4b 54 91 82 ad e4 16 44 28 cd 9c [TRUNCATED] Data Ascii: n1H%p5Q/P$@*P @ll{6<'4)D$}W^68g Xw)XYv283Q.4qjls&\|Wnhsj{\|p[;rZb{:8o\<@h+]@`I(of0QL.GD!u0no$2\ sd%KKQ,jTf1bdw(oKTD(7JX"._+n8jtK],9vBi]R0SIlj@PCME5IS[i_2`\ sJj+&[l+9mU_VRXM2l:-_wFG2Z_qSO~^HOpv+<=+Gv
Oct 13, 2024 05:28:41.887777090 CEST	442	OUT	GET /themes/j-spring/style/j-spring.css HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.yishimei.cn/themes/j-spring/source/style.css.asp Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:42.292771101 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 3855 Content-Type: text/css Content-Encoding: gzip Last-Modified: Wed, 12 Jun 2019 10:00:01 GMT Accept-Ranges: bytes ETag: "80666e99521d51:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:39 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc 3c 5b 8f db c6 d5 cf 36 e0 ff 30 f5 22 40 63 ac 64 92 22 b5 12 fd 64 ef c5 df 4b 8a 20 0e 0a f4 c9 a0 44 6a c5 98 22 55 8a f2 ee 66 b1 40 da dc 9c 4b d3 00 6e 52 b8 48 91 26 45 5a 03 69 eb a0 68 11 a0 49 9d 3f 53 ed da 4f f9 0b df dc 39 37 8a 94 bc 01 42 05 1b 89 9c 39 73 e6 cc b9 9f 43 7f ff cd 77 83 2c 3c 3a be 74 f1 c2 24 c8 f7 e3 d4 b7 ae c1 ef d3 20 0c e3 74 9f fc 18 66 49 96 fb 1b 16 be d0 8d 51 96 16 ad 59 fc 6a e4 db 9d e9 21 bc 03 e8 85 1f 8c 82 49 9c 1c f9 e0 f2 0b f1 30 cf 66 d9 a8 00 bf 08 fe 2f 8a 2f 6f 5e 5e fc e3 bd ff fd f7 3e fc 72 3d 8f 83 04 fe 7f 16 a4 b3 d6 2c ca e3 d1 65 04 78 10 0c ef ec e7 d9 3c 0d fd 8d 91 15 0d 23 0b cc f3 e4 a7 97 5f 69 cd a6 39 c4 e7 ea 60 df 69 ef c3 c1 cf 83 3c 9a 46 41 d1 3a 04 45 36 bd 06 e0 dc 22 3a 2c 5a 41 12 ef a7 fe 30 4a 8b 28 87 00 4f 2e 5d 0c 8e d9 b3 30 1a 66 79 50 c4 59 ea 83 34 4b 23 fa dc 4f e2 f4 0e 38 e6 fb 04 1b ee ae 75 dd ee b0 c7 77 e3 59 5c 44 a1 34 a2 bb 65 ed da d7 d9 88 71 76 37 ca a5 e7 7b 7b 5b [TRUNCATED] Data Ascii: <[60"@cd"dK Dj"Uf@KnRH&EZihI?SO97B9sCw,<:t$ tfIQYj!I0f//o^^>r=,ex<#_i9`i<FA:E6":,ZA0J(O.]0fyPY4K#O8uwY\D4eqv7{{[=J[-\|`Xw54/g<$jGO3 8uakGDNI\|<=~>2v1O@\|6=,CxX.f$$lh{{(>X\|0R,NI +Kxy@PglPI6#?5+-ZGU+W/]I9yyZc&G~'Oy^5LyI=uGn/@r&Q\(tjFj(C:PSCF?h2NXy&bFh}$q?cmw]!rTt\?9w/m4RG-o}}4blMO;`-Q3m+(;#K^h+[d4T\|1Z}o;Nm*NbxRFSr34%}~
Oct 13, 2024 05:28:42.292802095 CEST	1236	IN	Data Raw: 91 34 a7 ab ea fa 92 f1 96 a8 24 cc 4b 15 8a f0 82 a8 7a 83 38 2d 17 db ea c8 aa 10 29 42 4d 1b c2 c5 81 72 ad 67 2a 34 44 6e de ac 46 c5 d3 1d 24 80 ee 79 e4 5e e5 f2 46 42 18 d6 bf 81 35 d8 0f 68 15 b6 0c 46 c1 ed a1 8f 66 32 6f 13 75 6a d6 8c Data Ascii: 4$Kz8-)BMrg*4DnF$y^FB5hFf2ouj'"X36B\Wj{Ud`kvRfrF( bKsaa!Kt[9/"aC2biU3TAMvh 2Yd[[7oV3+
Oct 13, 2024 05:28:42.292814016 CEST	1236	IN	Data Raw: 01 a5 4f 61 86 ed d4 c3 76 d6 85 dd a9 87 dd 59 17 b6 5b 0f db 5d 17 b6 57 0f db 5b 0a 7b 19 f0 6e 3d f0 ee ba 88 6f d5 c3 de 5a 17 76 af 1e 76 6f 5d d8 fd 7a d8 fd 75 61 db 56 03 e9 b1 d6 86 de 44 36 d7 16 4e bb 81 74 da 0d c4 13 99 fd 83 ea 62 Data Ascii: OavY[]W[{n=oZvvo]zuaVD6Ntb^7*ukZGuE<"{^ES$<RM%:JW3fM5=g,}W%W;G/5FV,E[IBsI{2=S21Ej=q&Z<&Q>u+NTTL@
Oct 13, 2024 05:28:42.292828083 CEST	442	IN	Data Raw: 4b d9 8f c6 4a 62 84 ea fc 67 19 b8 94 7d 63 f8 1d 24 e8 40 05 c3 08 0d 3c c8 83 29 ef 1c 44 3f d0 4d 5a 59 e7 9b 55 03 76 fe b2 2f 51 3b 2c 2a 62 2a a7 ec a8 e2 dd 6d 0c a3 49 9c 6a b7 ca 7e 37 69 98 7a 4f 09 7c 69 35 17 12 6d 1c 84 68 8b bc 2c Data Ascii: KJbg}c$@<)D?MZYUv/Q;,bmIj~7izO\|i5mh,)B!^2(>j\Vm u{@oHMEJer/TnN_e?#,<kQeT>X[(#-N5rB(3C,1SBrA
Oct 13, 2024 05:28:42.294646025 CEST	344	OUT	GET /script/tj-top.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:42.699525118 CEST	606	IN	HTTP/1.1 200 OK Content-Length: 296 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Mon, 26 Aug 2024 16:39:34 GMT Accept-Ranges: bytes ETag: "0672488d6f7da1:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:40 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 54 cd bf 4a c3 40 00 c7 f1 bd d0 77 28 19 8a 16 cc 25 e9 3f a3 69 5c 7c 81 e2 1a 90 d8 46 2e 36 ff ef f4 28 38 58 a4 20 a5 38 89 d4 52 50 a4 82 d0 d2 0e e2 60 5a cc cb e4 2e 3a e5 15 8c ba e8 f2 83 ef f2 f9 a5 ab 08 94 f2 b9 b6 db 3a b5 0d 07 f3 24 30 b1 61 39 1b 9c 02 2b 85 96 a5 23 d4 d0 38 cf 45 78 ab ad 63 43 e3 54 36 7f fc 88 ae e9 e0 81 f6 9f d8 64 9e cc ee e8 62 c4 6e df 24 41 10 e2 30 6c 36 e3 70 ca 5e 7b c9 fb 34 5d 8f 15 bd 00 03 e3 38 23 20 c6 1e da 01 e0 c4 e7 7d 9f 6f b9 36 d8 3b 24 67 0d 51 90 ea c5 4e a3 da 6d 4b 07 fb 72 c6 57 b7 e5 7a ad 26 d7 2b 0a d0 d5 a2 73 84 bc dd df 3d ff 1b ff dd 8c 25 84 f0 5d 13 41 d3 36 4c 51 2a ff 1c 38 06 26 6e d0 01 a2 5c e5 21 b6 ad 4c a7 d1 ec f3 e2 3e 79 7e a1 8b 71 ba 1e d2 e9 38 99 2d d9 cd 92 0d 7b 59 b2 c9 55 bc 1a 95 05 da bf fc 7e 57 34 00 2b 2a b7 99 cf 95 c0 d7 00 91 dd 64 5a 27 01 00 00 Data Ascii: TJ@w(%?i\\|F.6(8X 8RP`Z.::$0a9+#8ExcCT6dbn$A0l6p^{4]8# }o6;$gQNmKrWz&+s=%]A6LQ8&n\!L>y~q8-{YU~W4+dZ'
Oct 13, 2024 05:28:43.948064089 CEST	459	OUT	GET /image/beian.png HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:44.354069948 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 19256 Content-Type: image/png Last-Modified: Wed, 30 Jan 2019 02:59:21 GMT Accept-Ranges: bytes ETag: "19d6bbcc47b8d41:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:41 GMT Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 3e 05 00 d8 a9 93 dc 17 00 d8 a2 1c a9 08 00 8d 01 00 99 28 47 24 02 40 bb 00 60 55 81 52 2c 02 c0 c2 00 a0 ac 40 22 2e 04 c0 ae 01 80 59 b6 32 47 02 80 bd [TRUNCATED] Data Ascii: PNGIHDRpHYsMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I>(G$@`UR,@".Y2GvX@`B, 8C L0_pHK3w!lBa)f"#HL8?flko">!N_puk[Vh]3Zzy8@P<%b0>3o~@zq@qanvRB1n#)4\,XP"MyRD!2wONl~Xv@~-g42y@+\LD*AaD@$<BAT:18\p`Aa!:b""aH4 Q"rBj]H#-r9\@ 2G1Qu@st4]k=Kut}c1fa\E`X&cX5V5cX7va$^lGXLXC%#W1'"O%zxb:XF&!!%^'_H$N!%2IIkHH-S>
Oct 13, 2024 05:28:44.354082108 CEST	224	IN	Data Raw: 10 69 9c 4c 26 eb 90 6d c9 de e4 08 b2 80 ac 20 97 91 b7 90 0f 90 4f 92 fb c9 c3 e4 b7 14 3a c5 88 e2 4c 09 a2 24 52 a4 94 12 4a 35 65 3f e5 04 a5 9f 32 42 99 a0 aa 51 cd a9 9e d4 08 aa 88 3a 9f 5a 49 6d a0 76 50 2f 53 87 a9 13 34 75 9a 25 cd 9b Data Ascii: iL&m O:L$RJ5e?2BQ:ZImvP/S4u%C-igih/tEkwHb(k{/LT02goUX**\|:V~TUsU?yTU^V}FUPU6RwRPQ__
Oct 13, 2024 05:28:44.354187012 CEST	1236	IN	Data Raw: 82 fa 63 0d b2 86 85 46 a0 86 48 a3 54 63 b7 c6 19 8d 21 16 c6 32 65 f1 58 42 d6 72 56 03 eb 2c 6b 98 4d 62 5b b2 f9 ec 4c 76 05 fb 1b 76 2f 7b 4c 53 43 73 aa 66 ac 66 91 66 9d e6 71 cd 01 0e c6 b1 e0 f0 39 d9 9c 4a ce 21 ce 0d ce 7b 2d 03 2d 3f Data Ascii: cFHTc!2eXBrV,kMb[Lvv/{LSCsfffq9J!{--?-jf~7zbrup@,:m:u6Qu>cyGm7046l18cckihhI'&g5x>fob4ek<abi2)kft,
Oct 13, 2024 05:28:44.354211092 CEST	1236	IN	Data Raw: f7 4c fc 99 6b 5d 51 5d bd 67 43 cf 9e 3f 17 74 ee 4c b7 5f f7 c9 f3 de e7 8f 5d f0 bc 70 f4 22 f7 62 db 25 b7 4b ad 3d ae 3d 47 7e 70 fd e1 48 af 5b 6f eb 65 f7 cb ed 57 3c ae 74 f4 4d eb 3b d1 ef d3 7f fa 6a c0 d5 73 d7 f8 d7 2e 5d 9f 79 bd ef Data Ascii: Lk]Q]gC?tL_]p"b%K==G~pH[oeW<tM;js.]yn&%vwL]zxem``YGG#F#d~VysKXyr:#y=}(@PcO
Oct 13, 2024 05:28:44.354223967 CEST	1236	IN	Data Raw: 30 2b 30 38 3a 30 30 3c 2f 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3e 78 6d 70 2e 69 69 64 3a 38 30 62 63 61 39 38 35 2d 34 66 39 62 2d 36 65 34 64 2d 39 66 63 Data Ascii: 0+08:00</xmp:ModifyDate> <xmpMM:InstanceID>xmp.iid:80bca985-4f9b-6e4d-9fc9-e8f49267df4e</xmpMM:InstanceID> <xmpMM:DocumentID>adobe:docid:photoshop:eddae80c-8770-11e5-849a-bcfda6028f2e</xmpMM:DocumentID> <xmpMM:Origin
Oct 13, 2024 05:28:45.487183094 CEST	490	OUT	GET /themes/j-spring/style/j-spring/bgw.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/themes/j-spring/style/j-spring.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ
Oct 13, 2024 05:28:45.918880939 CEST	370	IN	HTTP/1.1 200 OK Content-Length: 121 Content-Type: image/gif Last-Modified: Mon, 08 Sep 2014 19:04:10 GMT Accept-Ranges: bytes ETag: "8d613eac97cbcf1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:43 GMT Data Raw: 47 49 46 38 39 61 f2 03 01 00 b3 00 00 9f 9f 91 ab aa 9b d9 d8 c5 90 90 83 eb eb eb cd cc ba db db db c1 c0 af f3 f3 f3 ba b9 a8 eb ea d6 dc db c8 d1 d0 be ff ff ff 00 00 00 00 00 00 2c 00 00 00 00 f2 03 01 00 00 04 2e 50 ad 92 02 20 2d eb cd bb ff 60 28 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 d8 31 0c 00 81 03 43 10 01 00 3b Data Ascii: GIF89a,.P -`(dihlp,tmx\|p1C;
Oct 13, 2024 05:28:45.922996998 CEST	494	OUT	GET /themes/j-spring/style/j-spring/nav_bg1.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/themes/j-spring/style/j-spring.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ
Oct 13, 2024 05:28:46.329632044 CEST	438	IN	HTTP/1.1 200 OK Content-Length: 189 Content-Type: image/gif Last-Modified: Wed, 05 Dec 2012 09:06:58 GMT Accept-Ranges: bytes ETag: "d559aae1c7d2cd1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:43 GMT Data Raw: 47 49 46 38 39 61 2c 00 16 00 b3 00 00 00 00 00 ff ff ff da d7 ce e3 e0 d7 e0 dd d4 df dc d3 de db d2 dd da d1 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 08 00 2c 00 00 00 00 2c 00 16 00 00 04 6a 50 c8 49 ab 3d 23 eb cd 3b b1 20 88 75 24 f9 85 a8 34 96 6c 76 a6 e1 da 96 05 8c ca 73 57 db a0 91 b3 3b 5e c5 f7 23 05 85 13 62 91 73 44 0a 94 4b 4d 13 09 8d 0e a6 c2 6a d4 e0 a4 68 97 dc ae a4 60 dd 84 c5 e4 72 e6 dc 4d ab d9 4e 77 19 8e 94 5b e9 42 7b f4 20 1e ab 33 7c 7d 04 7f 03 81 62 83 7f 86 5d 88 6a 8a 5d 11 00 3b Data Ascii: GIF89a,!,,jPI=#; u$4lvsW;^#bsDKMjh`rMNw[B{ 3\|}b]j];

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	116.255.154.157	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:41.221647978 CEST	379	OUT	GET /themes/j-spring/source/style.css.asp HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:41.626018047 CEST	455	IN	HTTP/1.1 200 OK Cache-Control: private Date: Sun, 13 Oct 2024 03:28:39 GMT Content-Type: text/css; Charset=UTF-8 Expires: Sun, 13 Oct 2024 03:28:39 GMT Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Set-Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK; path=/ Content-Encoding: gzip Vary: Accept-Encoding Transfer-Encoding: chunked Data Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 04 00 0d 0a 34 65 0d 0a 3c c7 31 0e 80 30 08 05 d0 ab 18 27 1d 84 5d 17 ef d2 10 8b 29 95 f4 63 9a de de cd b7 bd 53 cd 9f 16 d3 db ca 32 e7 08 df 99 7b ef 34 14 59 4d 94 52 e5 c8 62 02 be 37 78 d3 7a 31 62 14 f9 4b 09 98 d7 e3 1b 00 de f8 cf ee 49 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: a4e<10'])cS2{4YMRb7xz1bKI0
Oct 13, 2024 05:28:41.664655924 CEST	351	OUT	GET /script/ad_sidebar_up.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:42.067245960 CEST	497	IN	HTTP/1.1 200 OK Content-Length: 186 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Sun, 14 Jul 2019 22:08:17 GMT Accept-Ranges: bytes ETag: "80de7ea3903ad51:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:39 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 9c cf df 0a 82 30 14 c7 f1 fb a0 77 10 6f 2c 2f 76 90 84 fe a9 bd 88 10 cb 8e db d0 6d b6 1d 19 f5 f4 49 b7 16 45 d7 e7 f7 85 cf 81 74 b9 b8 da 66 d4 68 88 05 a7 08 7b b3 8a 0b 1e 49 87 6d 59 27 92 68 38 00 84 10 d8 5d 79 a9 34 2a d6 18 30 48 c1 ba 0e b6 bb 8c 49 d2 fd a9 f4 53 5a 27 55 a1 b4 88 bc 6b 3e a7 c2 42 c7 7b c5 06 23 ea 24 82 aa 00 5e c5 eb e3 5b c6 c5 4d 83 bf 8e df 1e e8 55 8b b0 cf 37 2f fd af ee 1b d1 9c 9d c2 5f 80 c6 ea 61 24 74 90 e5 f9 ef 08 a5 b9 40 b8 7b 7d 16 0f 39 b7 3c 07 00 72 b3 af e8 ce 01 00 00 Data Ascii: 0wo,/vmIEtfh{ImY'h8]y4*0HISZ'Uk>B{#$^[MU7/_a$t@{}9<r
Oct 13, 2024 05:28:42.069061995 CEST	353	OUT	GET /script/ad_sidebar_down.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:42.471472025 CEST	434	IN	HTTP/1.1 200 OK Content-Length: 124 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Wed, 06 Mar 2019 05:06:18 GMT Accept-Ranges: bytes ETag: "081d254dad3d41:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:39 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 74 cb 41 0e 02 21 0c 00 c0 af 90 bd a0 97 36 9e 34 2e 8b 1f e1 42 10 a1 59 28 1b a8 21 fe 5e 3f e0 dc e7 d9 c2 bb 46 16 98 9d 24 16 3e 2d c6 ab dc e3 6b 73 3a 8b 1c 77 c4 39 27 7c 68 64 aa 91 20 30 72 94 d9 fa 8e d7 db 05 b2 d4 f2 d8 c6 af 3a 6d 0d d5 a4 46 0f ff 6b 6a b8 fb 42 70 70 72 5a a1 35 e8 ed 72 5e bf 03 00 94 50 90 71 85 00 00 00 Data Ascii: tA!64.BY(!^?F$>-ks:w9'\|hd 0r:mFkjBpprZ5r^Pq
Oct 13, 2024 05:28:42.473973036 CEST	490	OUT	GET /themes/j-spring/style/j-spring/bg2.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/themes/j-spring/style/j-spring.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:42.884036064 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 13656 Content-Type: image/gif Last-Modified: Wed, 05 Dec 2012 09:06:52 GMT Accept-Ranges: bytes ETag: "3cfb93ddc7d2cd1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:40 GMT Data Raw: 47 49 46 38 39 61 2d 00 f1 02 f7 00 00 00 00 00 ff ff ff f0 ec e0 f0 ed de ef ec dd e5 ee d3 e4 ed d2 e9 f2 d7 e8 f1 d6 e7 f0 d5 e6 ef d4 e3 eb d3 e8 f0 d8 e6 ee d6 e5 ed d5 e7 eb d4 e6 ea d3 e5 e9 d2 f0 f4 dd ef f3 dc ee f2 db ed f1 da eb ef d8 ea ee d7 e9 ed d6 e8 ec d5 e8 ec d3 e6 ea d1 e4 e8 cf ee f2 d9 ed f1 d8 ec f0 d7 ea ee d5 e1 e3 cb df e1 c9 e9 eb d3 e7 e9 d1 e5 e7 cf e3 e5 cd f2 f4 dc f0 f2 da ee f0 d8 ec ee d6 eb ed d5 df e1 cb e7 e9 d3 e5 e7 d1 e2 e4 ce e1 e3 cd f1 f3 dd ef f1 db ec ee d8 eb ed d7 e9 eb d5 d9 d9 c1 e3 e3 cb e1 e1 c9 df df c7 de de c6 dd dd c5 dc dc c4 ec ec d4 eb eb d3 e9 e9 d1 e6 e6 ce e4 e4 cc f4 f4 dc f2 f2 da f0 f0 d8 ee ee d6 d8 d7 c2 e1 e0 cb e0 df ca df de c9 de dd c8 dd dc c7 ea e9 d4 e9 e8 d3 e8 e7 d2 e7 e6 d1 e6 e5 d0 e5 e4 cf e4 e3 ce e3 e2 cd e2 e1 cc f4 f3 de f3 f2 dd f2 f1 dc f1 f0 db f0 ef da ef ee d9 ee ed d8 ed ec d7 ec eb d6 eb ea d5 e9 e8 d4 e7 e6 d2 e5 e4 d0 e3 e2 ce e1 e0 cc f6 f5 e0 f5 f4 df f3 f2 de f1 f0 dc ef ee da ed ec d8 eb ea d6 dc da c3 d9 [TRUNCATED] Data Ascii: GIF89a-!,-q B"y"PD^j5My6lHYxFD<=z!AsxQ7nHb:~M0!N"#p3PK, pdu+W:t,Kauj5:(>h)Y`
Oct 13, 2024 05:28:42.884062052 CEST	1236	IN	Data Raw: 63 07 e4 10 3a 41 ec f8 f0 e1 30 07 90 22 78 7a 04 c6 43 24 4f 1d 3b 51 db 20 fd a1 02 84 48 15 23 7e f8 c8 63 bb 2a 1d 3c 26 7f 10 21 58 82 36 9d 1b 6e ec 14 49 e1 63 44 d6 15 76 ea f4 98 95 4b 8e 5c 22 2b 4c 70 ff 50 01 9c 04 9d 22 73 e0 ea 58 Data Ascii: c:A0"xzC$O;Q H#~c*<&!X6nIcDvK\"+LpP"sXd=2)0xNtQ3G?!A BGDC/F\|p_t@BtyT?C%EwVpB+`)>1EB?>t8([T!eG6
Oct 13, 2024 05:28:42.884074926 CEST	448	IN	Data Raw: 13 ba 90 85 2c 64 e0 02 29 98 01 13 9a 70 0c 63 30 c3 19 7f 68 02 42 1f 50 03 0b 60 a0 05 11 e8 82 16 ac d1 0c 96 32 61 0b 5d 68 42 0d 64 c0 85 2d 2c b4 0b 5d 78 42 12 a8 10 85 26 d0 14 b0 34 45 ec 31 94 a1 87 3e 20 b6 06 34 b0 c0 05 b0 e0 05 b9 Data Ascii: ,d)pc0hBP`2a]hBd-,]xB&4E1> 4 `^i`@)e\g*. UL8B0&)m&jcX5PjJ@0p@ OdZS,`!;F!."}r!Ipm
Oct 13, 2024 05:28:42.884087086 CEST	1236	IN	Data Raw: a3 19 dc d8 06 62 57 8d 54 2e cc f7 d1 4e b8 6d 6e 77 9b 01 1a 60 20 d2 c6 00 06 36 b6 51 dc e3 26 d7 05 0f f0 6d 33 88 01 0c 76 c8 14 a1 48 45 e8 16 ae d0 05 24 20 81 bb de 05 6f 06 30 3b 66 4f 6f 23 1d e9 5d 6f 7b 21 40 62 42 f4 81 1b d8 c8 46 Data Ascii: bWT.Nmnw` 6Q&m3vHE$ o0;fOo#]o{!@bBF7Z&Rw~u:`,"ne}PAm>#tm +V=mZD+:l(dAV?P&2I;G7MNbn p+n
Oct 13, 2024 05:28:42.884097099 CEST	1236	IN	Data Raw: fb f2 2a 25 01 40 4a 41 96 81 14 2e 37 c2 2f 20 c7 97 65 d9 35 c5 88 96 c8 b8 96 f6 01 79 37 74 42 3d 70 02 76 e0 1a 92 54 94 24 52 8d 0e d2 25 12 58 40 da 38 13 7d b9 2b 80 e9 46 08 c1 1a 78 92 07 38 60 03 39 20 1b 3f 72 10 ea a8 75 29 58 28 ee Data Ascii: %@JA.7/ e5y7tB=pvT$R%X@8}+Fx8`9 ?ru)X((9yz7QCt'vIcF9' 57;i";0&wlN+Y#>c(yW1F#-q"\|G\|?&BD09`89hSr'SY;$p
Oct 13, 2024 05:28:42.884109974 CEST	1236	IN	Data Raw: 40 a6 c1 c9 3e 20 7c 20 5d 1b bd ff 63 3b c2 d2 49 82 44 32 cf 74 17 71 12 13 88 a4 b2 65 11 1c 0c eb b0 cf 81 03 76 f0 ca fc 57 94 1e 7c cb 9a c4 49 9e 34 7a a1 24 2b 00 8b c2 a5 9b 03 26 10 4e 78 57 12 2e 0c 30 b2 14 38 b5 c4 49 b8 94 4b 26 d0 Data Ascii: @> \| ]c;ID2tqevW\|I4z$+&NxW.08IK&e9QsS(2"Lw"_i^0J@M@ePI^0jLPVQ\P^1PXZYW6ZM@3 `^4hGpOpP5YglOPn]VQ)<d@%WYpF
Oct 13, 2024 05:28:42.884121895 CEST	672	IN	Data Raw: a5 96 0a 34 6e 0a da 82 ac 59 b3 64 37 1f b4 c8 70 41 86 53 2e 57 b6 28 2b 68 4d 4b 17 17 2d 30 58 d8 cb b6 c9 94 29 4f b0 74 f1 92 25 4b 62 9c 50 97 09 1b a9 b0 46 ff 0d 8b 35 56 66 d9 d2 a7 d9 b2 83 5c 9a b4 a0 71 21 42 60 9c 50 90 1c b5 c2 c4 Data Ascii: 4nYd7pAS.W(+hMK-0X)Ot%KbPF5Vf\q!B`P-^vAl6i_`.P5&5F:2E-CmQY-+,,`8"*O,xA`!&xbc 1'\`>(gC0$fiOBh4f
Oct 13, 2024 05:28:43.196520090 CEST	1236	IN	Data Raw: ba a9 0b 1a 1e e8 da 0f 66 90 31 86 9a 2e 0a 69 0d 8d 1a b0 8c ef 8f 23 6c fe 6c 5b 2e b4 98 61 a3 cf a2 78 ef 2a 2f c0 72 ed a7 16 a0 90 42 24 13 e9 20 24 73 0b 1e a0 a6 1a 63 94 31 96 89 bd bb a8 01 83 19 86 7f e0 69 29 52 9b 0e 78 d7 80 7e 00 Data Ascii: f1.i#ll[.ax/rB$ $sc1i)Rx~DkjHA=`QXVd"CBV"Uk-yym=tp0H#<'+{p)Dk~9ajK{=!XC7/J[pqRn
Oct 13, 2024 05:28:43.196536064 CEST	1236	IN	Data Raw: d6 f3 cb c1 4b 65 1b 5b 23 90 9a c8 27 4c 20 6b 54 43 3a e9 1a 6c bb ed cf 3d ec c8 b7 59 d9 84 d1 6a d1 ab 31 cb 8c 23 e1 16 a7 8c 02 77 8c 27 e6 66 44 a1 03 f4 7e 5d 69 6a eb f4 a6 5f ae 60 85 f6 e8 f0 33 d2 59 0d 11 af 66 df 03 73 84 99 5a 51 Data Ascii: Ke[#'L kTC:l=Yj1#w'fD~]ij_`3YfsZQ t,TAy<A!#b+\k4-!KYIN,b0nk<@T]tq++#/@5=s'Y<r>5)9B1r<A)c@j1u-D
Oct 13, 2024 05:28:43.196548939 CEST	448	IN	Data Raw: fc 82 30 50 52 32 8d 3b 2a ed c9 00 dd 4b 0e 05 a1 28 6d 4e 2c a1 4a 2f 45 4e f4 0c cc 46 c1 89 b0 1c 3e 22 0d 0c 94 dc d0 d9 04 4b b0 3c 4a 30 e8 cd 2c 30 83 05 ed 51 b0 5c 49 ea 0c d0 2c 40 4d 35 f0 c2 96 ec 4a 35 08 83 30 b8 3d 02 c5 4f b9 ac Data Ascii: 0PR2;*K(mN,J/ENF>"K<J0,0Q\I,@M5J50=OdL3h%I<M]M/K1I[N4K'pLQJ2R,LuAO4PLu<PMFk2,RTI<I7Jl-x`E
Oct 13, 2024 05:28:43.196711063 CEST	1236	IN	Data Raw: cd d2 4e 9b 1a 99 dd d2 cb e5 95 92 9d d9 95 84 cc 0a e5 95 8e 30 53 92 c4 d9 8d a5 52 ef 14 4b df 74 56 d7 ec 54 47 45 ca ef c4 dc 0e cd 56 ff a4 c4 5a 95 ed d1 86 b8 c9 87 4a 5c 30 e8 99 c2 f4 ca 71 35 d3 e7 cc 4f a7 9c 53 ba f4 ca 8d 3d d2 65 Data Ascii: N0SRKtVTGEVZJ\0q5OS=e-EO]LOEQ)EJki\ZpSeL3OVXuYLK=Ju[<KOeTD]IOfJ_
Oct 13, 2024 05:28:43.246589899 CEST	481	OUT	GET /upload/2024/10/202410032222066242.png HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:43.649945974 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 18489 Content-Type: image/png Last-Modified: Thu, 03 Oct 2024 14:22:06 GMT Accept-Ranges: bytes ETag: "16d1dc9f9f15db1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:40 GMT Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 eb 00 00 01 d4 08 02 00 00 00 54 33 48 4e 00 00 20 00 49 44 41 54 78 01 ed 7d 4f 68 5c 47 b6 7e e5 c7 f3 c6 1b cb 46 9b 6c d2 2d 45 b2 82 33 e0 20 bd 98 c1 6f a1 c8 0f 69 3c b1 16 b6 20 b3 10 c3 bc b6 16 51 6c b0 47 18 32 20 f3 40 08 86 34 24 20 34 16 c4 d1 2c e4 9e 30 68 31 06 39 0b 39 e3 91 78 56 b4 78 66 70 9e 4c 02 33 26 b2 14 49 9d 4d 36 26 96 37 de 78 31 bf ef d4 bf 5b f7 4f 77 df 6e 75 4b b7 bb cf 05 bb eb 7f 9d fa ce 57 a7 4e dd 6e 55 bd f2 af 7f fd 4b f0 c3 08 d4 2d 02 ff af 6e 25 67 c1 19 01 42 80 19 cc 3c a8 6f 04 98 c1 f5 ad 3f 96 9e 19 cc 1c a8 6f 04 98 c1 f5 ad 3f 96 9e 19 cc 1c a8 6f 04 98 c1 f5 ad 3f 96 3e c0 e0 cd 3f fc c7 2b ce 33 fa d7 83 40 e8 af a3 af 78 1d 2b 89 28 ae 42 ff f1 87 cd 80 4c 28 fe ca 2b 5e b2 8c ca 31 78 8d 04 6a 70 b4 81 10 08 30 98 46 f6 fe 97 f8 96 43 3e 5f 8a 77 5f 71 c8 74 00 c3 fe eb 68 e7 d8 cf 20 cf ec 2f 55 e7 a7 4f 8b bf dc f5 51 78 f3 0f bf ff a3 27 18 e8 fb ae d0 f2 6f 9c f8 3d 73 d8 83 a6 51 43 [TRUNCATED] Data Ascii: PNGIHDRT3HN IDATx}Oh\G~Fl-E3 oi< QlG2 @4$ 4,0h199xVxfpL3&IM6&7x1[OwnuKWNnUK-n%gB<o?o?o?>?+3@x+(BL(+^1xjp0FC>_w_qth /UOQx'o=sQCmL$~+12l~_?lUaq(`N-ulp8nF#w,&} :A1[O_;n;&?R~qj?ig?j;MV,;90cew;An_~a0!lp':PwSE.=:im@C?e-&l}SM0"Yjt!KYi{1fE%aL;I<?`\X44_"kQP^eZ=qzfqx}I =pAPa`^'>9^oD0XrorHY`rF_/B`i'@\-DIvotrpx^cKZI666xvW[OC\!Pmw)tmk0U@H#P"2UA
Oct 13, 2024 05:28:44.123414040 CEST	407	OUT	GET /script/ad_article_pic.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:44.526731968 CEST	262	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: application/x-javascript Last-Modified: Sun, 12 Feb 2017 06:47:12 GMT Accept-Ranges: bytes ETag: "7043ebd6fb84d21:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:41 GMT
Oct 13, 2024 05:28:45.488187075 CEST	494	OUT	GET /themes/j-spring/style/j-spring/toppicw.jpg HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/themes/j-spring/style/j-spring.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ
Oct 13, 2024 05:28:45.917841911 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 35772 Content-Type: image/jpeg Last-Modified: Mon, 08 Sep 2014 19:04:13 GMT Accept-Ranges: bytes ETag: "4729e9ad97cbcf1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:43 GMT Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 88 03 e6 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 [TRUNCATED] Data Ascii: JFIF``"ExifMMDucky<CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?L@[n>m6+PnU$swz^{(FH!u=F5RTOS4x=cm9Ov;H[=,W]ioP><DvhQv1C7;Cynp9sk-urFc,p8=#jo7&$'\1U{)iblM3iKaVe867?j-%k0M&~1mo_KQB>a
Oct 13, 2024 05:28:46.562892914 CEST	860	OUT	GET /themes/j-spring/style/j-spring/bg_bottom.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/themes/j-spring/style/j-spring.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:46.966439962 CEST	592	IN	HTTP/1.1 200 OK Content-Length: 345 Content-Type: image/gif Last-Modified: Wed, 05 Dec 2012 09:06:52 GMT Accept-Ranges: bytes ETag: "dd14dec7d2cd1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:45 GMT Data Raw: 47 49 46 38 39 61 02 00 46 00 d5 00 00 4c 4c 4c 05 05 05 3d 3d 3d 13 13 13 25 25 25 0e 0e 0e 39 39 39 42 42 42 00 00 00 49 49 49 0a 0a 0a 7f 7f 7f 46 46 46 29 27 28 19 19 19 4a 4a 4a 38 38 38 29 24 26 18 18 18 33 32 33 2e 2e 2e 22 22 22 21 21 21 21 22 20 8b 8b 8b 3a 3a 3a 24 23 24 1b 1b 1b 20 20 1f 44 44 44 11 11 11 14 12 13 28 2a 2a 68 68 68 2b 2b 2b 29 29 29 1d 1e 1b 30 31 31 23 23 23 28 28 28 43 43 43 16 16 17 4b 4b 4b 10 10 10 25 23 24 4d 4d 4d 27 2f 2c 19 1e 1a 36 36 36 09 09 09 40 40 40 34 34 34 14 14 14 3b 3b 3b 45 45 45 0b 0b 0b 1d 1d 1d 27 27 27 1e 1e 1e 48 48 48 32 32 32 07 07 07 12 12 12 06 06 06 21 f9 04 00 00 00 00 00 2c 00 00 00 00 02 00 46 00 00 06 76 40 40 0b 00 50 3d 12 3b e4 6e c7 b0 39 51 8c 43 e7 70 90 59 05 02 59 4d 50 ab 65 0c 06 08 04 46 9e 99 79 68 de a4 54 a2 b8 dc 22 90 28 37 6a 9c 1a b9 3c 81 a0 31 b1 2a 11 16 17 3a 2f 38 24 38 1c 38 38 3a 34 3a 2b 1b 29 8d 3e 29 3e 1e 3e 1f 3e 3e 03 3e 34 99 03 05 05 37 31 37 0a a4 31 31 3f 3d 01 aa 3d ad 3f af b0 01 3f 08 08 0e 12 21 21 [TRUNCATED] Data Ascii: GIF89aFLLL===%%%999BBBIIIFFF)'(JJJ888)$&323..."""!!!!" :::$#$ DDD(*hhh+++)))011###(((CCCKKK%#$MMM'/,666@@@444;;;EEE'''HHH222!,Fv@@P=;n9QCpYYMPeFyhT"(7j<1:/8$888:4:+)>)>>>>>471711?==??!!A;
Oct 13, 2024 05:28:54.707828045 CEST	819	OUT	GET /favicon.ico HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:55.111666918 CEST	1236	IN	HTTP/1.1 404 Not Found Content-Length: 1780 Content-Type: text/html Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:52 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e e6 82 a8 e6 89 80 e8 ae bf e9 97 ae e7 9a 84 e9 a1 b5 e9 9d a2 e5 8f af e8 83 bd e5 b7 b2 e7 bb 8f e8 a2 ab e5 88 a0 e9 99 a4 20 2d 20 e4 ba a6 e6 98 af e7 be 8e e7 bd 91 e7 bb 9c 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 34 30 34 e9 94 99 e8 af af 22 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 42 4f 44 59 20 7b 20 4d 41 52 47 49 4e 3a 20 30 70 78 3b 20 42 41 43 4b 47 52 4f 55 4e 44 2d 43 4f 4c 4f 52 3a 20 23 30 30 30 [TRUNCATED] Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"><html><head><title> - </title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta content="404" name="keywords"></head><style type="text/css">BODY { MARGIN: 0px; BACKGROUND-COLOR: #000000 } BODY { COLOR: #ffffff; FONT-FAMILY: Microsoft YaHei; background-image: url(http://www.yishimei.cn/image/404bg.jpg); background-repeat: repeat; background-color: #D9D9D9; } TD { COLOR: #ffffff; FONT-FAMILY: Microsoft YaHei } TH { COLOR: #ffffff; FONT-FAMILY: Microsoft YaHei } .style6 { FONT-WEIGHT: bold; FONT-SIZE: 12px } .style7 { FONT-SIZE: 18px } .style8 { FONT-SIZE: 8px } .style9 { FONT-SIZE: 24px; FONT-FAMILY: "Microsoft YaHei" } .style10 { FONT-SIZE: 30px; FONT-FAMILY: "Microsoft YaHei";COLOR: #ff0000 } body,td,th { color: #666; } a { font-family: Microsoft YaHei, Arial, Helvetica, sans-serif; font-size: 20px; color: #666; } a:link { text-decorati [TRUNCATED]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	116.255.154.157	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:41.228229046 CEST	344	OUT	GET /script/common.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:42.995877981 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 16278 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Wed, 05 Dec 2012 09:17:53 GMT Accept-Ranges: bytes ETag: "80367b67c9d2cd1:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:40 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 7b 73 db 4a 96 27 f8 77 4d c4 7c 07 0a d7 2d 01 26 08 12 00 5f 26 0d ab f4 b0 2c d9 92 25 4b b2 65 5f 4a ae 00 41 90 84 cc 97 49 50 0f 0b ec a8 de 9e 8a da ea e9 de 9e d8 e9 89 9e e9 aa e9 a8 de ed 89 ae 9d d8 ed 9e 89 dd 9d 8d 9e a9 ee fa 32 65 df db 7f ed 57 d8 df 39 99 00 a9 87 7d ed 5b b7 6e dd 8d 5d d7 2d 10 c8 3c 99 79 f2 bc f2 e4 c9 03 28 fb cd fe fb e7 ff 2c 9b 4d 5d fa f7 79 66 b9 d3 6f 71 f9 af ff e1 67 54 f2 e5 0f 7f 54 a1 df 77 3f fb cf 5f fc e8 8f d4 37 67 86 3b 6a 68 0c f1 c5 4f fe fb 77 ff fe 0f df fd e4 87 ef 7e f6 13 86 d9 75 83 5e bd 7f ba d7 6f 86 a9 bd 70 dc 08 fa 0c f7 ee 8f 00 f1 77 ef fe ec ef de fd f1 1f 30 dc 50 c0 8d 00 f7 7d b3 68 1b 5e bf 2b 3a fc c5 bf 7c fb 5f ff f4 ed bf fa 93 2f fe e6 3f 31 e0 4c 29 0d f6 b3 ff 75 5a fa f6 4f fe cd db 1f fd e1 0c 2c 3a e9 f6 7b c6 f1 48 54 ff f2 87 6f ff e6 5f be fb f3 ff f2 4f 7f fe 7f 70 b5 95 cb e5 8d 5c c9 b0 0a 02 a7 9f fd f0 ed bf fa 1f 7e fd ab bf 7d f7 67 7f 3f d3 e9 5f ff 98 e7 fa bf ff 82 [TRUNCATED] Data Ascii: {sJ'wM\|-&_&,%Ke_JAIP2eW9}[n]-<y(,M]yfoqgTTw?_7g;jhOw~u^opw0P}h^+:\|_/?1L)uZO,:{HTo_Op\~}g?_o&oo?~:~2n-OiSc4u; $0]ATO#R^jzz"\|uvR{#0~J%r}#<EH=L\2V0\9c)TR*r)u=S(_LK-w4,-QZ'nGm{^{@wuOP.~8P;PiiU\]XAe4J;Z3UMAS[X0z}E]f2_yUZ:z\pxx^T=T=c\|T8$ao?hU_HiZ-rD]P`j6S+sDNc1sGahd]m-eR+\U]KQOeV_;wnwU#:<i{Z4KVbgO[Ewq]OuP]5y[3A9O#
Oct 13, 2024 05:28:42.995892048 CEST	1236	IN	Data Raw: 41 73 a9 2b 4f ad d1 03 66 fe 00 8d ea ce ae 61 97 50 6d 1f 51 bb ba 86 ff 1b d6 f1 9c c3 25 6b 98 96 66 98 6b d4 e9 83 8b 52 2d 77 e4 d4 ab 25 63 dd 31 69 a2 93 07 18 be 76 34 c1 af 24 81 27 81 51 52 54 81 7b 0b f7 31 79 76 b5 1a cd c6 30 37 17 Data Ascii: As+OfaPmQ%kfkR-w%c1iv4$'QRT{1yv07sS(VS9dku1cvxO58 sh+EQ=&}ZQ(zQXJ#OJNT=Y%RBnnJ"V7S^x(*iL1^jIs!Ua^3&r
Oct 13, 2024 05:28:42.995903969 CEST	448	IN	Data Raw: e4 9a d0 1d e4 50 a3 62 ee 04 6a e6 89 c9 a9 17 65 57 88 0d fb 6a cb e8 db d5 84 f7 77 02 4e af 40 e2 5b 52 ac e6 e6 5c 1e 14 ba 40 3e 18 bb 28 07 70 4c 30 e1 39 76 64 b2 77 b2 01 19 54 37 4d 74 d5 ed fb 95 a9 d9 5a 65 f0 fc 1b 72 72 f2 e7 d4 ca Data Ascii: PbjeWjwN@[R\@>(pL09vdwT7MtZerr"k$05^+\OX+e)i,QoX{&MN8bE\|HWr%=+n/jp^8q4{:nts7Xn=H@>F[({a*rh~
Oct 13, 2024 05:28:43.305351973 CEST	1236	IN	Data Raw: 97 9a 60 bf af c3 11 a9 ce 34 92 00 33 4d a5 93 e9 eb 03 a2 c9 80 36 32 63 25 8a e8 c6 ca f3 8e a6 0e 67 41 b7 07 ba dd d7 1b 4e 4d 29 3d 54 74 a5 f4 80 2e 6b 74 59 56 8e d8 0c 36 d8 0c d6 01 b0 a4 a4 4b 47 f0 ce e9 fe 0c f7 69 a5 34 56 50 30 21 Data Ascii: `43M62c%gANM)=Tt.ktYV6KGi4VP0!{i>Xdb-7s,cZ/+UO!>6Qy-4pco^XQtUE)4b(9C(2>Rl4F,+br{QJEK==>DI.<
Oct 13, 2024 05:28:43.305366039 CEST	1236	IN	Data Raw: 4f 1e a2 ca de 53 73 52 d6 f2 8f 62 17 ff 7d 8d 8b dc 14 22 0f ce c0 b9 85 87 a7 5b 77 e2 90 e5 54 ed 65 f3 2a 6d 8b 62 7f 9e e2 11 22 40 e7 92 b8 13 06 93 c4 53 9f 42 26 95 55 e1 88 37 66 67 a8 e7 b7 c9 0d 78 9d 4e 57 ad 56 82 64 f1 8e 44 b2 78 Data Ascii: OSsRb}"[wTe*mb"@SB&U7fgxNWVdDxGsQb#nv5dbqet5ve\|~wk_Uf!ie+ ';2y2<Zcf[b!bfS@OL21?(1!l&)p{^
Oct 13, 2024 05:28:43.305378914 CEST	1236	IN	Data Raw: f9 14 bc e2 a3 ac 9e 7d 89 5d 7c 4d 63 cd 43 0d 3d e0 07 55 da 62 ed 65 ed 88 61 47 09 68 65 da 3b 7c 6b 65 11 5d ca 56 2a b7 d2 a8 95 4a ad b8 8e fd ee a9 86 56 8c cf 80 c9 54 7f 8f 74 6b 57 c4 03 c8 c4 c1 bb d1 cd 17 e4 e0 d0 1e 93 dd 96 86 76 Data Ascii: }]\|McC=UbeaGhe;\|ke]V*JVTtkWvLAi:M#L:xu@aV/3N#PZHtG:j9>f$tBzZzS:@C^JPAMw15Y"v3o8!GlOL~
Oct 13, 2024 05:28:43.305391073 CEST	672	IN	Data Raw: 50 5a d2 f6 58 d2 f6 42 78 56 f9 53 91 df 29 22 8a 4d e9 16 cd d6 08 f1 aa 36 6f 08 8c 35 45 6c 8a 0d dd 32 04 bb 09 a9 9e 4c d6 2e 86 95 a1 1e 56 42 ec 86 f3 2b 62 f7 4d 98 cb 03 19 cf 60 07 47 78 79 bb 74 54 fd 22 39 2e 9b 70 62 a3 c5 29 90 ba Data Ascii: PZXBxVS)"M6o5El2L.VB+bM`GxytT"9.pb)/\|CAo8@)Z;IASAOKg*`Fx1=@%=GS7E,Z1dit29F2Jq~zqirv_)MsLqVJg{&]bkI0)
Oct 13, 2024 05:28:43.615406036 CEST	1236	IN	Data Raw: 09 62 b3 e5 b2 fe c6 89 a6 d0 2a 8f 1a 89 ac 10 c8 e1 58 73 c5 28 ae 51 da c0 08 54 fd 7c 5a fd 9c aa 9f 8b ea 75 28 8b 30 16 e6 1e 48 6a 14 86 1a dd 3a 74 17 9f 8f ad 53 85 b9 c7 e6 c9 16 d5 2e 3d ef 88 86 f9 16 d5 e7 d7 48 80 5b 0e dd 39 0e 01 Data Ascii: bXs(QT\|Zu(0Hj:tS.=H[9-B\|Wt=X]aWu2)7}:kWzI\.UN22+5i$[RmE+`>7my_*9.LdvLFFI2M}YZc\]IGa!1
Oct 13, 2024 05:28:43.615430117 CEST	224	IN	Data Raw: e8 b7 8d bc 07 83 39 cc 94 46 0a 2a f2 2f 44 85 b5 26 6b 8a 0f 32 f6 e7 99 e2 7d 52 69 bb 5d a3 f6 70 74 95 d2 a9 9e 2a ae a4 4a e7 a9 e2 72 2a ff b0 c2 ff a5 8a d8 f0 57 45 bb e7 99 d2 6a a6 74 9f 8e 4c cb 8a e8 33 ff 54 a3 8b da 16 8f e6 ea cc Data Ascii: 9F/D&k2}Ri]ptJr*WEjtL3T\^k#NnA5pbl"\|BnjV)dGyBWB6S(?0RLKwOxB.D2o54z=%NM=L'L)gE%
Oct 13, 2024 05:28:43.615464926 CEST	1236	IN	Data Raw: 34 c9 7f 1e d3 64 42 8b b2 fd 5c 1d e9 ed 9b 00 0b 66 42 bc 44 58 32 19 12 97 19 18 4b 32 c1 3c a3 21 cf 30 29 4f 72 fa 54 6b 93 9c c5 0f 94 35 4c 8b 41 8b 0c 9a 68 f2 e4 5e 4e 93 76 af 48 07 d5 90 a6 53 76 1e e6 9a 5a 4b 65 8e 60 19 20 40 4c ba Data Ascii: 4dB\fBDX2K2<!0)OrTk5LAh^NvHSvZKe` @LE',[t}SnQFk\0_?]TQt}9NsPBaQTxkx`t872r]9upX:\.kty._s,V}b?k$
Oct 13, 2024 05:28:43.615482092 CEST	1236	IN	Data Raw: 06 50 65 a6 ff 9c a0 3f d3 5a 29 0f 95 ea 0a 18 0c 60 41 04 73 f0 29 23 0c e2 11 44 ff 7a 4e 10 f2 b5 93 bc 53 14 5e a5 63 51 0d ef a1 e5 e3 34 11 99 48 3d 43 56 3a f5 b0 4e 68 d0 13 1a 6c 9b 5f 56 db 9e be 81 c8 b5 02 88 5f fe 75 b6 35 71 f4 56 Data Ascii: Pe?Z)`As)#DzNS^cQ4H=CV:Nhl_V_u5qVgY='ReQxao^ZUUQEDF-1D[KO&]+=0S(%PjPV7J~U/j:&dn'>7-7(l(};t"3
Oct 13, 2024 05:28:43.947724104 CEST	403	OUT	GET /script/tj-bottom2.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:44.352715015 CEST	488	IN	HTTP/1.1 200 OK Content-Length: 178 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Wed, 30 Aug 2023 09:02:14 GMT Accept-Ranges: bytes ETag: "02f17ab20dbd91:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:41 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 1c 8d c1 ce c1 50 14 84 bf ed ff 04 b6 7f ba 41 22 ed 9e 12 0b 6b 09 b6 44 aa ad 6a d0 36 5c 29 b6 36 36 c2 db 88 17 91 78 00 af 60 89 a9 4c 6e 72 ee cc 9c ef 7c de 01 29 3e 1b 96 84 24 18 6c 72 56 c4 9a 42 16 72 2a 58 b8 78 fc 33 93 1f 32 a5 c9 90 b2 7e 46 ca a8 e3 48 f9 4f 36 3b 6d ae 95 c5 3f 5e 2c c7 17 c3 21 d2 15 47 49 aa 7d c3 58 e4 a2 57 5c 33 6c f5 0a 62 8b 5b 16 cc af 87 fb a0 16 3d f6 ed c9 5f f4 1c e5 bd f4 fc ea 76 4e 97 a4 d4 9f 1d 5d 31 3c f5 2c aa 34 f8 0e 00 db ed 8b c1 bc 00 00 00 Data Ascii: PA"kDj6\)66x`Lnr\|)>$lrVBr*Xx32~FHO6;m?^,!GI}XW\3lb[=_vN]1<,4
Oct 13, 2024 05:28:45.488454103 CEST	493	OUT	GET /themes/j-spring/style/j-spring/nav_bg.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/themes/j-spring/style/j-spring.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ
Oct 13, 2024 05:28:45.918893099 CEST	418	IN	HTTP/1.1 200 OK Content-Length: 169 Content-Type: image/gif Last-Modified: Wed, 05 Dec 2012 09:06:59 GMT Accept-Ranges: bytes ETag: "1dd42fe2c7d2cd1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:43 GMT Data Raw: 47 49 46 38 39 61 02 00 18 00 c4 00 00 00 00 00 ff ff ff 76 76 76 4d 4d 4d 4b 4b 4b 48 48 48 45 45 45 44 44 44 42 42 42 3e 3e 3e 3a 3a 3a 36 36 36 32 32 32 30 30 30 2e 2e 2e 2c 2c 2c 2a 2a 2a 25 25 25 21 21 21 1d 1d 1d 19 19 19 15 15 15 0a 0a 0a ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 17 00 2c 00 00 00 00 02 00 18 00 00 05 26 a0 20 58 d6 f3 34 0d 00 54 15 45 4d 93 24 45 11 04 39 0e c3 2c 8b a2 24 09 04 c2 60 28 14 08 84 c1 40 a5 3a 1c 42 00 3b Data Ascii: GIF89avvvMMMKKKHHHEEEDDDBBB>>>:::666222000...,,,***%%%!!!!,& X4TEM$E9,$`(@:B;
Oct 13, 2024 05:28:45.921283007 CEST	497	OUT	GET /themes/j-spring/style/j-spring/nav_bgline.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/themes/j-spring/style/j-spring.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ
Oct 13, 2024 05:28:46.327802896 CEST	303	IN	HTTP/1.1 200 OK Content-Length: 55 Content-Type: image/gif Last-Modified: Wed, 05 Dec 2012 09:07:00 GMT Accept-Ranges: bytes ETag: "70f374e2c7d2cd1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:43 GMT Data Raw: 47 49 46 38 39 61 02 00 18 00 91 00 00 00 00 00 ff ff ff 73 73 73 ff ff ff 21 f9 04 01 00 00 03 00 2c 00 00 00 00 02 00 18 00 00 02 08 14 8c a7 c9 eb 0d 5d 01 00 3b Data Ascii: GIF89asss!,];

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	116.255.154.157	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:41.228429079 CEST	354	OUT	GET /function/c_html_js_add.asp HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:45.330888987 CEST	342	IN	HTTP/1.1 200 OK Cache-Control: private Date: Sun, 13 Oct 2024 03:28:43 GMT Content-Type: application/x-javascript; Charset=UTF-8 Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Set-Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; path=/ Content-Encoding: gzip Vary: Accept-Encoding Transfer-Encoding: chunked Data Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 04 00 0d 0a Data Ascii: a
Oct 13, 2024 05:28:45.463565111 CEST	619	IN	Data Raw: 32 35 66 0d 0a a4 52 41 4f 13 4d 18 3e 97 84 ff b0 99 e0 c7 6c 6a b6 05 0d 31 92 45 db 46 84 84 72 69 c4 83 d1 66 3a 3b ed 0e ee ce 6c 66 66 5b 2b 43 62 24 46 2f 44 2f 18 bd 69 62 22 5e 50 6f 48 50 fe 0c b4 e5 5f 38 bb 85 b0 b4 1a 0f df 69 66 de Data Ascii: 25fRAOM>lj1EFrif:;lff[+Cb$F/D/ib"^PoHP_8ifyygfr%(]+,:!f0qoWoOo~dcGygQ58zysEWryqbaO'+`X,fhU,!%DWx
Oct 13, 2024 05:28:45.473654985 CEST	461	OUT	GET /image/ysm_gzh.png HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ
Oct 13, 2024 05:28:45.912534952 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 24292 Content-Type: image/png Last-Modified: Sun, 14 Jul 2019 21:40:37 GMT Accept-Ranges: bytes ETag: "122f33c68c3ad51:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:43 GMT Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 fa 08 02 00 00 00 07 8e cd 6a 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 06 74 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f [TRUNCATED] Data Ascii: PNGIHDRjpHYs+tiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmp:CreateDate="2019-07-15T05:40:07+08:00" xmp:MetadataDate="2019-07-15T05:40:07+08:00" xmp:ModifyDate="2019-07-15T05:40:07+08:00" xmpMM:InstanceID="xmp.iid:2818e64a-2203-5449-8192-ef15e81a5061" xmpMM:DocumentID="adobe:docid:photoshop:3dd91df1-c548-9e4e-9de0-667492e73e39" xmpMM:OriginalDocumentID="xmp.did:be201e86-93e7-cb43-af1d-42f9ae253917" ph
Oct 13, 2024 05:28:45.912548065 CEST	1236	IN	Data Raw: 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 20 3c 72 64 66 3a 53 65 71 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 Data Ascii: otoshop:ColorMode="3" dc:format="image/png"> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:action="created" stEvt:instanceID="xmp.iid:be201e86-93e7-cb43-af1d-42f9ae253917" stEvt:when="2019-07-15T05:40:07+08:00" stEvt:softwareAgent="Adobe Photoshop C
Oct 13, 2024 05:28:45.912559986 CEST	1236	IN	Data Raw: 28 14 12 42 60 49 fc d1 18 9a a6 61 fb 01 20 12 89 50 3d d1 68 54 4a 89 bf e9 07 2f af 69 1a af 5f 4a 19 8d 46 a7 bc 9c ae eb 3e 9f 0f 00 62 b1 18 5d 97 37 95 ee cb e7 f3 e1 9d d2 ed 84 42 21 fa e7 71 02 2b 69 a6 c1 27 0b ad 3b ba 23 a4 94 42 88 Data Ascii: (B`Ia P=hTJ/i_JF>b]7B!q+i';#BD"qlCJfx>wbbB4rtt4HM6!bxibBl6;{)JPyb"%1l_%0a&I<7QU-/39mbY
Oct 13, 2024 05:28:45.912570953 CEST	672	IN	Data Raw: e6 f1 98 81 2e 84 ff 1d 1a 1a 72 9d 4c 3d 21 23 f4 b4 60 18 9b c4 34 f3 bd 4e 14 14 29 0e 97 79 20 bb 07 cc ff 06 80 62 b1 58 6f 16 93 f8 72 0a dd 38 9b e1 3c 8b b8 ea 62 b1 e8 1a 87 28 b1 47 83 50 18 8f 70 2d 10 d8 91 3d 0f 91 95 f8 84 6e aa 0d Data Ascii: .rL=!#`4N)y bXor8<b(GPp-=n1=Fwg<7Nq)axG;J*s@}}}t}q~FZ544%/o&,f~<7M,jg3OXsd4D"eu]GZNa
Oct 13, 2024 05:28:46.233828068 CEST	1236	IN	Data Raw: 3f 42 88 74 3a bd 74 e9 52 7c cd 0a 85 02 6a ee f1 dc 7a 9a 22 7a c7 b8 2e a8 41 3f 63 7c af f0 07 ad 1c e6 4e 0f 73 e7 e6 d8 cc 7c 10 ca 04 84 63 61 11 02 43 49 74 66 d0 9e 94 81 19 61 9a a6 ab ae 9d b4 2e 60 6b df 9d ee 78 b1 58 a4 32 c0 46 fa Data Ascii: ?Bt:tR\|jz"z.A?c\|Ns\|caCItfa.`kxX2FH$B"k)Aon.\^.[Hn}_D"Z\(h]nB,TQ\\|~As<FO+K4,r}#9UBiLy0'I
Oct 13, 2024 05:28:46.233891964 CEST	224	IN	Data Raw: e7 f3 19 86 81 73 4f e8 5d 2c 59 b2 04 43 e1 58 2c f6 dc 73 cf f1 a9 1f 1c 38 51 7f 82 63 3f e9 d1 ff 00 9d 86 3c 7a 26 93 71 72 f9 b4 46 96 f4 f4 0d 86 67 57 bd 3e 2f af 69 9a d2 9f 5b 37 fd e6 f7 7f 7f c7 82 e9 61 ee f8 b5 c5 c1 e3 e0 c1 83 f8 Data Ascii: sO],YCX,s8Qc?<z&qrFgW>/i[7a]fm>/\*%B1B"0\.+~3y.]1E`HvSy^NZw gsgS^dUJjEmY LW7\|}u8D
Oct 13, 2024 05:28:46.233903885 CEST	1236	IN	Data Raw: 45 f9 b9 fc 4f ae 39 28 eb cd 10 d7 ab 93 e7 bf e7 e0 79 e5 95 eb b6 14 a6 c7 e8 ce 2d 86 cf 50 12 0f cd 93 8b 8b 3a 7a 6e ae cf f6 fb fd 7d 7d 7d 44 26 72 19 19 e6 55 04 db a7 27 57 98 d6 83 2a ce 34 85 8c 89 44 62 74 74 54 f9 d0 0b 5b 16 8f 77 Data Ascii: EO9(y-P:zn}}}D&rU'W*4DbttT[w:3::JQc`rm2qhhJ1&9)>4pk.syq},>nwNvps&vU4S)Zs=M;8\#`3<p6>+b
Oct 13, 2024 05:28:46.233916998 CEST	1236	IN	Data Raw: cd 06 c9 57 e8 08 27 b3 b9 27 ca f5 21 78 16 15 a3 d3 c9 db 01 47 5c 38 e5 a0 55 2f 54 e0 7f c5 4f 01 15 a8 a7 89 77 5e b7 f1 a8 a9 5c c5 f9 a7 60 30 e8 fa 0a d5 1b 35 28 0e e1 03 07 bd b7 d8 45 ca 7a 80 56 b6 72 c2 34 18 dd f9 b3 91 52 f2 5c 28 Data Ascii: W''!xG\8U/TOw^\`05(EzVr4R\(1!HY`y+@tE:5:AJBZ Qq&HPU8;?pdON;/h~~c;wp_t)URJH2=wlvA]S(4$
Oct 13, 2024 05:28:46.233928919 CEST	1236	IN	Data Raw: c9 64 f2 81 07 1e 00 80 1d 3b 76 fc fc e7 3f 4f a7 d3 ba 4f 07 29 a4 d4 34 90 7e cb d4 34 00 cb 32 85 34 35 30 75 cb 14 96 14 52 58 01 4d fa 01 40 58 9a 5f 0a 5d 6a 20 05 80 94 9a 69 89 9a 01 96 94 1a 26 b4 01 80 ce ce ce 2b ae b8 62 d1 a2 45 ff Data Ascii: d;v?OO)4~42450uRXM@X_]j i&+bE}%<SRp8aFJ4d2=ke}H>u40w![B$pk}]8?S\,<p75qmu]^{-Y+WU?sL^'TgI]W-?I
Oct 13, 2024 05:28:46.233941078 CEST	672	IN	Data Raw: 7b 99 98 98 a0 c2 a8 9b 47 e2 95 72 59 4a 3b 1f 3c f6 33 ce 4c e3 2b 87 86 ce 1b d3 9a 68 5d 73 df b0 61 83 b0 17 ed 47 a3 51 d3 34 71 8a 64 cb 96 2d 38 a3 c9 f3 94 a3 ff 8d 9d 8e bf 15 3d 77 bd ab a0 ad 3b 73 4a 72 52 1f c3 5f 6a 4f 76 62 e2 cd Data Ascii: {GrYJ;<3L+h]saGQ4qd-8=w;sJrR_jOvbH+o%itAo>y_2_\|'Y8$_"WCvFri[>yfuH4v;L<3o2\<f,q#4\|/*ng-NR[
Oct 13, 2024 05:28:54.707367897 CEST	930	OUT	GET /function/c_html_js.asp?act=batch&view=&inculde=mod_randomsortnew%3Drandomsortnew%2Cmod_randomsortallrand%3Drandomsortallrand%2C&count=spn319%3D319%2C HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Requested-With: XMLHttpRequest Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:55.187952042 CEST	275	IN	HTTP/1.1 200 OK Cache-Control: private Date: Sun, 13 Oct 2024 03:28:53 GMT Content-Type: application/x-javascript; Charset=UTF-8 Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Encoding: gzip Vary: Accept-Encoding Transfer-Encoding: chunked Data Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 04 00 0d 0a Data Ascii: a
Oct 13, 2024 05:28:55.209197998 CEST	860	OUT	GET /themes/j-spring/style/j-spring/pointblue.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/themes/j-spring/style/j-spring.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:55.620410919 CEST	415	IN	HTTP/1.1 200 OK Content-Length: 166 Content-Type: image/gif Last-Modified: Wed, 05 Dec 2012 09:07:00 GMT Accept-Ranges: bytes ETag: "654eb5e2c7d2cd1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:53 GMT Data Raw: 47 49 46 38 39 61 09 00 09 00 c4 00 00 a1 98 6e b9 b1 90 e5 e1 cc e4 df cc ad a5 7e a1 99 6e d6 d1 b9 c8 c1 a4 e4 df cc b9 b2 91 d6 d1 b9 ad a5 7e e4 e0 cc e4 e0 cc 9f 96 6d ac a4 7e d8 d3 b9 c8 c2 a4 ba b3 91 a0 97 6e c8 c2 a4 a0 97 6e c8 c2 a4 ba b3 91 ad a5 7e d7 d1 b9 ff ff ff 98 8f 62 28 28 28 28 28 28 28 28 28 28 28 28 2c 00 00 00 00 09 00 09 00 00 05 2b e0 26 8e a4 66 9e 9a a8 15 ce 04 54 e9 a6 11 d8 83 2d b1 76 49 57 90 e4 96 88 85 72 c8 41 0c 19 45 26 87 68 0c 18 82 18 89 14 02 00 3b Data Ascii: GIF89an~n~m~nn~b((((((((((((,+&fT-vIWrAE&h;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	116.255.154.157	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:41.228945971 CEST	348	OUT	GET /script/ad_daohang.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:42.314395905 CEST	344	IN	HTTP/1.1 200 OK Content-Length: 36 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Fri, 01 Dec 2017 05:14:22 GMT Accept-Ranges: bytes ETag: "0b4a3f636ad31:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:39 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 04 c1 31 01 00 00 00 40 b0 fe 99 1c 22 a9 60 0b 1f 00 e1 97 10 01 03 00 00 00 Data Ascii: 1@"`
Oct 13, 2024 05:28:42.315634966 CEST	351	OUT	GET /script/ad_article_up.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:42.718787909 CEST	439	IN	HTTP/1.1 200 OK Content-Length: 128 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Sun, 04 Nov 2018 13:06:37 GMT Accept-Ranges: bytes ETag: "806ce3373f74d41:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:40 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 74 cb 41 0e 02 21 0c 00 c0 af 6c f6 82 5e 5a 62 e2 45 59 3c fa 09 2e 04 2b 34 6e d9 0d d4 10 7f af 1f 70 ee f3 d8 d2 5b a8 2a 8c c6 4a 6b 3d cc 2e 4e a5 d1 73 09 a6 a8 ee 17 c4 31 06 7c b8 17 16 62 48 15 2b e9 d8 da 0b cf 16 8a ca 7a 5b fa 6f 06 e3 1d 4b 9e 7a 4b ff 27 4b cc 84 27 6b ed 1d f6 9a 83 99 d0 3b 8c 7e 3e 5e bf 03 00 5f 0f a4 83 88 00 00 00 Data Ascii: tA!l^ZbEY<.+4np[*Jk=.Ns1\|bH+z[oKzK'K'k;~>^_
Oct 13, 2024 05:28:43.947877884 CEST	405	OUT	GET /script/baidutuijian.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:44.352421999 CEST	421	IN	HTTP/1.1 200 OK Content-Length: 111 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Mon, 30 Jul 2018 17:16:00 GMT Accept-Ranges: bytes ETag: "04876fc2828d41:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:41 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6c cc 31 0e 84 20 10 85 e1 de c4 3b 90 a9 b4 70 b7 07 f5 24 34 04 26 64 12 18 12 1c 74 f7 f6 cb c6 d6 e6 35 2f ff 17 8a 6f 19 59 5e 57 25 c1 c4 13 ac 81 4e 75 c8 37 e1 66 21 bb 1a 89 b5 6b 52 d4 7f 8c e0 47 16 97 28 b2 f6 3d c3 6a 2c ec 30 9b 71 78 90 ec bb 5b f7 3b 0e bf 01 00 c1 8d 73 14 6a 00 00 00 Data Ascii: l1 ;p$4&dt5/oY^W%Nu7f!kRG(=j,0qx[;sj
Oct 13, 2024 05:28:44.493591070 CEST	405	OUT	GET /script/ad_all_float.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:44.897790909 CEST	262	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: application/x-javascript Last-Modified: Mon, 26 Aug 2024 16:33:40 GMT Accept-Ranges: bytes ETag: "5aac26b5d5f7da1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:42 GMT
Oct 13, 2024 05:28:45.474478006 CEST	455	OUT	GET /go/kali.png HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ
Oct 13, 2024 05:28:45.905615091 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 32162 Content-Type: image/png Last-Modified: Wed, 06 Mar 2019 05:18:21 GMT Accept-Ranges: bytes ETag: "24f93c4dcd3d41:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:43 GMT Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 01 1d 08 02 00 00 00 aa b8 ed e4 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 96 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f [TRUNCATED] Data Ascii: PNGIHDRpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmp:CreateDate="2019-03-06T13:07:15+08:00" xmp:ModifyDate="2019-03-06T13:17:58+08:00" xmp:MetadataDate="2019-03-06T13:17:58+08:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:b8f95149-6ddc-264a-8524-130319e72ec4" xmpMM:DocumentID="xmp.did:b8f95149-6ddc-264a-8524-130319e72ec4" xm
Oct 13, 2024 05:28:45.905639887 CEST	1236	IN	Data Raw: 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 62 38 66 39 35 31 34 39 2d 36 64 64 63 2d 32 36 34 61 2d 38 35 32 34 2d 31 33 30 33 31 39 65 37 32 65 63 34 22 3e 20 3c 70 68 6f 74 6f 73 68 6f 70 3a Data Ascii: pMM:OriginalDocumentID="xmp.did:b8f95149-6ddc-264a-8524-130319e72ec4"> <photoshop:TextLayers> <rdf:Bag> <rdf:li photoshop:LayerName="100G" photoshop:LayerText="100G"/> </rdf:Bag> </photoshop:TextLayers> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:
Oct 13, 2024 05:28:45.905653000 CEST	1236	IN	Data Raw: 85 ce cc 28 ae cc 2a 51 ac bd e3 0e 5e 81 77 27 37 7d 55 80 61 c5 cb 0b 97 9c 64 25 4c fb 93 0b e6 12 3a 2c a6 a7 07 55 4d 88 90 1e 09 ef 2e 4e e4 58 b5 02 ef 2e cb e8 9d e7 e6 1b 5e 88 88 64 05 c8 2f 21 3f 66 7b 58 cb da a3 8e bb ab 92 4a 8a 30 Data Ascii: (*Q^w'7}Uad%L:,UM.NX.^d/!?f{XJ0?Z&#D\|W5!8hN'({G[#+)Dll]dv,D)rBg+y YBWtr,<({w6wYNNd5Q}BYE'L4!CJiIc
Oct 13, 2024 05:28:45.905695915 CEST	1236	IN	Data Raw: a3 29 2e 11 06 09 72 6d dd f1 59 d1 90 ae 1d 94 1d 00 26 3f fd 4b 22 7c cc e8 a1 c8 cb b2 c8 6c 32 17 17 97 5c bb 56 64 c8 cb 07 8a 2a 29 31 1b f3 8b 98 0c 68 7a 00 40 eb d6 2d db b6 0d ea d2 35 c1 d7 cf d7 d7 cf d7 c7 c7 fb 62 fa a7 42 cd f5 ea Data Ascii: ).rmY&?K"\|l2\Vd)1hz@-5bBsO!;+g+~eFC>$XER}++O7e}x6k.#,!\X,6,"?\|tc~>80sLTtDPP;<'u
Oct 13, 2024 05:28:45.905709028 CEST	1236	IN	Data Raw: 81 ff 70 b9 88 a1 2b 88 b6 1d c4 9a 1d 91 4f d2 04 0b 56 12 a1 87 f9 b3 4a a8 e9 e7 e7 4c 6f df be 1d 73 a3 94 9c 10 d0 1e 11 19 ce ca 6e 97 7d b9 82 b7 5f a5 a5 65 bc 72 8c 86 fc 2b 57 72 01 20 36 36 1a 4d 30 b3 c9 4c 03 f8 f9 f9 9a 4c e6 e2 22 Data Ascii: p+OVJLosn}_er+Wr 66M0LL",qt/GoGL_H%YHr634tcfL2Vkaa1F!Cd-V9!ynQd4>]O-]o:MXkomiY~}D=MH*}
Oct 13, 2024 05:28:45.905720949 CEST	1236	IN	Data Raw: 7c e4 2d b7 a2 83 a1 0b ab 90 04 ac 74 de a0 d1 ea be 46 f8 51 23 65 40 9b dc 8a 8a 5b 01 27 7f 2b 82 a4 22 10 00 65 0e 42 ec 72 07 87 e4 ab 24 e4 ad b3 2a aa 6c ee aa 3b ce 47 7f 36 92 5b 9b 82 0d 14 72 1d c4 5b 71 a4 ae 10 03 b7 9c d0 52 99 24 Data Ascii: \|-tFQ#e@['+"eBr$l;G6[r[qR$EqQ"4wG5T@Xr$&jQGj$[G1*YB@jE]I!W!(4U}\|GI99!3!95me#x'S8 U1DQm-;{@
Oct 13, 2024 05:28:45.905742884 CEST	1236	IN	Data Raw: d6 8f db 1a 32 b8 df 99 d4 f3 15 15 44 ef f0 90 24 9d b6 f9 80 01 bd ae 5e 35 5c 4c bf 04 7c a3 23 2b 22 a7 69 3a 36 a6 e3 88 11 89 de de de 57 ae 5c 45 af c5 24 7f e7 19 00 18 0d c6 57 5f 5b 24 92 99 79 eb bc 5e 7e f9 59 00 38 7a e4 f8 ed db 55 Data Ascii: 2D$^5\L\|#+"i:6W\E$W_[$y^~Y8zUyFGG@ajZ>V[m/]IJ:[\l6aj\|g\\|j\tKFh~, (d@=8\|E?/(Fm<?U]kmQ3&KoAa=Essrl+I3O
Oct 13, 2024 05:28:45.905752897 CEST	108	IN	Data Raw: d2 73 08 53 ba f2 8a 4a 9b ad 46 a3 71 4b 4e 3e 15 19 d9 1e 00 4c 26 b3 c1 58 18 10 e8 0f 75 21 7b 8b 16 3e 00 b0 6f ef c1 4d 5b 76 af 5b f7 3d 00 64 65 e6 ac fe fd 2f 11 9d 99 b4 6f ef 81 0d 1b b6 61 bf eb e3 ad 9d 3c 69 4c ff c7 fa 6a 34 9a b4 Data Ascii: sSJFqKN>L&Xu!{>oM[v[=de/oa<iLj4nW=3kRUYz
Oct 13, 2024 05:28:46.227281094 CEST	1236	IN	Data Raw: 86 3f 36 09 c1 5c de de de cc 8f 8e 6c 1b 29 0b 34 6a 83 19 07 91 16 47 bc 3b 4d d3 cc 77 4c 23 da b1 63 0f 00 8c 7e 32 71 ec b8 27 b1 ad 9b 4d d7 4f 9e 3c 93 9c 7c 8a 35 43 16 2e 78 2d 3e 21 0e 00 fe 58 f7 d7 b6 1d 7b b9 ca ef d8 b1 c7 6a b5 de Data Ascii: ?6\l)4jG;MwL#c~2q'MO<\|5C.x->!X{jc5KbcvX*++V+JLx`9-]z1sQh@pk,FlfYnGJ^9NJJ>3apVkrm[v/u5jXTt$rq
Oct 13, 2024 05:28:46.227344990 CEST	1236	IN	Data Raw: f5 d9 67 ef 31 fd bd c5 62 41 b7 40 d1 81 85 92 62 13 c2 70 0a 8b 4a 64 55 17 b7 2e ee 6e 29 2f a9 f6 b2 1a 91 d5 84 c4 c7 33 eb 96 96 96 31 3f 06 b7 ad c5 cb fd fc 5a e7 19 ae a1 c2 bc bc fc 07 0f 1e 44 45 75 d4 87 04 bf 31 ef c5 85 8b 3e 91 6c Data Ascii: g1bA@bpJdU.n)/31?ZDEu1>lkxt+wMCCBA<:F7nY}n8fY4}Bq3zv0a&V%JrEVl6 :8O"Nc<
Oct 13, 2024 05:28:46.227356911 CEST	1236	IN	Data Raw: 15 52 15 c5 a9 28 98 01 80 f4 8b 99 c8 dc 01 c0 d7 af f5 3b ef cc dd ba 75 e7 ce 5d 07 98 62 7f fa 69 99 cd 66 f3 f5 ad 05 dd f7 fc b3 bf 57 cf 04 74 ed e2 e2 92 9d 7d 29 22 a2 63 9f 3e 3d cb 4a cb 06 0f 19 08 00 c9 c7 4f 08 05 d0 00 30 fa c9 c4 Data Ascii: R(;u]bifWt})"c>=JO0S6cf6[M\\LapO<'tb,).),,q@{zzm[`,YCd=<]Zm+,,pZmCW_]3\S=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	116.255.154.157	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:41.229547024 CEST	347	OUT	GET /script/ad_banner.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:42.320988894 CEST	262	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: application/x-javascript Last-Modified: Mon, 05 Nov 2018 07:03:14 GMT Accept-Ranges: bytes ETag: "96b8be9ed574d41:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:39 GMT
Oct 13, 2024 05:28:42.322093010 CEST	354	OUT	GET /script/ad_article_round.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:42.725476980 CEST	518	IN	HTTP/1.1 200 OK Content-Length: 208 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Fri, 13 Oct 2017 19:26:00 GMT Accept-Ranges: bytes ETag: "054d4195944d31:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:40 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 74 4f c1 8a c2 30 14 bc 2f ec 3f 04 2f 55 c1 26 5a 76 59 12 77 bf a4 97 90 bc 26 4f 9a 34 34 6f 6d eb d7 1b e9 c1 8b 1e 1e bc 99 61 98 19 be ff fc b0 83 f9 0f 10 a9 9e 46 24 e8 e3 76 73 b6 78 65 99 96 1e 7e db 6a 42 4b 5e 36 cd 77 9a 95 07 74 9e e4 e9 47 14 d0 f5 83 26 d9 43 47 2a 69 6b 31 ba 03 0d 49 3e a4 a0 47 87 51 1e cb cf be 9e a7 6e 07 8c 16 66 79 12 42 28 d6 56 7f 9b 9d 7a 59 20 9b 11 13 31 5a d2 a3 02 c1 4c fc a2 af 7a a5 db 8a e5 d1 14 de 13 25 c9 f9 b1 5e 30 7b 0c 80 b5 89 dc cc c9 d9 2e 85 49 83 75 a1 be e4 12 73 e6 ab f3 6d 1e 2f 8b 57 71 cf ef 03 00 12 13 a9 54 14 01 00 00 Data Ascii: tO0/?/U&ZvYw&O44omaF$vsxe~jBK^6wtG&CG*ik1I>GQnfyB(VzY 1ZLz%^0{.Iusm/WqT
Oct 13, 2024 05:28:43.246537924 CEST	402	OUT	GET /script/tj-bottom.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:43.650593996 CEST	551	IN	HTTP/1.1 200 OK Content-Length: 240 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Mon, 17 Dec 2018 08:27:27 GMT Accept-Ranges: bytes ETag: "8081df57e295d41:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:40 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 1c 8f cf 4a c3 40 18 c4 7f 17 2f 3e 82 17 43 2f 2a 48 52 0a 5e 6a ec 49 10 11 d2 d2 f6 a6 60 6b dc d6 a0 d5 50 53 42 db 63 4e 25 04 f4 e2 9f a3 37 7d 02 df c0 47 10 7c 06 0f 3e 80 60 9d 0d c3 7e bb df cc ee 7c b3 cb bf 73 6e 08 99 30 c2 70 4d 82 4b ca 98 48 27 c3 95 98 4d 2a f8 c4 34 54 cf 54 b7 87 5f b3 d7 b0 95 ad 3c fc e6 6b 4b 9f 3e 0e 17 7a 61 18 b0 c7 09 1b ea 12 21 a6 8e 27 a4 25 5c a6 f2 bc 95 16 95 93 22 31 a1 dc 3d 2d a3 db a9 52 8c b9 54 bf 43 55 9a f5 18 69 be f5 6b f0 9e 7d 76 6a e2 2d 0e 78 c9 1f e7 f5 e1 21 5d 3e 16 f7 4f 83 e3 5e b0 5f 3c 1b 87 b7 76 af f9 7d ba 7e 17 17 ab 81 55 8f 82 9f c2 97 63 bf cc ee 95 e9 ed 6e ff 52 61 8b 5d fe 07 00 64 ad c9 55 fe 00 00 00 Data Ascii: J@/>C/HR^jI`kPSBcN%7}G\|>`~\|sn0pMKH'M4TT_<kK>za!'%\"1=-RTCUik}vj-x!]>O^_<v}~UcnRa]dU
Oct 13, 2024 05:28:43.654284954 CEST	408	OUT	GET /script/ad_article_down.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:44.667082071 CEST	262	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: application/x-javascript Last-Modified: Fri, 04 Jan 2019 16:29:48 GMT Accept-Ranges: bytes ETag: "f676b1b54aa4d41:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:42 GMT
Oct 13, 2024 05:28:45.474767923 CEST	459	OUT	GET /image/2000G.png HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.yishimei.cn/network/319.html?=23:28:29 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ
Oct 13, 2024 05:28:45.905921936 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 32482 Content-Type: image/png Last-Modified: Wed, 23 Aug 2017 06:25:50 GMT Accept-Ranges: bytes ETag: "4a3569aad81bd31:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:43 GMT Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d8 00 00 00 3a 08 02 00 00 00 05 a2 b9 f2 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 3e 05 00 d8 a9 93 dc 17 00 d8 a2 1c a9 08 00 8d 01 00 99 28 47 24 02 40 bb 00 60 55 81 52 2c 02 c0 c2 00 a0 ac 40 22 2e 04 c0 ae 01 80 59 b6 32 47 02 80 bd [TRUNCATED] Data Ascii: PNGIHDR:pHYs.#.#x?vMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I>(G$@`UR,@".Y2GvX@`B, 8C L0_pHK3w!lBa)f"#HL8?flko">!N_puk[Vh]3Zzy8@P<%b0>3o~@zq@qanvRB1n#)4\,XP"MyRD!2wONl~Xv@~-g42y@+\LD*AaD@$<BAT:18\p`Aa!:b""aH4 Q"rBj]H#-r9\@ 2G1Qu@st4]k=Kut}c1fa\E`X&cX5V5cX7va$^lGXLXC%#W1'"O%zxb:XF&!!%^'_H$N!%2IIkHH-S>
Oct 13, 2024 05:28:45.905998945 CEST	224	IN	Data Raw: 10 69 9c 4c 26 eb 90 6d c9 de e4 08 b2 80 ac 20 97 91 b7 90 0f 90 4f 92 fb c9 c3 e4 b7 14 3a c5 88 e2 4c 09 a2 24 52 a4 94 12 4a 35 65 3f e5 04 a5 9f 32 42 99 a0 aa 51 cd a9 9e d4 08 aa 88 3a 9f 5a 49 6d a0 76 50 2f 53 87 a9 13 34 75 9a 25 cd 9b Data Ascii: iL&m O:L$RJ5e?2BQ:ZImvP/S4u%C-igih/tEkwHb(k{/LT02goUX**\|:V~TUsU?yTU^V}FUPU6RwRPQ__
Oct 13, 2024 05:28:45.906111956 CEST	1236	IN	Data Raw: 82 fa 63 0d b2 86 85 46 a0 86 48 a3 54 63 b7 c6 19 8d 21 16 c6 32 65 f1 58 42 d6 72 56 03 eb 2c 6b 98 4d 62 5b b2 f9 ec 4c 76 05 fb 1b 76 2f 7b 4c 53 43 73 aa 66 ac 66 91 66 9d e6 71 cd 01 0e c6 b1 e0 f0 39 d9 9c 4a ce 21 ce 0d ce 7b 2d 03 2d 3f Data Ascii: cFHTc!2eXBrV,kMb[Lvv/{LSCsfffq9J!{--?-jf~7zbrup@,:m:u6Qu>cyGm7046l18cckihhI'&g5x>fob4ek<abi2)kft,
Oct 13, 2024 05:28:45.906122923 CEST	224	IN	Data Raw: f7 4c fc 99 6b 5d 51 5d bd 67 43 cf 9e 3f 17 74 ee 4c b7 5f f7 c9 f3 de e7 8f 5d f0 bc 70 f4 22 f7 62 db 25 b7 4b ad 3d ae 3d 47 7e 70 fd e1 48 af 5b 6f eb 65 f7 cb ed 57 3c ae 74 f4 4d eb 3b d1 ef d3 7f fa 6a c0 d5 73 d7 f8 d7 2e 5d 9f 79 bd ef Data Ascii: Lk]Q]gC?tL_]p"b%K==G~pH[oeW<tM;js.]yn&%vwL]zxem``YGG#F#d~VysKXyr:#y=}
Oct 13, 2024 05:28:45.906140089 CEST	1236	IN	Data Raw: ba df c7 bd 1f 99 28 fc 40 fe 50 f3 d1 fa 63 c7 a7 d0 4f f7 3e e7 7c fe fc 2f f7 84 f3 fb 25 d2 9f 33 00 00 3e 19 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef Data Ascii: (@PcO>\|/%3>iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xml
Oct 13, 2024 05:28:45.906152964 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 3c 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3e 78 6d 70 2e 64 69 64 3a 64 35 32 31 36 64 64 36 2d 62 65 62 35 2d 37 65 34 62 2d 39 62 65 34 2d 65 37 38 31 62 35 31 61 31 38 30 32 3c 2f 78 6d 70 4d Data Ascii: <xmpMM:OriginalDocumentID>xmp.did:d5216dd6-beb5-7e4b-9be4-e781b51a1802</xmpMM:OriginalDocumentID> <xmpMM:History> <rdf:Seq> <rdf:li rdf:parseType="Resource"> <stEvt:action>created</st
Oct 13, 2024 05:28:45.906162977 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 4c 61 79 65 72 54 65 78 74 3e 32 30 30 30 47 e8 ae a1 e7 ae 97 e6 9c ba 49 54 e8 a7 86 e9 a2 91 e6 95 99 e7 a8 8b 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 4c 61 79 65 72 54 65 78 74 3e 0a Data Ascii: <photoshop:LayerText>2000GIT</photoshop:LayerText> </rdf:li> <rdf:li rdf:parseType="Resource"> <photoshop:LayerName> </photoshop:LayerName>
Oct 13, 2024 05:28:45.906177998 CEST	672	IN	Data Raw: 20 20 20 20 20 20 3c 65 78 69 66 3a 50 69 78 65 6c 58 44 69 6d 65 6e 73 69 6f 6e 3e 37 32 38 3c 2f 65 78 69 66 3a 50 69 78 65 6c 58 44 69 6d 65 6e 73 69 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 50 69 78 65 6c 59 44 69 6d 65 6e 73 Data Ascii: <exif:PixelXDimension>728</exif:PixelXDimension> <exif:PixelYDimension>58</exif:PixelYDimension> </rdf:Description> </rdf:RDF></x:xmpmeta>
Oct 13, 2024 05:28:45.906554937 CEST	892	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Oct 13, 2024 05:28:45.996350050 CEST	568	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Oct 13, 2024 05:28:46.223051071 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	148.153.240.76	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:42.160562992 CEST	313	OUT	GET /js-sdk-pro.min.js HTTP/1.1 Host: sdk.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://www.yishimei.cn/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:42.948966026 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:28:42 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Server: openresty Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE7-CACHE1[143],EU-GER-frankfurt-EDGE7-CACHE1[ovl,140],EU-GER-frankfurt-EDGE5-CACHE1[ovl,139] X-CCDN-REQ-ID-46B1: 9ae473fb52752899587fb0d900c0d2a4 Data Raw: 34 61 35 0d 0a 2f 2a 21 0a 2a 20 35 31 4c 41 20 41 6e 61 6c 79 73 69 73 20 4a 61 76 61 73 63 72 69 70 74 20 53 6f 66 74 77 61 72 65 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 4b 69 74 0a 2a 20 6a 73 2d 73 64 6b 2d 70 72 6f 20 76 31 2e 35 38 2e 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 36 2d 32 30 32 32 20 35 31 2e 6c 61 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 67 3d 65 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 2c 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 69 3d 41 28 27 4f 62 6a 65 63 74 27 29 2c 6a 3d 41 28 27 4e 75 6d 62 65 72 27 29 2c 6b 3d 41 28 27 53 74 72 69 6e 67 27 29 2c 6d 3d 41 28 27 41 72 72 61 79 27 29 2c 6e 3d 41 28 27 46 75 6e 63 74 69 6f 6e 27 29 2c 6f 3d 41 28 27 52 65 67 45 78 70 27 29 3b 66 75 6e 63 74 69 6f 6e 20 71 28 74 2c 75 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 78 30 21 3d 3d 74 26 26 2d 30 78 31 [TRUNCATED] Data Ascii: 4a5/! 51LA Analysis Javascript Software Development Kit* js-sdk-pro v1.58.3* Copyright 2016-2022 51.la All Rights Reserved*/(function(c){'use strict';var e=window,g=e['document'],h=encodeURIComponent,i=A('Object'),j=A('Number'),k=A('String'),m=A('Array'),n=A('Function'),o=A('RegExp');function q(t,u){return void 0x0!==t&&-0x1!==t['indexOf'](u);}function v(w,x){for(var y=0x0,z=w['length'];y<z;y++)if(w[y]==x)return y;return-0x1;}function A(B){return function(C){return Object['prototype']['toString']['call'](C)==='[object\x20'['concat'](B,']');};}function D(){for(var E=0x0,F={};E<arguments['length'];E++){var G=arguments[E];for(var H in G)F[H]=G[H];}return F;}function I(J){return J['replace'](/&/g,'~_~');}function K(L){var M='';for(var N in L)''!==M&&(M+='&'),M+=N+'='+h(h(I(String
Oct 13, 2024 05:28:42.948982954 CEST	398	IN	Data Raw: 28 4c 5b 4e 5d 29 29 29 29 3b 72 65 74 75 72 6e 20 4d 3b 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 50 29 7b 72 65 74 75 72 6e 20 50 5b 27 72 65 70 6c 61 63 65 27 5d 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 27 27 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 51 Data Ascii: (L[N]))));return M;}function O(P){return P['replace'](/^\s+\|\s+$/g,'');}function Q(){return+new Date();}function R(S){var T=e['navigator']['userAgent'],U=new RegExp(/\b(?:Chrome\|CrMo\|CriOS)\/([\d.]+)/)['exec'](T);return!(U&&U['length']&&U[0x1]
Oct 13, 2024 05:28:42.949062109 CEST	1236	IN	Data Raw: 33 61 66 61 0d 0a 4f 2c 27 6e 6f 77 27 3a 51 2c 27 61 72 72 61 79 49 6e 64 65 78 4f 66 27 3a 76 2c 27 63 68 65 63 6b 43 68 6f 72 6d 65 4d 6f 62 6c 69 65 27 3a 52 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 58 2c 59 3d 61 32 28 27 6d Data Ascii: 3afaO,'now':Q,'arrayIndexOf':v,'checkChormeMoblie':R},W=function(){var X,Y=a2('meta'),Z=a2('title'),a0={'kw':'','ds':''};a0['tt']=V['trim'](Z['length']?Z[0x0]['innerHTML']:''),a0['tt']=a0['tt']['slice'](0x0,0x3e8);for(var a1=0x0;a1<Y['length
Oct 13, 2024 05:28:42.949106932 CEST	1236	IN	Data Raw: 5d 2c 61 68 3d 7b 27 64 4d 73 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 61 69 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 69 3f 27 27 3a 61 68 5b 27 52 43 57 53 27 5d 28 61 69 2c 30 78 66 2c 66 75 6e 63 74 69 6f 6e 28 61 68 29 7b 72 65 74 75 72 6e Data Ascii: ],ah={'dMsN':function(ai){return null==ai?'':ah['RCWS'](ai,0xf,function(ah){return ag(ah+0x20);})+'\x20';},'QqPF':function(ag){for(var al=ah['Isoq'](ag),am=new Uint8Array(0x2*al['length']),an=0x0,ao=al['length'];an<ao;an++){var ap=al['charCode
Oct 13, 2024 05:28:42.949120998 CEST	1236	IN	Data Raw: 79 2c 61 4b 3d 3d 61 68 2d 30 78 31 3f 28 61 4b 3d 30 78 30 2c 61 49 5b 27 70 75 73 68 27 5d 28 61 77 28 61 4a 29 29 2c 61 4a 3d 30 78 30 29 3a 61 4b 2b 2b 2c 61 79 3d 30 78 30 3b 66 6f 72 28 61 79 3d 61 45 5b 27 63 68 61 72 43 6f 64 65 41 74 27 Data Ascii: y,aK==ah-0x1?(aK=0x0,aI['push'](aw(aJ)),aJ=0x0):aK++,ay=0x0;for(ay=aE['charCodeAt'](0x0),ax=0x0;ax<0x10;ax++)aJ=aJ<<0x1\|0x1&ay,aK==ah-0x1?(aK=0x0,aI['push'](aw(aJ)),aJ=0x0):aK++,ay>>=0x1;}0x0==--aF&&(aF=Math['pow'](0x2,aH),aH++),delete aB[aE];
Oct 13, 2024 05:28:42.949132919 CEST	1236	IN	Data Raw: 68 2d 30 78 31 3f 28 61 4b 3d 30 78 30 2c 61 49 5b 27 70 75 73 68 27 5d 28 61 77 28 61 4a 29 29 2c 61 4a 3d 30 78 30 29 3a 61 4b 2b 2b 2c 61 79 3e 3e 3d 30 78 31 3b 66 6f 72 28 3b 3b 29 7b 69 66 28 61 4a 3c 3c 3d 30 78 31 2c 61 4b 3d 3d 61 68 2d Data Ascii: h-0x1?(aK=0x0,aI['push'](aw(aJ)),aJ=0x0):aK++,ay>>=0x1;for(;;){if(aJ<<=0x1,aK==ah-0x1){aI['push'](aw(aJ));break;}aK++;}return aI['join']('');}};return ah;}();function aL(aM){return(aL='function'==typeof Symbol&&'symbol'==typeof Symbol['iterato
Oct 13, 2024 05:28:42.949146032 CEST	1236	IN	Data Raw: 69 6e 20 61 58 29 61 52 5b 27 63 61 6c 6c 27 5d 28 61 58 2c 62 31 29 26 26 62 30 5b 27 70 75 73 68 27 5d 28 74 28 62 31 29 2b 27 3a 5c 78 32 30 27 2b 74 28 61 58 5b 62 31 5d 29 29 3b 72 65 74 75 72 6e 27 7b 27 2b 62 30 5b 27 6a 6f 69 6e 27 5d 28 Data Ascii: in aX)aR['call'](aX,b1)&&b0['push'](t(b1)+':\x20'+t(aX[b1]));return'{'+b0['join'](',\x20')+'}';}}var b2;return'\x22'+aX['toString']()['replace'](aU,aT)+'\x22';})},aQ,aR,aS,aT,aU;function b3(){if('undefined'!=typeof Uint8Array&&null!==Uint8Arra
Oct 13, 2024 05:28:42.949157000 CEST	1236	IN	Data Raw: 62 34 5b 27 6c 65 6e 67 74 68 27 5d 2c 62 39 3d 30 78 30 2c 62 61 3d 6e 65 77 20 62 35 28 62 36 29 3b 62 39 3c 62 38 3b 2b 2b 62 39 29 2b 2b 62 61 5b 62 34 5b 62 39 5d 2d 30 78 31 5d 3b 76 61 72 20 62 62 2c 62 63 3d 6e 65 77 20 62 35 28 62 36 29 Data Ascii: b4['length'],b9=0x0,ba=new b5(b6);b9<b8;++b9)++ba[b4[b9]-0x1];var bb,bc=new b5(b6);for(b9=0x0;b9<b6;++b9)bc[b9]=bc[b9-0x1]+ba[b9-0x1]<<0x1;if(b7){bb=new b5(0x1<<b6);var bd=0xf-b6;for(b9=0x0;b9<b8;++b9)if(b4[b9])for(var bk=b9<<0x4\|b4[b9],bl=b6-
Oct 13, 2024 05:28:42.949170113 CEST	1236	IN	Data Raw: 39 5d 7d 29 3b 76 61 72 20 62 61 3d 62 38 5b 27 6c 65 6e 67 74 68 27 5d 2c 62 62 3d 62 38 5b 27 73 6c 69 63 65 27 5d 28 29 3b 69 66 28 21 62 61 29 72 65 74 75 72 6e 5b 62 53 2c 30 78 30 5d 3b 69 66 28 30 78 31 3d 3d 62 61 29 7b 76 61 72 20 62 63 Data Ascii: 9]});var ba=b8['length'],bb=b8['slice']();if(!ba)return[bS,0x0];if(0x1==ba){var bc=new b4(b8[0x0]['s']+0x1);return bc[b8[0x0]['s']]=0x1,[bc,0x1];}b8['sort'](function(b4,b5){return b4['f']-b5['f'];}),b8['push']({'s':-0x1,'f':0x61a9});var bd=b8[
Oct 13, 2024 05:28:42.949186087 CEST	1236	IN	Data Raw: 3d 30 78 31 2c 62 62 3d 66 75 6e 63 74 69 6f 6e 28 62 34 29 7b 62 37 5b 62 38 2b 2b 5d 3d 62 34 3b 7d 2c 62 63 3d 30 78 31 3b 62 63 3c 3d 62 36 3b 2b 2b 62 63 29 69 66 28 62 34 5b 62 63 5d 3d 3d 62 39 26 26 62 63 21 3d 62 36 29 2b 2b 62 61 3b 65 Data Ascii: =0x1,bb=function(b4){b7[b8++]=b4;},bc=0x1;bc<=b6;++bc)if(b4[bc]==b9&&bc!=b6)++ba;else{if(!b9&&ba>0x2){for(;ba>0x8a;ba-=0x8a)bb(0x7ff2);ba>0x2&&(bb(ba>0xa?ba-0xb<<0x5\|0x7012:ba-0x3<<0x5\|0x3011),ba=0x0);}else if(ba>0x3){for(bb(b9),--ba;ba>0x6;ba
Oct 13, 2024 05:28:42.954066038 CEST	1236	IN	Data Raw: 28 64 45 3c 3d 64 46 26 26 64 45 3c 3d 64 47 29 72 65 74 75 72 6e 20 62 50 28 62 36 2c 62 6f 2c 62 34 5b 27 73 75 62 61 72 72 61 79 27 5d 28 62 6d 2c 62 6d 2b 62 6e 29 29 3b 69 66 28 62 4a 28 62 36 2c 62 6f 2c 30 78 31 2b 28 64 47 3c 64 46 29 29 Data Ascii: (dE<=dF&&dE<=dG)return bP(b6,bo,b4['subarray'](bm,bm+bn));if(bJ(b6,bo,0x1+(dG<dF)),bo+=0x2,dG<dF){dA=bp(bI,bM,0x0),dB=bI,dC=bp(bR,bS,0x0),dD=bR;var dH=bp(dx,dy,0x0);bJ(b6,bo,bV-0x101),bJ(b6,bo+0x5,bY-0x1),bJ(b6,bo+0xa,dz-0x4),bo+=0xe;for(c0=0x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49750	116.255.154.157	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:42.223553896 CEST	342	OUT	GET /script/ad_search.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:43.299670935 CEST	868	IN	HTTP/1.1 200 OK Content-Length: 558 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Thu, 28 Jul 2022 18:01:34 GMT Accept-Ranges: bytes ETag: "0d3be12aca2d81:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:40 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b4 94 cf 6e 13 31 10 c6 ef 48 bc 83 e9 25 70 d8 35 51 2f b4 50 0e 24 95 40 2a 50 a1 20 40 8a 84 bc f6 6c 6c ea b5 17 7b 36 7f fa 14 3c 00 27 9e 81 1b 07 de 06 8e bc 02 e3 a4 34 29 c9 ae 44 24 f6 b4 9e f1 f7 9b 19 cf d8 bf be 7d 57 5e 36 15 38 cc 67 c1 20 58 77 f7 e0 d1 9d e1 cb c1 e8 dd f9 29 d3 58 59 76 fe fa c9 d9 b3 01 1b f7 32 ce df 1c 0e 38 1f 8e 86 ec ed d3 d1 f3 33 d6 cf ef b3 51 10 2e 1a 34 de 09 cb f9 e9 8b 71 8f b6 6a c4 fa 98 f3 d9 6c 96 cf 0e 73 1f 26 7c f4 8a cf 13 ae 9f e4 57 bf 19 6e 68 73 85 6a dc 7b 7c 70 ef e1 ed 5b 3b 72 5a a6 62 85 9b 9c 8c 7b 97 3a 1b a4 38 f3 ca 1e 6f 9b 5c 3c d9 95 40 ff e8 e8 68 15 b7 2b 0a 08 d5 ea b4 c6 5d b0 00 96 f0 11 17 16 a2 06 40 8a 19 60 fa b7 49 07 28 6f 66 b1 30 51 9b 0a 4c 2e 1d 47 0d 15 44 fe 21 8b 75 30 6e c2 a3 6f 82 04 be 24 e4 32 c6 5c c4 9a 20 b8 a8 81 20 08 73 e4 64 25 4b 05 ca 88 14 4b 06 00 d7 51 07 ef 2c a4 f0 6a d1 ea 54 66 ca a4 15 31 9d 62 a1 64 cc a4 77 28 8c 83 d0 11 6f 4b 54 91 82 ad e4 16 44 28 cd 9c [TRUNCATED] Data Ascii: n1H%p5Q/P$@*P @ll{6<'4)D$}W^68g Xw)XYv283Q.4qjls&\|Wnhsj{\|p[;rZb{:8o\<@h+]@`I(of0QL.GD!u0no$2\ sd%KKQ,jTf1bdw(oKTD(7JX"._+n8jtK],9vBi]R0SIlj@PCME5IS[i_2`\ sJj+&[l+9mU_VRXM2l:-_wFG2Z_qSO~^HOpv+<=+Gv
Oct 13, 2024 05:28:43.302566051 CEST	346	OUT	GET /script/ad_article_up.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:43.707166910 CEST	439	IN	HTTP/1.1 200 OK Content-Length: 128 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Sun, 04 Nov 2018 13:06:37 GMT Accept-Ranges: bytes ETag: "806ce3373f74d41:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:41 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 74 cb 41 0e 02 21 0c 00 c0 af 6c f6 82 5e 5a 62 e2 45 59 3c fa 09 2e 04 2b 34 6e d9 0d d4 10 7f af 1f 70 ee f3 d8 d2 5b a8 2a 8c c6 4a 6b 3d cc 2e 4e a5 d1 73 09 a6 a8 ee 17 c4 31 06 7c b8 17 16 62 48 15 2b e9 d8 da 0b cf 16 8a ca 7a 5b fa 6f 06 e3 1d 4b 9e 7a 4b ff 27 4b cc 84 27 6b ed 1d f6 9a 83 99 d0 3b 8c 7e 3e 5e bf 03 00 5f 0f a4 83 88 00 00 00 Data Ascii: tA!l^ZbEY<.+4np[*Jk=.Ns1\|bH+z[oKzK'K'k;~>^_
Oct 13, 2024 05:28:44.631949902 CEST	345	OUT	GET /script/baidutuijian.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:45.704854965 CEST	421	IN	HTTP/1.1 200 OK Content-Length: 111 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Mon, 30 Jul 2018 17:16:00 GMT Accept-Ranges: bytes ETag: "04876fc2828d41:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:43 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 6c cc 31 0e 84 20 10 85 e1 de c4 3b 90 a9 b4 70 b7 07 f5 24 34 04 26 64 12 18 12 1c 74 f7 f6 cb c6 d6 e6 35 2f ff 17 8a 6f 19 59 5e 57 25 c1 c4 13 ac 81 4e 75 c8 37 e1 66 21 bb 1a 89 b5 6b 52 d4 7f 8c e0 47 16 97 28 b2 f6 3d c3 6a 2c ec 30 9b 71 78 90 ec bb 5b f7 3b 0e bf 01 00 c1 8d 73 14 6a 00 00 00 Data Ascii: l1 ;p$4&dt5/oY^W%Nu7f!kRG(=j,0qx[;sj
Oct 13, 2024 05:28:46.009735107 CEST	725	OUT	GET /themes/j-spring/style/j-spring/bgw.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:46.415270090 CEST	370	IN	HTTP/1.1 200 OK Content-Length: 121 Content-Type: image/gif Last-Modified: Mon, 08 Sep 2014 19:04:10 GMT Accept-Ranges: bytes ETag: "8d613eac97cbcf1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:43 GMT Data Raw: 47 49 46 38 39 61 f2 03 01 00 b3 00 00 9f 9f 91 ab aa 9b d9 d8 c5 90 90 83 eb eb eb cd cc ba db db db c1 c0 af f3 f3 f3 ba b9 a8 eb ea d6 dc db c8 d1 d0 be ff ff ff 00 00 00 00 00 00 2c 00 00 00 00 f2 03 01 00 00 04 2e 50 ad 92 02 20 2d eb cd bb ff 60 28 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 d8 31 0c 00 81 03 43 10 01 00 3b Data Ascii: GIF89a,.P -`(dihlp,tmx\|p1C;
Oct 13, 2024 05:28:46.581888914 CEST	698	OUT	GET /go/kali.png HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:46.987425089 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 32162 Content-Type: image/png Last-Modified: Wed, 06 Mar 2019 05:18:21 GMT Accept-Ranges: bytes ETag: "24f93c4dcd3d41:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:45 GMT Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 01 1d 08 02 00 00 00 aa b8 ed e4 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 96 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f [TRUNCATED] Data Ascii: PNGIHDRpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmp:CreateDate="2019-03-06T13:07:15+08:00" xmp:ModifyDate="2019-03-06T13:17:58+08:00" xmp:MetadataDate="2019-03-06T13:17:58+08:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:b8f95149-6ddc-264a-8524-130319e72ec4" xmpMM:DocumentID="xmp.did:b8f95149-6ddc-264a-8524-130319e72ec4" xm
Oct 13, 2024 05:28:46.987454891 CEST	1236	IN	Data Raw: 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 62 38 66 39 35 31 34 39 2d 36 64 64 63 2d 32 36 34 61 2d 38 35 32 34 2d 31 33 30 33 31 39 65 37 32 65 63 34 22 3e 20 3c 70 68 6f 74 6f 73 68 6f 70 3a Data Ascii: pMM:OriginalDocumentID="xmp.did:b8f95149-6ddc-264a-8524-130319e72ec4"> <photoshop:TextLayers> <rdf:Bag> <rdf:li photoshop:LayerName="100G" photoshop:LayerText="100G"/> </rdf:Bag> </photoshop:TextLayers> <xmpMM:History> <rdf:Seq> <rdf:li stEvt:
Oct 13, 2024 05:28:46.987471104 CEST	448	IN	Data Raw: 85 ce cc 28 ae cc 2a 51 ac bd e3 0e 5e 81 77 27 37 7d 55 80 61 c5 cb 0b 97 9c 64 25 4c fb 93 0b e6 12 3a 2c a6 a7 07 55 4d 88 90 1e 09 ef 2e 4e e4 58 b5 02 ef 2e cb e8 9d e7 e6 1b 5e 88 88 64 05 c8 2f 21 3f 66 7b 58 cb da a3 8e bb ab 92 4a 8a 30 Data Ascii: (*Q^w'7}Uad%L:,UM.NX.^d/!?f{XJ0?Z&#D\|W5!8hN'({G[#+)Dll]dv,D)rBg+y YBWtr,<({w6wYNNd5Q}BYE'L4!CJiIc
Oct 13, 2024 05:28:46.987487078 CEST	1236	IN	Data Raw: de 5e 6f bf f5 6a 59 59 d9 af bf fd 51 5e 5e a9 96 70 71 60 4e 96 10 56 89 8a b6 4e 3e da ce 86 41 11 29 3f 22 d6 60 14 1b d3 b1 47 8f ae 00 70 e2 c4 99 8b e9 39 ce 68 62 dc d8 27 c2 c3 3b e4 e4 5c de b2 f5 1f d5 85 3f 33 6b 4a 64 54 38 00 f8 f8 Data Ascii: ^ojYYQ^^pq`NVN>A)?"`Gp9hb';\?3kJdT8_Gsytd6pDLE5c!!wuonC:_@vVGQT^]M]:GtXkLik.$2*7_er%LCf"Lx":^
Oct 13, 2024 05:28:46.987503052 CEST	1236	IN	Data Raw: ab 45 88 ca 2b af d6 1c 3b 92 b4 f1 af 1d 00 c0 0d eb ff de b5 17 07 45 5a ad 16 00 06 3c d6 37 29 b9 de c1 c7 c5 46 4c 7f 7a 32 00 58 2c 96 e3 c9 a9 48 c9 be bd bb 46 46 45 00 c0 e6 bf b6 19 f2 8b 48 be 4d cb 1c 55 42 2c 45 f2 29 3c 82 47 45 64 Data Ascii: E+;EZ<7)FLz2X,HFFEHMUB,E)<GEd]Pr5`1M;n9Ie6'O0s{#!_GC3,Qml-Bt<)e??d13h4d fgI)OOIe7K"/M:>KgT^c
Oct 13, 2024 05:28:46.987518072 CEST	1236	IN	Data Raw: d3 f5 5d 3b ff c1 d0 24 d8 3b 2d 5c 8b a6 e9 c5 8b e6 a2 39 66 34 e4 07 f8 fb 06 f8 d7 67 08 c5 c5 25 68 19 99 31 73 aa d9 7c fd c2 45 89 2f 94 f0 18 4a 5d 81 3e 24 f8 c5 e7 9f 66 de a1 01 d0 89 31 bc a5 8a 87 2e 54 1f 34 6d fa c4 84 2e f1 16 8b Data Ascii: ];$;-\9f4g%h1s\|E/J]>$f1.T4m.E!>,.dE!-a"wlIwY '6`W[8"EdT1o1N!=;#"XTX\]mm' .)OK=KjGL1nz_\z(q<I.pk
Oct 13, 2024 05:28:46.987534046 CEST	1236	IN	Data Raw: b4 32 28 10 22 4b 5b 05 44 18 4e 90 84 43 0e 2a 29 29 44 9c a1 3e 55 15 48 20 80 44 3d c2 94 5c 01 8f 83 7b 31 0e 26 40 e2 63 e7 a4 a4 90 6b c1 8e a0 dd 2a 92 f3 9e b2 8a 6a 88 f3 48 98 3b 00 0d 20 31 93 30 c9 35 4d 59 7a 93 a4 32 b2 48 2d 9c 8b Data Ascii: 2("K[DNC))D>UH D=\{1&@ckjH; 105MYz2H-+AEi+iB-x:<x~uz2xUVt!{"!"gtM]Brv`LT'gf1g:Hr^y)w]E$+c~3Kr<s1lwwF5H
Oct 13, 2024 05:28:46.987550020 CEST	328	IN	Data Raw: 4f a4 b5 5e b7 71 ea b4 a7 d0 c7 ec ac 9c 3d 7b 0e 26 a7 a4 82 f0 f3 e8 14 1b f1 e1 47 8b 00 60 db d6 9d 92 36 94 97 67 64 95 98 4c e6 f4 0b 19 37 6e 96 f6 ee dd 43 1f 12 bc 6d eb 4e c4 13 1d 1d 09 00 41 6d 02 03 02 fc b4 5a 2d 62 46 93 4d 88 42 Data Ascii: O^q={&G`6gdL7nCmNAmZ-bFMBAM-\|}t}l%%&(,6.]_@ri< gAN\|z732/F{Ghy7=ztlhVw?6mC0H
Oct 13, 2024 05:28:47.077923059 CEST	568	IN	Data Raw: be 59 f1 39 00 d8 6c b6 3f 37 6e 13 32 85 10 7d d0 67 9f bf af d1 68 c4 7b c7 22 8d 46 83 26 03 73 4a 98 4c e6 83 fb ff fd 6b f3 df e8 23 ab c5 7e 7d bb 0d 1f 9e e8 ee ee 5e 56 56 be 62 c5 2a 66 c6 42 42 8e 4f 1e 9e 5d 55 05 b6 ee 88 1e 5a 6d 73 Data Ascii: Y9l?7n2}gh{"F&sJLk#~}^VVb*fBBO]UZmsm1bLt^lZ,s0I!CgRw!tr,@v%d\|~qvtt2<[NLM:HD_^^)$60e&f_uo
Oct 13, 2024 05:28:47.296385050 CEST	1236	IN	Data Raw: 86 3f 36 09 c1 5c de de de cc 8f 8e 6c 1b 29 0b 34 6a 83 19 07 91 16 47 bc 3b 4d d3 cc 77 4c 23 da b1 63 0f 00 8c 7e 32 71 ec b8 27 b1 ad 9b 4d d7 4f 9e 3c 93 9c 7c 8a 35 43 16 2e 78 2d 3e 21 0e 00 fe 58 f7 d7 b6 1d 7b b9 ca ef d8 b1 c7 6a b5 de Data Ascii: ?6\l)4jG;MwL#c~2q'MO<\|5C.x->!X{jc5KbcvX*++V+JLx`9-]z1sQh@pk,FlfYnGJ^9NJJ>3apVkrm[v/u5jXTt$rq
Oct 13, 2024 05:28:47.296418905 CEST	1236	IN	Data Raw: f5 d9 67 ef 31 fd bd c5 62 41 b7 40 d1 81 85 92 62 13 c2 70 0a 8b 4a 64 55 17 b7 2e ee 6e 29 2f a9 f6 b2 1a 91 d5 84 c4 c7 33 eb 96 96 96 31 3f 06 b7 ad c5 cb fd fc 5a e7 19 ae a1 c2 bc bc fc 07 0f 1e 44 45 75 d4 87 04 bf 31 ef c5 85 8b 3e 91 6c Data Ascii: g1bA@bpJdU.n)/31?ZDEu1>lkxt+wMCCBA<:F7nY}n8fY4}Bq3zv0a&V%JrEVl6 :8O"Nc<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	116.255.154.157	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:42.223649025 CEST	346	OUT	GET /script/ad_sidebar_up.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:43.321024895 CEST	497	IN	HTTP/1.1 200 OK Content-Length: 186 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Sun, 14 Jul 2019 22:08:17 GMT Accept-Ranges: bytes ETag: "80de7ea3903ad51:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:40 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 9c cf df 0a 82 30 14 c7 f1 fb a0 77 10 6f 2c 2f 76 90 84 fe a9 bd 88 10 cb 8e db d0 6d b6 1d 19 f5 f4 49 b7 16 45 d7 e7 f7 85 cf 81 74 b9 b8 da 66 d4 68 88 05 a7 08 7b b3 8a 0b 1e 49 87 6d 59 27 92 68 38 00 84 10 d8 5d 79 a9 34 2a d6 18 30 48 c1 ba 0e b6 bb 8c 49 d2 fd a9 f4 53 5a 27 55 a1 b4 88 bc 6b 3e a7 c2 42 c7 7b c5 06 23 ea 24 82 aa 00 5e c5 eb e3 5b c6 c5 4d 83 bf 8e df 1e e8 55 8b b0 cf 37 2f fd af ee 1b d1 9c 9d c2 5f 80 c6 ea 61 24 74 90 e5 f9 ef 08 a5 b9 40 b8 7b 7d 16 0f 39 b7 3c 07 00 72 b3 af e8 ce 01 00 00 Data Ascii: 0wo,/vmIEtfh{ImY'h8]y4*0HISZ'Uk>B{#$^[MU7/_a$t@{}9<r
Oct 13, 2024 05:28:43.322371006 CEST	349	OUT	GET /script/ad_article_round.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:43.732075930 CEST	518	IN	HTTP/1.1 200 OK Content-Length: 208 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Fri, 13 Oct 2017 19:26:00 GMT Accept-Ranges: bytes ETag: "054d4195944d31:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:41 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 74 4f c1 8a c2 30 14 bc 2f ec 3f 04 2f 55 c1 26 5a 76 59 12 77 bf a4 97 90 bc 26 4f 9a 34 34 6f 6d eb d7 1b e9 c1 8b 1e 1e bc 99 61 98 19 be ff fc b0 83 f9 0f 10 a9 9e 46 24 e8 e3 76 73 b6 78 65 99 96 1e 7e db 6a 42 4b 5e 36 cd 77 9a 95 07 74 9e e4 e9 47 14 d0 f5 83 26 d9 43 47 2a 69 6b 31 ba 03 0d 49 3e a4 a0 47 87 51 1e cb cf be 9e a7 6e 07 8c 16 66 79 12 42 28 d6 56 7f 9b 9d 7a 59 20 9b 11 13 31 5a d2 a3 02 c1 4c fc a2 af 7a a5 db 8a e5 d1 14 de 13 25 c9 f9 b1 5e 30 7b 0c 80 b5 89 dc cc c9 d9 2e 85 49 83 75 a1 be e4 12 73 e6 ab f3 6d 1e 2f 8b 57 71 cf ef 03 00 12 13 a9 54 14 01 00 00 Data Ascii: tO0/?/U&ZvYw&O44omaF$vsxe~jBK^6wtG&CG*ik1I>GQnfyB(VzY 1ZLz%^0{.Iusm/WqT
Oct 13, 2024 05:28:44.631623983 CEST	343	OUT	GET /script/tj-bottom2.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:45.041027069 CEST	488	IN	HTTP/1.1 200 OK Content-Length: 178 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Wed, 30 Aug 2023 09:02:14 GMT Accept-Ranges: bytes ETag: "02f17ab20dbd91:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:42 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 1c 8d c1 ce c1 50 14 84 bf ed ff 04 b6 7f ba 41 22 ed 9e 12 0b 6b 09 b6 44 aa ad 6a d0 36 5c 29 b6 36 36 c2 db 88 17 91 78 00 af 60 89 a9 4c 6e 72 ee cc 9c ef 7c de 01 29 3e 1b 96 84 24 18 6c 72 56 c4 9a 42 16 72 2a 58 b8 78 fc 33 93 1f 32 a5 c9 90 b2 7e 46 ca a8 e3 48 f9 4f 36 3b 6d ae 95 c5 3f 5e 2c c7 17 c3 21 d2 15 47 49 aa 7d c3 58 e4 a2 57 5c 33 6c f5 0a 62 8b 5b 16 cc af 87 fb a0 16 3d f6 ed c9 5f f4 1c e5 bd f4 fc ea 76 4e 97 a4 d4 9f 1d 5d 31 3c f5 2c aa 34 f8 0e 00 db ed 8b c1 bc 00 00 00 Data Ascii: PA"kDj6\)66x`Lnr\|)>$lrVBr*Xx32~FHO6;m?^,!GI}XW\3lb[=_vN]1<,4
Oct 13, 2024 05:28:45.042140007 CEST	338	OUT	GET /image/beian.png HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:45.452172041 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 19256 Content-Type: image/png Last-Modified: Wed, 30 Jan 2019 02:59:21 GMT Accept-Ranges: bytes ETag: "19d6bbcc47b8d41:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:42 GMT Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 06 00 00 00 8d 89 1d 0d 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 3e 05 00 d8 a9 93 dc 17 00 d8 a2 1c a9 08 00 8d 01 00 99 28 47 24 02 40 bb 00 60 55 81 52 2c 02 c0 c2 00 a0 ac 40 22 2e 04 c0 ae 01 80 59 b6 32 47 02 80 bd [TRUNCATED] Data Ascii: PNGIHDRpHYsMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I>(G$@`UR,@".Y2GvX@`B, 8C L0_pHK3w!lBa)f"#HL8?flko">!N_puk[Vh]3Zzy8@P<%b0>3o~@zq@qanvRB1n#)4\,XP"MyRD!2wONl~Xv@~-g42y@+\LD*AaD@$<BAT:18\p`Aa!:b""aH4 Q"rBj]H#-r9\@ 2G1Qu@st4]k=Kut}c1fa\E`X&cX5V5cX7va$^lGXLXC%#W1'"O%zxb:XF&!!%^'_H$N!%2IIkHH-S>
Oct 13, 2024 05:28:45.452189922 CEST	1236	IN	Data Raw: 10 69 9c 4c 26 eb 90 6d c9 de e4 08 b2 80 ac 20 97 91 b7 90 0f 90 4f 92 fb c9 c3 e4 b7 14 3a c5 88 e2 4c 09 a2 24 52 a4 94 12 4a 35 65 3f e5 04 a5 9f 32 42 99 a0 aa 51 cd a9 9e d4 08 aa 88 3a 9f 5a 49 6d a0 76 50 2f 53 87 a9 13 34 75 9a 25 cd 9b Data Ascii: iL&m O:L$RJ5e?2BQ:ZImvP/S4u%C-igih/tEkwHb(k{/LT02goUX**\|:V~TUsU?yTU^V}FUPU6RwRPQ__cFHTc!
Oct 13, 2024 05:28:45.452203989 CEST	1236	IN	Data Raw: 86 f0 0d ad 1b f1 8d e5 1b 5f 6d 4a de 74 a1 7a 6a f5 8e cd b4 cd ca cd 03 35 61 35 ed 5b cc b6 ac db f2 a1 36 a3 f6 7a 9d 7f 5d cb 56 fd ad ab b7 be d9 26 da d6 bf dd 77 7b f3 0e 83 1d 15 3b de ef 94 ec bc b5 2b 78 57 6b bd 45 7d f5 6e d2 ee 82 Data Ascii: _mJtzj5a5[6z]V&w{;+xWkE}nb~GwO{{EjtolmR6H:powpZ*A'\|{PHy+:u-m=^G~1cu5W(=dN?=yLk]Q]gC?tL
Oct 13, 2024 05:28:45.452214956 CEST	1236	IN	Data Raw: 73 68 6f 70 20 43 43 20 32 30 31 34 20 28 57 69 6e 64 6f 77 73 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 31 35 2d 31 31 2d 31 30 54 31 34 3a 30 34 Data Ascii: shop CC 2014 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2015-11-10T14:04:50+08:00</xmp:CreateDate> <xmp:MetadataDate>2015-11-10T14:04:50+08:00</xmp:MetadataDate> <xmp:ModifyDate>2015-11-10T14:04:50+08:00</xmp:Modify
Oct 13, 2024 05:28:45.452229023 CEST	896	IN	Data Raw: 34 3a 30 34 3a 35 30 2b 30 38 3a 30 30 3c 2f 73 74 45 76 74 3a 77 68 65 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 Data Ascii: 4:04:50+08:00</stEvt:when> <stEvt:softwareAgent>Adobe Photoshop CC 2014 (Windows)</stEvt:softwareAgent> <stEvt:changed>/</stEvt:changed> </rdf:li> </rdf:Seq> </xmpMM:Histo
Oct 13, 2024 05:28:45.452234983 CEST	1236	IN	Data Raw: 66 66 3a 52 65 73 6f 6c 75 74 69 6f 6e 55 6e 69 74 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3e 31 3c 2f 65 78 69 66 3a 43 6f 6c 6f 72 53 70 61 63 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 65 78 69 66 3a 50 69 Data Ascii: ff:ResolutionUnit> <exif:ColorSpace>1</exif:ColorSpace> <exif:PixelXDimension>20</exif:PixelXDimension> <exif:PixelYDimension>20</exif:PixelYDimension> </rdf:Description> </rdf:RDF></x:xmpmeta>
Oct 13, 2024 05:28:45.452246904 CEST	224	IN	Data Raw: 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Oct 13, 2024 05:28:45.762438059 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Oct 13, 2024 05:28:45.762451887 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Oct 13, 2024 05:28:45.762465000 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Oct 13, 2024 05:28:45.762475967 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Oct 13, 2024 05:28:46.342546940 CEST	732	OUT	GET /themes/j-spring/style/j-spring/nav_bgline.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:46.758755922 CEST	303	IN	HTTP/1.1 200 OK Content-Length: 55 Content-Type: image/gif Last-Modified: Wed, 05 Dec 2012 09:07:00 GMT Accept-Ranges: bytes ETag: "70f374e2c7d2cd1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:45 GMT Data Raw: 47 49 46 38 39 61 02 00 18 00 91 00 00 00 00 00 ff ff ff 73 73 73 ff ff ff 21 f9 04 01 00 00 03 00 2c 00 00 00 00 02 00 18 00 00 02 08 14 8c a7 c9 eb 0d 5d 01 00 3b Data Ascii: GIF89asss!,];
Oct 13, 2024 05:28:46.868356943 CEST	729	OUT	GET /themes/j-spring/style/j-spring/toppicw.jpg HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:47.278666973 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 35772 Content-Type: image/jpeg Last-Modified: Mon, 08 Sep 2014 19:04:13 GMT Accept-Ranges: bytes ETag: "4729e9ad97cbcf1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:45 GMT Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 88 03 e6 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 [TRUNCATED] Data Ascii: JFIF``"ExifMMDucky<CC"}!1AQa"q2#BR$3br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz?L@[n>m6+PnU$swz^{(FH!u=F5RTOS4x=cm9Ov;H[=,W]ioP><DvhQv1C7;Cynp9sk-urFc,p8=#jo7&$'\1U{)iblM3iKaVe867?j-%k0M&~1mo_KQB>a
Oct 13, 2024 05:28:55.194734097 CEST	836	OUT	GET /function/c_html_js.asp?act=batch&view=&inculde=mod_randomsortnew%3Drandomsortnew%2Cmod_randomsortallrand%3Drandomsortallrand%2C&count=spn319%3D319%2C HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:55.672684908 CEST	275	IN	HTTP/1.1 200 OK Cache-Control: private Date: Sun, 13 Oct 2024 03:28:53 GMT Content-Type: application/x-javascript; Charset=UTF-8 Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Encoding: gzip Vary: Accept-Encoding Transfer-Encoding: chunked Data Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 04 00 0d 0a Data Ascii: a
Oct 13, 2024 05:28:56.335774899 CEST	731	OUT	GET /themes/j-spring/style/j-spring/pointblue.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:56.745666027 CEST	415	IN	HTTP/1.1 200 OK Content-Length: 166 Content-Type: image/gif Last-Modified: Wed, 05 Dec 2012 09:07:00 GMT Accept-Ranges: bytes ETag: "654eb5e2c7d2cd1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:54 GMT Data Raw: 47 49 46 38 39 61 09 00 09 00 c4 00 00 a1 98 6e b9 b1 90 e5 e1 cc e4 df cc ad a5 7e a1 99 6e d6 d1 b9 c8 c1 a4 e4 df cc b9 b2 91 d6 d1 b9 ad a5 7e e4 e0 cc e4 e0 cc 9f 96 6d ac a4 7e d8 d3 b9 c8 c2 a4 ba b3 91 a0 97 6e c8 c2 a4 a0 97 6e c8 c2 a4 ba b3 91 ad a5 7e d7 d1 b9 ff ff ff 98 8f 62 28 28 28 28 28 28 28 28 28 28 28 28 2c 00 00 00 00 09 00 09 00 00 05 2b e0 26 8e a4 66 9e 9a a8 15 ce 04 54 e9 a6 11 d8 83 2d b1 76 49 57 90 e4 96 88 85 72 c8 41 0c 19 45 26 87 68 0c 18 82 18 89 14 02 00 3b Data Ascii: GIF89an~n~m~nn~b((((((((((((,+&fT-vIWrAE&h;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	116.255.154.157	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:42.323523045 CEST	343	OUT	GET /script/ad_daohang.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:43.424892902 CEST	344	IN	HTTP/1.1 200 OK Content-Length: 36 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Fri, 01 Dec 2017 05:14:22 GMT Accept-Ranges: bytes ETag: "0b4a3f636ad31:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:40 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 04 c1 31 01 00 00 00 40 b0 fe 99 1c 22 a9 60 0b 1f 00 e1 97 10 01 03 00 00 00 Data Ascii: 1@"`
Oct 13, 2024 05:28:43.425998926 CEST	361	OUT	GET /themes/j-spring/style/j-spring/bg2.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:44.487791061 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 13656 Content-Type: image/gif Last-Modified: Wed, 05 Dec 2012 09:06:52 GMT Accept-Ranges: bytes ETag: "3cfb93ddc7d2cd1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:41 GMT Data Raw: 47 49 46 38 39 61 2d 00 f1 02 f7 00 00 00 00 00 ff ff ff f0 ec e0 f0 ed de ef ec dd e5 ee d3 e4 ed d2 e9 f2 d7 e8 f1 d6 e7 f0 d5 e6 ef d4 e3 eb d3 e8 f0 d8 e6 ee d6 e5 ed d5 e7 eb d4 e6 ea d3 e5 e9 d2 f0 f4 dd ef f3 dc ee f2 db ed f1 da eb ef d8 ea ee d7 e9 ed d6 e8 ec d5 e8 ec d3 e6 ea d1 e4 e8 cf ee f2 d9 ed f1 d8 ec f0 d7 ea ee d5 e1 e3 cb df e1 c9 e9 eb d3 e7 e9 d1 e5 e7 cf e3 e5 cd f2 f4 dc f0 f2 da ee f0 d8 ec ee d6 eb ed d5 df e1 cb e7 e9 d3 e5 e7 d1 e2 e4 ce e1 e3 cd f1 f3 dd ef f1 db ec ee d8 eb ed d7 e9 eb d5 d9 d9 c1 e3 e3 cb e1 e1 c9 df df c7 de de c6 dd dd c5 dc dc c4 ec ec d4 eb eb d3 e9 e9 d1 e6 e6 ce e4 e4 cc f4 f4 dc f2 f2 da f0 f0 d8 ee ee d6 d8 d7 c2 e1 e0 cb e0 df ca df de c9 de dd c8 dd dc c7 ea e9 d4 e9 e8 d3 e8 e7 d2 e7 e6 d1 e6 e5 d0 e5 e4 cf e4 e3 ce e3 e2 cd e2 e1 cc f4 f3 de f3 f2 dd f2 f1 dc f1 f0 db f0 ef da ef ee d9 ee ed d8 ed ec d7 ec eb d6 eb ea d5 e9 e8 d4 e7 e6 d2 e5 e4 d0 e3 e2 ce e1 e0 cc f6 f5 e0 f5 f4 df f3 f2 de f1 f0 dc ef ee da ed ec d8 eb ea d6 dc da c3 d9 [TRUNCATED] Data Ascii: GIF89a-!,-q B"y"PD^j5My6lHYxFD<=z!AsxQ7nHb:~M0!N"#p3PK, pdu+W:t,Kauj5:(>h)Y`
Oct 13, 2024 05:28:44.487807989 CEST	1236	IN	Data Raw: 63 07 e4 10 3a 41 ec f8 f0 e1 30 07 90 22 78 7a 04 c6 43 24 4f 1d 3b 51 db 20 fd a1 02 84 48 15 23 7e f8 c8 63 bb 2a 1d 3c 26 7f 10 21 58 82 36 9d 1b 6e ec 14 49 e1 63 44 d6 15 76 ea f4 98 95 4b 8e 5c 22 2b 4c 70 ff 50 01 9c 04 9d 22 73 e0 ea 58 Data Ascii: c:A0"xzC$O;Q H#~c*<&!X6nIcDvK\"+LpP"sXd=2)0xNtQ3G?!A BGDC/F\|p_t@BtyT?C%EwVpB+`)>1EB?>t8([T!eG6
Oct 13, 2024 05:28:44.487821102 CEST	1236	IN	Data Raw: 13 ba 90 85 2c 64 e0 02 29 98 01 13 9a 70 0c 63 30 c3 19 7f 68 02 42 1f 50 03 0b 60 a0 05 11 e8 82 16 ac d1 0c 96 32 61 0b 5d 68 42 0d 64 c0 85 2d 2c b4 0b 5d 78 42 12 a8 10 85 26 d0 14 b0 34 45 ec 31 94 a1 87 3e 20 b6 06 34 b0 c0 05 b0 e0 05 b9 Data Ascii: ,d)pc0hBP`2a]hBd-,]xB&4E1> 4 `^i`@)e\g*. UL8B0&)m&jcX5PjJ@0p@ OdZS,`!;F!."}r!Ipm
Oct 13, 2024 05:28:44.487832069 CEST	672	IN	Data Raw: 64 73 09 a8 73 b2 b7 49 ef f3 73 24 20 34 13 58 40 7c 42 37 60 b1 2b cb 64 16 17 f0 74 44 10 75 53 37 07 09 d1 26 45 80 75 9c b4 75 2a c8 82 b1 e1 23 61 52 04 76 00 3b 9f 52 18 68 07 76 32 c1 76 6e 67 42 71 b7 10 2c 52 77 41 68 11 28 40 84 90 58 Data Ascii: dssIs$ 4X@\|B7`+dtDuS7&Euu*#aRv;Rhv2vngBq,RwAh(@X@@roT5gx{"y\\|@;y5b,zV85Qyr2)h{\|:#x`wDE0&w}}~;0~?+yFQ R7H$"-YS(Qr
Oct 13, 2024 05:28:44.799916983 CEST	1236	IN	Data Raw: 27 1c 53 59 9f 08 81 95 f9 a9 10 fb 19 3b 04 9a 91 24 70 02 d4 13 26 62 d2 71 05 7a 40 67 79 8c 6a 79 03 6c c9 a0 d4 f1 7f 10 ea 1a 02 41 04 a2 a4 3a 79 50 3d 80 92 02 19 4a 81 db 58 16 dd f8 97 7c 09 a2 35 02 aa 25 7a a2 3d 34 13 35 41 46 ef 93 Data Ascii: 'SY;$p&bqz@gyjylA:yP=JX\|5%z=45AFF.02:5\|@BL:[qBACHFz%N.pTFS\;^nPC@!1&!7yky0p:$0d1$VKDj*+BatP)`
Oct 13, 2024 05:28:44.799976110 CEST	1236	IN	Data Raw: ec e0 56 51 d0 05 29 80 01 3c d5 64 40 25 57 59 70 04 46 70 04 31 c5 04 6f c6 55 13 a5 05 4d 80 04 4a 00 05 5a 90 05 a0 9d 05 57 ff e0 6a 57 05 50 cc c0 0c 4c 80 05 29 d0 02 67 95 56 9d e5 58 51 10 db 4e 50 6e a9 d5 05 57 35 51 7b 8d 04 98 3d 61 Data Ascii: VQ)<d@%WYpFp1oUMJZWjWPL)gVXQNPnW5Q{=aD] L0bt5bO`X5h\0VZOyWFeL zpTXP/205U[TUSucfr4UX]S%cLPl2ST6QTUUn%cHPd{6X2OtP}UW54U]
Oct 13, 2024 05:28:44.800013065 CEST	1236	IN	Data Raw: 66 10 a8 1a 69 ac 19 4f 19 42 da 12 68 0b 34 66 98 0c 83 0a 26 8a c2 89 f0 ae d2 02 b0 9a a8 29 aa 0f 2d b6 90 6b 06 19 5a ea a3 0b 84 fc f8 a3 0f 86 ba 28 2d 8b 2d f3 a2 21 82 24 a2 58 08 27 ba b2 10 48 0b 2d 9a 61 e6 cc ac 1e a8 21 86 19 9a 78 Data Ascii: fiOBh4f&)-kZ(--!$X'H-a!xb,i(&K- `Y#hBAl`!.)0p($>/jj-\=@lz7j"/ @!>BfzjbM:&"+y&r$Hj
Oct 13, 2024 05:28:44.800046921 CEST	1236	IN	Data Raw: c2 5d 59 62 d6 2b f4 c5 4e 65 68 d5 95 b0 44 57 ce 12 42 20 eb 92 02 15 f6 c7 d9 83 56 e5 a0 45 dd 57 07 23 6a ba 4e f2 a9 09 51 50 22 aa 56 54 b8 26 a4 6d 10 7e 78 83 1f 0a 01 9e ab 71 13 29 2d 71 9e ae 48 1a 18 53 71 a5 09 65 d0 82 12 26 c2 84 Data Ascii: ]Yb+NehDWB VEW#jNQP"VT&m~xq)-qHSqe&+\qu\&ma{&X-CK"pTS,3k(4DF-^gba8[~JZB:[WXD'(0Uy)4es&'y%eTR2A
Oct 13, 2024 05:28:44.800086975 CEST	896	IN	Data Raw: 82 2f e8 49 35 70 02 35 b0 1a a4 f4 49 26 00 03 30 90 ca 34 e8 82 34 d8 82 ad 54 83 34 f0 c9 f5 e8 42 e7 40 83 2a 18 4a f0 30 83 2b 00 83 31 80 02 34 30 83 a8 fc 02 e8 f8 02 26 b0 1a 26 10 03 31 70 82 ae 8c 8d 95 fc 82 99 d4 93 2f 70 02 ac e4 4a Data Ascii: /I5p5I&044T4B@*J0+140&&1p/pJ48Jd41L/PlD.PLkI5L0K&30hK(Q0@JHD5iJd}04hJJ<I&3tt0xJ41J(JTn7\J0
Oct 13, 2024 05:28:47.593389988 CEST	1236	IN	Data Raw: cd d2 4e 9b 1a 99 dd d2 cb e5 95 92 9d d9 95 84 cc 0a e5 95 8e 30 53 92 c4 d9 8d a5 52 ef 14 4b df 74 56 d7 ec 54 47 45 ca ef c4 dc 0e cd 56 ff a4 c4 5a 95 ed d1 86 b8 c9 87 4a 5c 30 e8 99 c2 f4 ca 71 35 d3 e7 cc 4f a7 9c 53 ba f4 ca 8d 3d d2 65 Data Ascii: N0SRKtVTGEVZJ\0q5OS=e-EO]LOEQ)EJki\ZpSeL3OVXuYLK=Ju[<KOeTD]IOfJ_
Oct 13, 2024 05:28:47.593416929 CEST	224	IN	Data Raw: 71 58 8f f6 5d df 84 57 f7 f3 4c c0 76 65 c7 04 4d b0 74 4a 90 84 4b a8 84 19 8f f5 34 07 77 4c 30 77 17 bf f6 55 5f 77 49 60 84 40 8f 04 4a d0 84 6e 97 f2 34 a7 84 1a bf f1 1c 67 73 4f 97 72 29 87 f4 46 0f f2 48 a0 f3 4a 30 76 4d 80 84 47 40 76 Data Ascii: qX]WLveMtJK4wL0wU_wI`@Jn4gsOr)FHJ0vMG@v\[s+,Ov5{2vWrQtg7i4u6xBqNL`W#sMI(J@tuQZsOIgh7wKs1r[u*z4_EyX^tnX/4uwJ_wv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49753	116.255.154.157	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:42.329157114 CEST	342	OUT	GET /script/ad_banner.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:43.427831888 CEST	262	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: application/x-javascript Last-Modified: Mon, 05 Nov 2018 07:03:14 GMT Accept-Ranges: bytes ETag: "96b8be9ed574d41:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:40 GMT
Oct 13, 2024 05:28:44.633121014 CEST	347	OUT	GET /script/ad_article_pic.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:45.042861938 CEST	262	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: application/x-javascript Last-Modified: Sun, 12 Feb 2017 06:47:12 GMT Accept-Ranges: bytes ETag: "7043ebd6fb84d21:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:42 GMT
Oct 13, 2024 05:28:45.043859959 CEST	348	OUT	GET /script/ad_article_down.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:45.453942060 CEST	262	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: application/x-javascript Last-Modified: Fri, 04 Jan 2019 16:29:48 GMT Accept-Ranges: bytes ETag: "f676b1b54aa4d41:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:42 GMT
Oct 13, 2024 05:28:45.456954002 CEST	345	OUT	GET /script/ad_all_float.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:45.867588997 CEST	262	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: application/x-javascript Last-Modified: Mon, 26 Aug 2024 16:33:40 GMT Accept-Ranges: bytes ETag: "5aac26b5d5f7da1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:43 GMT
Oct 13, 2024 05:28:46.010037899 CEST	728	OUT	GET /themes/j-spring/style/j-spring/nav_bg.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:46.423196077 CEST	418	IN	HTTP/1.1 200 OK Content-Length: 169 Content-Type: image/gif Last-Modified: Wed, 05 Dec 2012 09:06:59 GMT Accept-Ranges: bytes ETag: "1dd42fe2c7d2cd1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:43 GMT Data Raw: 47 49 46 38 39 61 02 00 18 00 c4 00 00 00 00 00 ff ff ff 76 76 76 4d 4d 4d 4b 4b 4b 48 48 48 45 45 45 44 44 44 42 42 42 3e 3e 3e 3a 3a 3a 36 36 36 32 32 32 30 30 30 2e 2e 2e 2c 2c 2c 2a 2a 2a 25 25 25 21 21 21 1d 1d 1d 19 19 19 15 15 15 0a 0a 0a ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 17 00 2c 00 00 00 00 02 00 18 00 00 05 26 a0 20 58 d6 f3 34 0d 00 54 15 45 4d 93 24 45 11 04 39 0e c3 2c 8b a2 24 09 04 c2 60 28 14 08 84 c1 40 a5 3a 1c 42 00 3b Data Ascii: GIF89avvvMMMKKKHHHEEEDDDBBB>>>:::666222000...,,,***%%%!!!!,& X4TEM$E9,$`(@:B;
Oct 13, 2024 05:28:46.579637051 CEST	702	OUT	GET /image/2000G.png HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:46.990158081 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 32482 Content-Type: image/png Last-Modified: Wed, 23 Aug 2017 06:25:50 GMT Accept-Ranges: bytes ETag: "4a3569aad81bd31:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:45 GMT Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d8 00 00 00 3a 08 02 00 00 00 05 a2 b9 f2 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4d 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 00 b0 53 b3 64 0a 00 94 00 00 6c 79 7c 42 22 00 aa 0d 00 ec f4 49 3e 05 00 d8 a9 93 dc 17 00 d8 a2 1c a9 08 00 8d 01 00 99 28 47 24 02 40 bb 00 60 55 81 52 2c 02 c0 c2 00 a0 ac 40 22 2e 04 c0 ae 01 80 59 b6 32 47 02 80 bd [TRUNCATED] Data Ascii: PNGIHDR:pHYs.#.#x?vMiCCPPhotoshop ICC profilexSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.TSdly\|B"I>(G$@`UR,@".Y2GvX@`B, 8C L0_pHK3w!lBa)f"#HL8?flko">!N_puk[Vh]3Zzy8@P<%b0>3o~@zq@qanvRB1n#)4\,XP"MyRD!2wONl~Xv@~-g42y@+\LD*AaD@$<BAT:18\p`Aa!:b""aH4 Q"rBj]H#-r9\@ 2G1Qu@st4]k=Kut}c1fa\E`X&cX5V5cX7va$^lGXLXC%#W1'"O%zxb:XF&!!%^'_H$N!%2IIkHH-S>
Oct 13, 2024 05:28:46.990176916 CEST	1236	IN	Data Raw: 10 69 9c 4c 26 eb 90 6d c9 de e4 08 b2 80 ac 20 97 91 b7 90 0f 90 4f 92 fb c9 c3 e4 b7 14 3a c5 88 e2 4c 09 a2 24 52 a4 94 12 4a 35 65 3f e5 04 a5 9f 32 42 99 a0 aa 51 cd a9 9e d4 08 aa 88 3a 9f 5a 49 6d a0 76 50 2f 53 87 a9 13 34 75 9a 25 cd 9b Data Ascii: iL&m O:L$RJ5e?2BQ:ZImvP/S4u%C-igih/tEkwHb(k{/LT02goUX**\|:V~TUsU?yTU^V}FUPU6RwRPQ__cFHTc!
Oct 13, 2024 05:28:46.990194082 CEST	1236	IN	Data Raw: 86 f0 0d ad 1b f1 8d e5 1b 5f 6d 4a de 74 a1 7a 6a f5 8e cd b4 cd ca cd 03 35 61 35 ed 5b cc b6 ac db f2 a1 36 a3 f6 7a 9d 7f 5d cb 56 fd ad ab b7 be d9 26 da d6 bf dd 77 7b f3 0e 83 1d 15 3b de ef 94 ec bc b5 2b 78 57 6b bd 45 7d f5 6e d2 ee 82 Data Ascii: _mJtzj5a5[6z]V&w{;+xWkE}nb~GwO{{EjtolmR6H:powpZ*A'\|{PHy+:u-m=^G~1cu5W(=dN?=yLk]Q]gC?tL
Oct 13, 2024 05:28:46.990209103 CEST	1236	IN	Data Raw: 73 68 6f 70 20 43 43 20 32 30 31 37 20 28 57 69 6e 64 6f 77 73 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 31 37 2d 30 38 2d 32 32 54 32 33 3a 31 34 Data Ascii: shop CC 2017 (Windows)</xmp:CreatorTool> <xmp:CreateDate>2017-08-22T23:14:50+08:00</xmp:CreateDate> <xmp:MetadataDate>2017-08-22T23:14:50+08:00</xmp:MetadataDate> <xmp:ModifyDate>2017-08-22T23:14:50+08:00</xmp:Modify
Oct 13, 2024 05:28:46.990223885 CEST	1236	IN	Data Raw: 33 3a 31 34 3a 35 30 2b 30 38 3a 30 30 3c 2f 73 74 45 76 74 3a 77 68 65 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 Data Ascii: 3:14:50+08:00</stEvt:when> <stEvt:softwareAgent>Adobe Photoshop CC 2017 (Windows)</stEvt:softwareAgent> <stEvt:changed>/</stEvt:changed> </rdf:li> </rdf:Seq> </xmpMM:Histo
Oct 13, 2024 05:28:46.990504026 CEST	1236	IN	Data Raw: 74 4c 61 79 65 72 73 3e 0a 20 20 20 20 20 20 20 20 20 3c 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e 33 3c 2f 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 70 68 6f 74 6f 73 68 6f 70 Data Ascii: tLayers> <photoshop:ColorMode>3</photoshop:ColorMode> <photoshop:ICCProfile>sRGB IEC61966-2.1</photoshop:ICCProfile> <dc:format>image/png</dc:format> <tiff:Orientation>1</tiff:Orientation> <tiff:XRe
Oct 13, 2024 05:28:46.990530014 CEST	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Oct 13, 2024 05:28:46.990545034 CEST	108	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Oct 13, 2024 05:28:46.990814924 CEST	892	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Oct 13, 2024 05:28:47.084503889 CEST	568	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Oct 13, 2024 05:28:47.300484896 CEST	1236	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49754	116.255.154.157	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:42.485183001 CEST	348	OUT	GET /script/ad_sidebar_down.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:43.561402082 CEST	434	IN	HTTP/1.1 200 OK Content-Length: 124 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Wed, 06 Mar 2019 05:06:18 GMT Accept-Ranges: bytes ETag: "081d254dad3d41:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:40 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 74 cb 41 0e 02 21 0c 00 c0 af 90 bd a0 97 36 9e 34 2e 8b 1f e1 42 10 a1 59 28 1b a8 21 fe 5e 3f e0 dc e7 d9 c2 bb 46 16 98 9d 24 16 3e 2d c6 ab dc e3 6b 73 3a 8b 1c 77 c4 39 27 7c 68 64 aa 91 20 30 72 94 d9 fa 8e d7 db 05 b2 d4 f2 d8 c6 af 3a 6d 0d d5 a4 46 0f ff 6b 6a b8 fb 42 70 70 72 5a a1 35 e8 ed 72 5e bf 03 00 94 50 90 71 85 00 00 00 Data Ascii: tA!64.BY(!^?F$>-ks:w9'\|hd 0r:mFkjBpprZ5r^Pq
Oct 13, 2024 05:28:43.655405998 CEST	342	OUT	GET /script/tj-bottom.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:44.060952902 CEST	551	IN	HTTP/1.1 200 OK Content-Length: 240 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Mon, 17 Dec 2018 08:27:27 GMT Accept-Ranges: bytes ETag: "8081df57e295d41:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:41 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 1c 8f cf 4a c3 40 18 c4 7f 17 2f 3e 82 17 43 2f 2a 48 52 0a 5e 6a ec 49 10 11 d2 d2 f6 a6 60 6b dc d6 a0 d5 50 53 42 db 63 4e 25 04 f4 e2 9f a3 37 7d 02 df c0 47 10 7c 06 0f 3e 80 60 9d 0d c3 7e bb df cc ee 7c b3 cb bf 73 6e 08 99 30 c2 70 4d 82 4b ca 98 48 27 c3 95 98 4d 2a f8 c4 34 54 cf 54 b7 87 5f b3 d7 b0 95 ad 3c fc e6 6b 4b 9f 3e 0e 17 7a 61 18 b0 c7 09 1b ea 12 21 a6 8e 27 a4 25 5c a6 f2 bc 95 16 95 93 22 31 a1 dc 3d 2d a3 db a9 52 8c b9 54 bf 43 55 9a f5 18 69 be f5 6b f0 9e 7d 76 6a e2 2d 0e 78 c9 1f e7 f5 e1 21 5d 3e 16 f7 4f 83 e3 5e b0 5f 3c 1b 87 b7 76 af f9 7d ba 7e 17 17 ab 81 55 8f 82 9f c2 97 63 bf cc ee 95 e9 ed 6e ff 52 61 8b 5d fe 07 00 64 ad c9 55 fe 00 00 00 Data Ascii: J@/>C/HR^jI`kPSBcN%7}G\|>`~\|sn0pMKH'M4TT_<kK>za!'%\"1=-RTCUik}vj-x!]>O^_<v}~UcnRa]dU
Oct 13, 2024 05:28:44.278908968 CEST	551	IN	HTTP/1.1 200 OK Content-Length: 240 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Mon, 17 Dec 2018 08:27:27 GMT Accept-Ranges: bytes ETag: "8081df57e295d41:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:41 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 1c 8f cf 4a c3 40 18 c4 7f 17 2f 3e 82 17 43 2f 2a 48 52 0a 5e 6a ec 49 10 11 d2 d2 f6 a6 60 6b dc d6 a0 d5 50 53 42 db 63 4e 25 04 f4 e2 9f a3 37 7d 02 df c0 47 10 7c 06 0f 3e 80 60 9d 0d c3 7e bb df cc ee 7c b3 cb bf 73 6e 08 99 30 c2 70 4d 82 4b ca 98 48 27 c3 95 98 4d 2a f8 c4 34 54 cf 54 b7 87 5f b3 d7 b0 95 ad 3c fc e6 6b 4b 9f 3e 0e 17 7a 61 18 b0 c7 09 1b ea 12 21 a6 8e 27 a4 25 5c a6 f2 bc 95 16 95 93 22 31 a1 dc 3d 2d a3 db a9 52 8c b9 54 bf 43 55 9a f5 18 69 be f5 6b f0 9e 7d 76 6a e2 2d 0e 78 c9 1f e7 f5 e1 21 5d 3e 16 f7 4f 83 e3 5e b0 5f 3c 1b 87 b7 76 af f9 7d ba 7e 17 17 ab 81 55 8f 82 9f c2 97 63 bf cc ee 95 e9 ed 6e ff 52 61 8b 5d fe 07 00 64 ad c9 55 fe 00 00 00 Data Ascii: J@/>C/HR^jI`kPSBcN%7}G\|>`~\|sn0pMKH'M4TT_<kK>za!'%\"1=-RTCUik}vj-x!]>O^_<v}~UcnRa]dU
Oct 13, 2024 05:28:44.629858017 CEST	360	OUT	GET /upload/2024/10/202410032222066242.png HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:45.035680056 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 18489 Content-Type: image/png Last-Modified: Thu, 03 Oct 2024 14:22:06 GMT Accept-Ranges: bytes ETag: "16d1dc9f9f15db1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:42 GMT Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 eb 00 00 01 d4 08 02 00 00 00 54 33 48 4e 00 00 20 00 49 44 41 54 78 01 ed 7d 4f 68 5c 47 b6 7e e5 c7 f3 c6 1b cb 46 9b 6c d2 2d 45 b2 82 33 e0 20 bd 98 c1 6f a1 c8 0f 69 3c b1 16 b6 20 b3 10 c3 bc b6 16 51 6c b0 47 18 32 20 f3 40 08 86 34 24 20 34 16 c4 d1 2c e4 9e 30 68 31 06 39 0b 39 e3 91 78 56 b4 78 66 70 9e 4c 02 33 26 b2 14 49 9d 4d 36 26 96 37 de 78 31 bf ef d4 bf 5b f7 4f 77 df 6e 75 4b b7 bb cf 05 bb eb 7f 9d fa ce 57 a7 4e dd 6e 55 bd f2 af 7f fd 4b f0 c3 08 d4 2d 02 ff af 6e 25 67 c1 19 01 42 80 19 cc 3c a8 6f 04 98 c1 f5 ad 3f 96 9e 19 cc 1c a8 6f 04 98 c1 f5 ad 3f 96 9e 19 cc 1c a8 6f 04 98 c1 f5 ad 3f 96 3e c0 e0 cd 3f fc c7 2b ce 33 fa d7 83 40 e8 af a3 af 78 1d 2b 89 28 ae 42 ff f1 87 cd 80 4c 28 fe ca 2b 5e b2 8c ca 31 78 8d 04 6a 70 b4 81 10 08 30 98 46 f6 fe 97 f8 96 43 3e 5f 8a 77 5f 71 c8 74 00 c3 fe eb 68 e7 d8 cf 20 cf ec 2f 55 e7 a7 4f 8b bf dc f5 51 78 f3 0f bf ff a3 27 18 e8 fb ae d0 f2 6f 9c f8 3d 73 d8 83 a6 51 43 [TRUNCATED] Data Ascii: PNGIHDRT3HN IDATx}Oh\G~Fl-E3 oi< QlG2 @4$ 4,0h199xVxfpL3&IM6&7x1[OwnuKWNnUK-n%gB<o?o?o?>?+3@x+(BL(+^1xjp0FC>_w_qth /UOQx'o=sQCmL$~+12l~_?lUaq(`N-ulp8nF#w,&} :A1[O_;n;&?R~qj?ig?j;MV,;90cew;An_~a0!lp':PwSE.=:im@C?e-&l}SM0"Yjt!KYi{1fE%aL;I<?`\X44_"kQP^eZ=qzfqx}I =pAPa`^'>9^oD0XrorHY`rF_/B`i'@\-DIvotrpx^cKZI666xvW[OC\!Pmw)tmk0U@H#P"2UA
Oct 13, 2024 05:28:45.035696030 CEST	1236	IN	Data Raw: 5c 15 18 b9 91 03 43 80 19 7c 60 d0 73 c7 55 41 80 19 5c 15 18 b9 91 03 43 80 19 7c 60 d0 73 c7 55 41 80 19 5c 15 18 b9 91 03 43 e0 df 9e 3f 7f 7e 60 9d 73 c7 8c c0 9e 11 60 1b bc 67 08 b9 81 03 45 80 19 7c a0 f0 73 e7 7b 46 80 19 bc 67 08 b9 81 Data Ascii: \C\|`sUA\C\|`sUA\C?~`s`gE\|s{FgE\|s{FgE\|s{FgE\|s{FgE\|s{FgE\|s{Fo}2{\tKZtJBAJS;^=lgI'Q2~yy][-wN;_
Oct 13, 2024 05:28:45.035707951 CEST	1236	IN	Data Raw: 44 11 78 f9 46 b8 33 cc bc 9b 63 d4 2f 7e 65 ad 04 b1 2d 7b 72 45 49 e2 fd 7d 81 ef 8f 02 9c 9e 21 e5 27 5d 66 4a f9 0a 41 a2 9c 53 90 fe 38 06 12 ca 9f 71 2b 08 80 8a 96 06 71 2b 90 af ca 01 44 e2 32 58 bc de 75 ca a3 2c 18 9b c9 64 1e ae e3 6f Data Ascii: DxF3c/~e-{rEI}!']fJAS8q+q+D2Xu,do\|LVO3?B.IWrwZ{TH*7oME?Ngb$vrT/]4r+m`C=hd?[7?s!J!A'"V b3;e(+uhC.cjnb3
Oct 13, 2024 05:28:45.035720110 CEST	672	IN	Data Raw: d7 16 ab 41 20 f0 d7 f6 cc e0 1a 60 cc 4d d6 12 81 00 83 cb f3 22 6a 29 18 b7 cd 08 54 82 00 33 b8 12 d4 b8 4e 72 10 60 06 27 47 17 2c 49 25 08 30 83 2b 41 8d eb 24 07 01 66 70 72 74 c1 92 54 82 00 33 b8 12 d4 b8 4e 72 10 60 06 27 47 17 2c 49 25 Data Ascii: A `M"j)T3Nr`'G,I%0+A$fprtT3Nr`'G,I%0+A$fprtT@\|QI3\8 \|*-#P9ETL$hefpq$ NX`WL$hefpq$ NX`WL$hefpq$ NX`u#
Oct 13, 2024 05:28:45.035732985 CEST	1236	IN	Data Raw: 55 21 73 7b f9 ea c6 d8 bd ad ef 9f 88 e3 ca 56 13 8b 2f eb d6 f6 fe 11 39 ae bd 37 cb 2d 1c 14 02 0e 27 85 8f c1 10 c8 cd 0b c9 47 24 95 3b b9 b3 d3 bb 97 41 57 f8 04 44 4f 63 11 c1 4b 59 05 c7 da 8b 8f 3e ba 73 63 f9 f2 74 ff f7 4f be 16 5f bf Data Ascii: U!s{V/97-'G$;AWDOcKY>sctO_ rQ;77<xZb<#3}T@,/"0u?UNe{^)\|w\|Q[7s7mCi NL@H682?-sL7
Oct 13, 2024 05:28:45.035749912 CEST	224	IN	Data Raw: 4d 5f 36 37 2c 41 71 79 0f 01 66 3a 75 ff ab 83 8b bd 36 6f 3e 23 b7 05 0b d9 ec 95 61 b3 02 d1 7c 95 2d 97 ac 15 ea dd ae 0a a0 b0 69 ce 80 50 f7 9f d5 65 b0 82 83 36 6b ab 13 3d ca 0e 43 cf e9 36 b1 38 bb e4 ec e6 a0 03 28 cb 9a 33 c7 8b 30 86 Data Ascii: M_67,Aqyf:u6o>#a\|-iPe6k=C68(30PVbrUzRjMd:+ Z=2}otB'g2L)9<QR6wfLfe*evWtl}=XISqj)a4PL^eOa,z&V
Oct 13, 2024 05:28:45.347687006 CEST	1236	IN	Data Raw: ba 32 b0 82 59 dd 0e 10 1d 1e 40 64 9b 36 7c ae 25 c3 5b 37 ed e1 fa 7a a4 25 78 09 bb 39 72 e5 d2 c8 31 71 38 c1 a3 14 af de 63 66 48 cf e2 f6 ce ca c6 3a 9a c7 8c 99 b9 bf 62 bb 26 1a 66 d5 dc 5b a3 81 59 fe 2b 19 94 9d 8c 24 b0 2a 40 eb cf 08 Data Ascii: 2Y@d6\|%[7z%x9r1q8cfH:b&f[Y+$@8s"LLzrc75igWF\mz]kNX~B0a8EAhq~imI`<\M!c}P2:S+?RRy^$/bh;G~4S(O04U6`5
Oct 13, 2024 05:28:45.347723007 CEST	1236	IN	Data Raw: ff 4a b0 27 e8 81 cc 3f 19 42 ff 29 f4 c1 82 6e 3c 56 49 ab 61 a5 5f 48 14 a9 68 53 0c ce 84 5e 15 30 3d cc 4d 37 38 29 df 5c 75 03 d8 b5 8b 55 da 47 a0 43 ec cd ad 1a 02 bc 57 57 ce c0 a8 fb 80 ca e3 c0 f2 b0 4c fe ba ee a8 7d 61 bb 1d 21 a1 a2 Data Ascii: J'?B)n<VIa_HhS^0=M78)\uUGCWWL}a!}_E`%xe/"&o\|,Mo%}G:Jdu=qJu#3lG.l3CAPRuAVby4=}L&xu(K+PFSb dN
Oct 13, 2024 05:28:45.347735882 CEST	1236	IN	Data Raw: 35 30 f9 c8 db 4d 6c 43 d0 a6 39 1a 3e d6 6d 2e b2 62 ac 92 76 86 a9 19 04 a1 8a 4c a5 f8 62 38 25 21 cb ca 38 9d 33 ae 6e fd b0 63 8a 0e 78 87 bf 53 7e 79 97 c1 44 b7 78 90 a9 d5 65 b0 1a 09 dc dc aa de 04 83 a3 f7 7b a4 2f 1c 45 60 dc 33 53 f0 Data Ascii: 50MlC9>m.bvLb8%!83ncxS~yDxe{/E`3S5g* '/dE(bN9X}WeOlloK+kWB>0M~J;RL\{WITy IDATu}/F{@p1\|M7DPump-n!#qn7!{
Oct 13, 2024 05:28:45.347749949 CEST	672	IN	Data Raw: 1d 5c fa 2c 57 68 37 51 a7 d1 b5 5f 99 14 79 17 ae 2b 1c 7d f9 4a 7a 64 ca b6 89 ea d6 89 09 cb 1a bf 64 b8 ae 93 12 5f 8c e8 92 4e 53 95 07 4b 42 5d 79 d3 95 d5 ac e6 3d 1a d2 bd c5 eb 88 6b 62 6a 61 64 1b eb ee bc 18 1e 1e 9e 5f ef 54 74 80 8b Data Ascii: \,Wh7Q_y+}Jzdd_NSKB]y=kbjad_Tt169q%O{2_uSl-ug6u@{4ACMUIaU"(rqYhPQC5@uE$r,TC#nh6M"3gM1fpCS8,i`/
Oct 13, 2024 05:28:45.347876072 CEST	1236	IN	Data Raw: 38 d8 05 8a c0 f9 cc 0e 8a a6 d5 42 9f 98 3e 8e 96 4c a9 9e 89 51 13 4c f0 67 35 19 ec 1c 94 e3 9d e1 17 46 d3 c7 36 a5 bb 22 60 b7 75 f6 ac 2d 1a ca 82 b1 74 96 e0 c6 36 4c 12 40 c5 e9 e8 3d 83 a3 14 aa 97 87 88 29 4f ba 86 c0 b8 d1 42 5c b9 32 Data Ascii: 8B>LQLg5F6"`u-t6L@=)OB\22QCDi\W#rdM:]~IKz+.`R.~$kDY<8}x`g~idr{y!lYpn2e;h.Iu*X=tShZ
Oct 13, 2024 05:28:45.689080000 CEST	349	OUT	GET /function/c_html_js_add.asp HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ
Oct 13, 2024 05:28:46.097554922 CEST	275	IN	HTTP/1.1 200 OK Cache-Control: private Date: Sun, 13 Oct 2024 03:28:44 GMT Content-Type: application/x-javascript; Charset=UTF-8 Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Content-Encoding: gzip Vary: Accept-Encoding Transfer-Encoding: chunked Data Raw: 61 0d 0a 1f 8b 08 00 00 00 00 00 04 00 0d 0a Data Ascii: a
Oct 13, 2024 05:28:46.342315912 CEST	729	OUT	GET /themes/j-spring/style/j-spring/nav_bg1.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:46.754575014 CEST	438	IN	HTTP/1.1 200 OK Content-Length: 189 Content-Type: image/gif Last-Modified: Wed, 05 Dec 2012 09:06:58 GMT Accept-Ranges: bytes ETag: "d559aae1c7d2cd1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:45 GMT Data Raw: 47 49 46 38 39 61 2c 00 16 00 b3 00 00 00 00 00 ff ff ff da d7 ce e3 e0 d7 e0 dd d4 df dc d3 de db d2 dd da d1 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 08 00 2c 00 00 00 00 2c 00 16 00 00 04 6a 50 c8 49 ab 3d 23 eb cd 3b b1 20 88 75 24 f9 85 a8 34 96 6c 76 a6 e1 da 96 05 8c ca 73 57 db a0 91 b3 3b 5e c5 f7 23 05 85 13 62 91 73 44 0a 94 4b 4d 13 09 8d 0e a6 c2 6a d4 e0 a4 68 97 dc ae a4 60 dd 84 c5 e4 72 e6 dc 4d ab d9 4e 77 19 8e 94 5b e9 42 7b f4 20 1e ab 33 7c 7d 04 7f 03 81 62 83 7f 86 5d 88 6a 8a 5d 11 00 3b Data Ascii: GIF89a,!,,jPI=#; u$4lvsW;^#bsDKMjh`rMNw[B{ 3\|}b]j];
Oct 13, 2024 05:28:46.983036041 CEST	438	IN	HTTP/1.1 200 OK Content-Length: 189 Content-Type: image/gif Last-Modified: Wed, 05 Dec 2012 09:06:58 GMT Accept-Ranges: bytes ETag: "d559aae1c7d2cd1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:45 GMT Data Raw: 47 49 46 38 39 61 2c 00 16 00 b3 00 00 00 00 00 ff ff ff da d7 ce e3 e0 d7 e0 dd d4 df dc d3 de db d2 dd da d1 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 08 00 2c 00 00 00 00 2c 00 16 00 00 04 6a 50 c8 49 ab 3d 23 eb cd 3b b1 20 88 75 24 f9 85 a8 34 96 6c 76 a6 e1 da 96 05 8c ca 73 57 db a0 91 b3 3b 5e c5 f7 23 05 85 13 62 91 73 44 0a 94 4b 4d 13 09 8d 0e a6 c2 6a d4 e0 a4 68 97 dc ae a4 60 dd 84 c5 e4 72 e6 dc 4d ab d9 4e 77 19 8e 94 5b e9 42 7b f4 20 1e ab 33 7c 7d 04 7f 03 81 62 83 7f 86 5d 88 6a 8a 5d 11 00 3b Data Ascii: GIF89a,!,,jPI=#; u$4lvsW;^#bsDKMjh`rMNw[B{ 3\|}b]j];
Oct 13, 2024 05:28:47.339545012 CEST	731	OUT	GET /themes/j-spring/style/j-spring/bg_bottom.gif HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:47.745927095 CEST	592	IN	HTTP/1.1 200 OK Content-Length: 345 Content-Type: image/gif Last-Modified: Wed, 05 Dec 2012 09:06:52 GMT Accept-Ranges: bytes ETag: "dd14dec7d2cd1:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:46 GMT Data Raw: 47 49 46 38 39 61 02 00 46 00 d5 00 00 4c 4c 4c 05 05 05 3d 3d 3d 13 13 13 25 25 25 0e 0e 0e 39 39 39 42 42 42 00 00 00 49 49 49 0a 0a 0a 7f 7f 7f 46 46 46 29 27 28 19 19 19 4a 4a 4a 38 38 38 29 24 26 18 18 18 33 32 33 2e 2e 2e 22 22 22 21 21 21 21 22 20 8b 8b 8b 3a 3a 3a 24 23 24 1b 1b 1b 20 20 1f 44 44 44 11 11 11 14 12 13 28 2a 2a 68 68 68 2b 2b 2b 29 29 29 1d 1e 1b 30 31 31 23 23 23 28 28 28 43 43 43 16 16 17 4b 4b 4b 10 10 10 25 23 24 4d 4d 4d 27 2f 2c 19 1e 1a 36 36 36 09 09 09 40 40 40 34 34 34 14 14 14 3b 3b 3b 45 45 45 0b 0b 0b 1d 1d 1d 27 27 27 1e 1e 1e 48 48 48 32 32 32 07 07 07 12 12 12 06 06 06 21 f9 04 00 00 00 00 00 2c 00 00 00 00 02 00 46 00 00 06 76 40 40 0b 00 50 3d 12 3b e4 6e c7 b0 39 51 8c 43 e7 70 90 59 05 02 59 4d 50 ab 65 0c 06 08 04 46 9e 99 79 68 de a4 54 a2 b8 dc 22 90 28 37 6a 9c 1a b9 3c 81 a0 31 b1 2a 11 16 17 3a 2f 38 24 38 1c 38 38 3a 34 3a 2b 1b 29 8d 3e 29 3e 1e 3e 1f 3e 3e 03 3e 34 99 03 05 05 37 31 37 0a a4 31 31 3f 3d 01 aa 3d ad 3f af b0 01 3f 08 08 0e 12 21 21 [TRUNCATED] Data Ascii: GIF89aFLLL===%%%999BBBIIIFFF)'(JJJ888)$&323..."""!!!!" :::$#$ DDD(*hhh+++)))011###(((CCCKKK%#$MMM'/,666@@@444;;;EEE'''HHH222!,Fv@@P=;n9QCpYYMPeFyhT"(7j<1:/8$888:4:+)>)>>>>>471711?==??!!A;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49755	116.255.154.157	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:42.734536886 CEST	339	OUT	GET /script/tj-top.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:43.810416937 CEST	606	IN	HTTP/1.1 200 OK Content-Length: 296 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Mon, 26 Aug 2024 16:39:34 GMT Accept-Ranges: bytes ETag: "0672488d6f7da1:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:41 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 54 cd bf 4a c3 40 00 c7 f1 bd d0 77 28 19 8a 16 cc 25 e9 3f a3 69 5c 7c 81 e2 1a 90 d8 46 2e 36 ff ef f4 28 38 58 a4 20 a5 38 89 d4 52 50 a4 82 d0 d2 0e e2 60 5a cc cb e4 2e 3a e5 15 8c ba e8 f2 83 ef f2 f9 a5 ab 08 94 f2 b9 b6 db 3a b5 0d 07 f3 24 30 b1 61 39 1b 9c 02 2b 85 96 a5 23 d4 d0 38 cf 45 78 ab ad 63 43 e3 54 36 7f fc 88 ae e9 e0 81 f6 9f d8 64 9e cc ee e8 62 c4 6e df 24 41 10 e2 30 6c 36 e3 70 ca 5e 7b c9 fb 34 5d 8f 15 bd 00 03 e3 38 23 20 c6 1e da 01 e0 c4 e7 7d 9f 6f b9 36 d8 3b 24 67 0d 51 90 ea c5 4e a3 da 6d 4b 07 fb 72 c6 57 b7 e5 7a ad 26 d7 2b 0a d0 d5 a2 73 84 bc dd df 3d ff 1b ff dd 8c 25 84 f0 5d 13 41 d3 36 4c 51 2a ff 1c 38 06 26 6e d0 01 a2 5c e5 21 b6 ad 4c a7 d1 ec f3 e2 3e 79 7e a1 8b 71 ba 1e d2 e9 38 99 2d d9 cd 92 0d 7b 59 b2 c9 55 bc 1a 95 05 da bf fc 7e 57 34 00 2b 2a b7 99 cf 95 c0 d7 00 91 dd 64 5a 27 01 00 00 Data Ascii: TJ@w(%?i\\|F.6(8X 8RP`Z.::$0a9+#8ExcCT6dbn$A0l6p^{4]8# }o6;$gQNmKrWz&+s=%]A6LQ8&n\!L>y~q8-{YU~W4+dZ'
Oct 13, 2024 05:28:44.004621983 CEST	339	OUT	GET /script/common.js HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=NFBEELDBIMOOEAEBEBODPNGK
Oct 13, 2024 05:28:44.409950018 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 16278 Content-Type: application/x-javascript Content-Encoding: gzip Last-Modified: Wed, 05 Dec 2012 09:17:53 GMT Accept-Ranges: bytes ETag: "80367b67c9d2cd1:ad4" Vary: Accept-Encoding Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:41 GMT Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 7b 73 db 4a 96 27 f8 77 4d c4 7c 07 0a d7 2d 01 26 08 12 00 5f 26 0d ab f4 b0 2c d9 92 25 4b b2 65 5f 4a ae 00 41 90 84 cc 97 49 50 0f 0b ec a8 de 9e 8a da ea e9 de 9e d8 e9 89 9e e9 aa e9 a8 de ed 89 ae 9d d8 ed 9e 89 dd 9d 8d 9e a9 ee fa 32 65 df db 7f ed 57 d8 df 39 99 00 a9 87 7d ed 5b b7 6e dd 8d 5d d7 2d 10 c8 3c 99 79 f2 bc f2 e4 c9 03 28 fb cd fe fb e7 ff 2c 9b 4d 5d fa f7 79 66 b9 d3 6f 71 f9 af ff e1 67 54 f2 e5 0f 7f 54 a1 df 77 3f fb cf 5f fc e8 8f d4 37 67 86 3b 6a 68 0c f1 c5 4f fe fb 77 ff fe 0f df fd e4 87 ef 7e f6 13 86 d9 75 83 5e bd 7f ba d7 6f 86 a9 bd 70 dc 08 fa 0c f7 ee 8f 00 f1 77 ef fe ec ef de fd f1 1f 30 dc 50 c0 8d 00 f7 7d b3 68 1b 5e bf 2b 3a fc c5 bf 7c fb 5f ff f4 ed bf fa 93 2f fe e6 3f 31 e0 4c 29 0d f6 b3 ff 75 5a fa f6 4f fe cd db 1f fd e1 0c 2c 3a e9 f6 7b c6 f1 48 54 ff f2 87 6f ff e6 5f be fb f3 ff f2 4f 7f fe 7f 70 b5 95 cb e5 8d 5c c9 b0 0a 02 a7 9f fd f0 ed bf fa 1f 7e fd ab bf 7d f7 67 7f 3f d3 e9 5f ff 98 e7 fa bf ff 82 [TRUNCATED] Data Ascii: {sJ'wM\|-&_&,%Ke_JAIP2eW9}[n]-<y(,M]yfoqgTTw?_7g;jhOw~u^opw0P}h^+:\|_/?1L)uZO,:{HTo_Op\~}g?_o&oo?~:~2n-OiSc4u; $0]ATO#R^jzz"\|uvR{#0~J%r}#<EH=L\2V0\9c)TR*r)u=S(_LK-w4,-QZ'nGm{^{@wuOP.~8P;PiiU\]XAe4J;Z3UMAS[X0z}E]f2_yUZ:z\pxx^T=T=c\|T8$ao?hU_HiZ-rD]P`j6S+sDNc1sGahd]m-eR+\U]KQOeV_;wnwU#:<i{Z4KVbgO[Ewq]OuP]5y[3A9O#
Oct 13, 2024 05:28:44.409967899 CEST	1236	IN	Data Raw: 41 73 a9 2b 4f ad d1 03 66 fe 00 8d ea ce ae 61 97 50 6d 1f 51 bb ba 86 ff 1b d6 f1 9c c3 25 6b 98 96 66 98 6b d4 e9 83 8b 52 2d 77 e4 d4 ab 25 63 dd 31 69 a2 93 07 18 be 76 34 c1 af 24 81 27 81 51 52 54 81 7b 0b f7 31 79 76 b5 1a cd c6 30 37 17 Data Ascii: As+OfaPmQ%kfkR-w%c1iv4$'QRT{1yv07sS(VS9dku1cvxO58 sh+EQ=&}ZQ(zQXJ#OJNT=Y%RBnnJ"V7S^x(*iL1^jIs!Ua^3&r
Oct 13, 2024 05:28:44.409979105 CEST	1236	IN	Data Raw: e4 9a d0 1d e4 50 a3 62 ee 04 6a e6 89 c9 a9 17 65 57 88 0d fb 6a cb e8 db d5 84 f7 77 02 4e af 40 e2 5b 52 ac e6 e6 5c 1e 14 ba 40 3e 18 bb 28 07 70 4c 30 e1 39 76 64 b2 77 b2 01 19 54 37 4d 74 d5 ed fb 95 a9 d9 5a 65 f0 fc 1b 72 72 f2 e7 d4 ca Data Ascii: PbjeWjwN@[R\@>(pL09vdwT7MtZerr"k$05^+\OX+e)i,QoX{&MN8bE\|HWr%=+n/jp^8q4{:nts7Xn=H@>F[({a*rh~
Oct 13, 2024 05:28:44.409990072 CEST	672	IN	Data Raw: 46 9e b5 93 fa 06 3f 99 7e 37 b6 00 1c a9 55 cf 31 77 48 de ab bd 7b 10 e7 4c 86 a2 1b e4 c4 9a 3b b5 1e 5c 60 6a 02 95 e4 27 34 31 e0 da f0 2d 5b 36 be 25 e1 c9 be c4 62 c5 1b 56 2c ed d4 f7 00 be 66 91 f6 f3 cc 5d 54 de ce 92 ad 25 49 e2 4d 38 Data Ascii: F?~7U1wH{L;\`j'41-[6%bV,f]T%IM8gA:S`U2,:&d"_"uG8)Cn(9,,G\|ox1`~]jcSy4Gdgn=9gh?`f8ai^<S73(q
Oct 13, 2024 05:28:47.477019072 CEST	1236	IN	Data Raw: 92 31 21 6c 26 d4 ff d8 29 9f 1a e5 b1 70 7b c0 5e e7 a2 58 af a8 63 96 7f 23 ad 2e 56 ca a3 a8 fc 3a 2a 0f a2 72 5f ab 1d 1e 66 2b a9 23 15 bf 0d e3 28 0d b5 c0 d2 71 44 ba a1 9b eb 95 6c d1 64 05 1f 6b ba 15 56 b2 56 18 3f 99 56 25 6b 5a f2 09 Data Ascii: 1!l&)p{^Xc#.V:r_f+#(qDldkVV?V%kZV&K&RP%w+PY~{r]P\|e,`L?tNB[5)sne8x!~ ^AGE#O'*@,pr@q
Oct 13, 2024 05:28:47.477045059 CEST	1236	IN	Data Raw: 6f ed 38 21 ba e6 98 47 98 6c 13 b2 f8 4f 4c ff 7e ea 95 43 31 b7 96 53 d8 a8 52 7a 47 8b d2 3b 42 4e ef a0 4e fa 0e e5 71 f0 6e 24 f6 22 ab 8d d8 15 a7 02 cf 69 b0 fb fc aa 4a c7 2e 1e 1d 19 f3 71 4c e8 38 26 f6 7e 7d 28 e7 6d 28 ac 97 9c 05 f4 Data Ascii: o8!GlOL~C1SRzG;BNNqn$"iJ.qL8&~}(m(WmYHst@ 5YAA1GEZUld\|ss\|o<jeX}eX}2@nsc:VB0jW9=Agp3l:$)(]%L17%
Oct 13, 2024 05:28:47.477062941 CEST	448	IN	Data Raw: 67 e4 7b 1a 26 5d e5 03 62 b8 6b e7 18 a4 49 83 30 29 d8 21 e4 3e e9 48 94 0e 4a b5 8b 69 81 18 a7 69 e4 bb 1a 5d d4 86 ce 83 e9 5b 64 9b 9a 46 69 4b 55 ec a1 92 96 c5 da a4 55 23 8c 8f 30 a5 92 61 ae 52 07 db e0 96 55 31 75 73 b5 72 21 03 28 94 Data Ascii: g{&]bkI0)!>HJii][dFiKUU#0aRU1usr!(KoG<=_H9R7mN05((KsVgZUj.!"GgnyFXIL'M1YY^@v9$N{c81G?3I QQoUN{UHStN
Oct 13, 2024 05:28:47.788063049 CEST	1236	IN	Data Raw: 09 62 b3 e5 b2 fe c6 89 a6 d0 2a 8f 1a 89 ac 10 c8 e1 58 73 c5 28 ae 51 da c0 08 54 fd 7c 5a fd 9c aa 9f 8b ea 75 28 8b 30 16 e6 1e 48 6a 14 86 1a dd 3a 74 17 9f 8f ad 53 85 b9 c7 e6 c9 16 d5 2e 3d ef 88 86 f9 16 d5 e7 d7 48 80 5b 0e dd 39 0e 01 Data Ascii: bXs(QT\|Zu(0Hj:tS.=H[9-B\|Wt=X]aWu2)7}:kWzI\.UN22+5i$[RmE+`>7my_*9.LdvLFFI2M}YZc\]IGa!1
Oct 13, 2024 05:28:47.788089037 CEST	1236	IN	Data Raw: e8 b7 8d bc 07 83 39 cc 94 46 0a 2a f2 2f 44 85 b5 26 6b 8a 0f 32 f6 e7 99 e2 7d 52 69 bb 5d a3 f6 70 74 95 d2 a9 9e 2a ae a4 4a e7 a9 e2 72 2a ff b0 c2 ff a5 8a d8 f0 57 45 bb e7 99 d2 6a a6 74 9f 8e 4c cb 8a e8 33 ff 54 a3 8b da 16 8f e6 ea cc Data Ascii: 9F/D&k2}Ri]ptJr*WEjtL3T\^k#NnA5pbl"\|BnjV)dGyBWB6S(?0RLKwOxB.D2o54z=%NM=L'L)gE%4dB\fB
Oct 13, 2024 05:28:47.788104057 CEST	448	IN	Data Raw: 90 44 b4 39 77 9a c6 5e f5 8d e1 ca 9d 28 24 e8 35 89 d1 6b 8e 7c d7 de 18 d6 19 7b 2c 2d 91 37 2e 3e 61 70 ce ef 12 e9 54 49 6f eb 9c d7 5a 47 4e 81 0e a9 f0 cc 09 6f 71 03 d2 88 96 d4 88 f3 c4 18 4f 30 5e b1 20 e3 f8 76 57 d8 6e d2 49 8d 6a cc Data Ascii: D9w^($5k\|{,-7.>apTIoZGNoqO0^ vWnIj2>?t:/S>YV]G&1[(UM36B8ar"8k'BFY>[x3)"CR1kC5d(Jo6iJ}IaKcxPe?Z)`A
Oct 13, 2024 05:28:48.097554922 CEST	1236	IN	Data Raw: bf bc 13 7d f8 df 89 3b 8c c4 17 74 22 bf 33 f2 a3 8e df 6b 85 ed a8 d9 1f 46 be eb b5 a3 de b8 d3 89 c2 f3 81 1f 35 5d aa af 0f fb a7 23 7f 18 85 c3 b1 1f 0d dc a1 df 0b 1f f7 1b 7e 44 5f 57 6a 06 3d bf 11 35 fa de b8 8b e2 68 14 9e 77 fc c8 1d Data Ascii: };t"3kF5]#~D_Wj=5hw:QfpC7cc@<gkD^$>qG#ns;l(F8Ga^3fbxEnf0+1N5Gm0?lm4'}$U$?[
Oct 13, 2024 05:28:54.711436033 CEST	704	OUT	GET /image/ysm_gzh.png HTTP/1.1 Host: www.yishimei.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: ASPSESSIONIDAAATTQQR=DGBEELDBPOHBAGJJECGBGDLJ; __vtins__JLvqYZOVy6JqMIp4=%7B%22sid%22%3A%20%2239598c7d-f206-5d23-91fd-9141f2fa3ffa%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201728791925400%2C%20%22ct%22%3A%201728790125400%7D; __51uvsct__JLvqYZOVy6JqMIp4=1; __51vcke__JLvqYZOVy6JqMIp4=1024587c-44e7-5c8c-889a-5e7b5f5c955e; __51vuft__JLvqYZOVy6JqMIp4=1728790125409
Oct 13, 2024 05:28:55.116552114 CEST	1236	IN	HTTP/1.1 200 OK Content-Length: 24292 Content-Type: image/png Last-Modified: Sun, 14 Jul 2019 21:40:37 GMT Accept-Ranges: bytes ETag: "122f33c68c3ad51:ad4" Server: Microsoft-IIS/6.0 X-Powered-By: ASP.NET Date: Sun, 13 Oct 2024 03:28:52 GMT Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 fa 08 02 00 00 00 07 8e cd 6a 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 06 74 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f [TRUNCATED] Data Ascii: PNGIHDRjpHYs+tiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmp:CreateDate="2019-07-15T05:40:07+08:00" xmp:MetadataDate="2019-07-15T05:40:07+08:00" xmp:ModifyDate="2019-07-15T05:40:07+08:00" xmpMM:InstanceID="xmp.iid:2818e64a-2203-5449-8192-ef15e81a5061" xmpMM:DocumentID="adobe:docid:photoshop:3dd91df1-c548-9e4e-9de0-667492e73e39" xmpMM:OriginalDocumentID="xmp.did:be201e86-93e7-cb43-af1d-42f9ae253917" ph

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49757	148.153.240.76	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:43.077471018 CEST	279	OUT	GET /js-sdk-pro.min.js HTTP/1.1 Host: sdk.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:43.875412941 CEST	1236	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:28:43 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Server: openresty Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE7-CACHE3[151],EU-GER-frankfurt-EDGE7-CACHE3[ovl,147],EU-GER-frankfurt-EDGE5-CACHE3[ovl,144],CHN-HElangfang-GLOBAL6-CACHE60[ovl,21] X-CCDN-REQ-ID-46B1: e1470e61255ec19f14699a7e7ebb114e Data Raw: 66 39 66 0d 0a 2f 2a 21 0a 2a 20 35 31 4c 41 20 41 6e 61 6c 79 73 69 73 20 4a 61 76 61 73 63 72 69 70 74 20 53 6f 66 74 77 61 72 65 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 4b 69 74 0a 2a 20 6a 73 2d 73 64 6b 2d 70 72 6f 20 76 31 2e 35 38 2e 33 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 31 36 2d 32 30 32 32 20 35 31 2e 6c 61 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 67 3d 65 5b 27 64 6f 63 75 6d 65 6e 74 27 5d 2c 68 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 69 3d 41 28 27 4f 62 6a 65 63 74 27 29 2c 6a 3d 41 28 27 4e 75 6d 62 65 72 27 29 2c 6b 3d 41 28 27 53 74 72 69 6e 67 27 29 2c 6d 3d 41 28 27 41 72 72 61 79 27 29 2c 6e 3d 41 28 27 46 75 6e 63 74 69 6f 6e 27 29 2c 6f 3d 41 28 27 52 65 67 45 78 70 27 29 3b 66 75 6e 63 74 69 6f 6e 20 71 28 74 2c 75 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 78 30 21 3d 3d 74 26 26 2d 30 78 31 [TRUNCATED] Data Ascii: f9f/! 51LA Analysis Javascript Software Development Kit* js-sdk-pro v1.58.3* Copyright 2016-2022 51.la All Rights Reserved*/(function(c){'use strict';var e=window,g=e['document'],h=encodeURIComponent,i=A('Object'),j=A('Number'),k=A('String'),m=A('Array'),n=A('Function'),o=A('RegExp');function q(t,u){return void 0x0!==t&&-0x1!==t['indexOf'](u);}function v(w,x){for(var y=0x0,z=w['length'];y<z;y++)if(w[y]==x)return y;return-0x1;}function A(B){return function(C){return Object['prototype']['toString']['call'](C)==='[object\x20'['concat'](B,']');};}function D(){for(var E=0x0,F={};E<arguments['length'];E++){var G=arguments[E];for(var H in G)F[H]=G[H];}return F;}function I(J){return J['replace'](/&/g,'~_~');}function K(L){var M='';for(var N in L
Oct 13, 2024 05:28:43.875425100 CEST	1236	IN	Data Raw: 29 27 27 21 3d 3d 4d 26 26 28 4d 2b 3d 27 26 27 29 2c 4d 2b 3d 4e 2b 27 3d 27 2b 68 28 68 28 49 28 53 74 72 69 6e 67 28 4c 5b 4e 5d 29 29 29 29 3b 72 65 74 75 72 6e 20 4d 3b 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 50 29 7b 72 65 74 75 72 6e 20 50 5b Data Ascii: )''!==M&&(M+='&'),M+=N+'='+h(h(I(String(L[N]))));return M;}function O(P){return P['replace'](/^\s+\|\s+$/g,'');}function Q(){return+new Date();}function R(S){var T=e['navigator']['userAgent'],U=new RegExp(/\b(?:Chrome\|CrMo\|CriOS)\/([\d.]+)/)['e
Oct 13, 2024 05:28:43.875437021 CEST	1236	IN	Data Raw: 2c 27 64 73 27 3a 27 27 7d 3b 61 63 5b 27 74 74 27 5d 3d 56 5b 27 74 72 69 6d 27 5d 28 61 62 5b 27 6c 65 6e 67 74 68 27 5d 3f 61 62 5b 30 78 30 5d 5b 27 69 6e 6e 65 72 48 54 4d 4c 27 5d 3a 27 27 29 2c 61 63 5b 27 74 74 27 5d 3d 61 63 5b 27 74 74 Data Ascii: ,'ds':''};ac['tt']=V['trim'](ab['length']?ab[0x0]['innerHTML']:''),ac['tt']=ac['tt']['slice'](0x0,0x3e8);for(var ad=0x0;ad<aa['length'];ad++)aa[ad]['name']&&(a9=aa[ad]['name']['toLowerCase'](),V['xdaPuS']('keywords',a9)&&(ac['kw']=aa[ad]['cont
Oct 13, 2024 05:28:43.875447989 CEST	775	IN	Data Raw: 42 5b 61 43 5d 3d 21 30 78 30 29 2c 61 44 3d 61 45 2b 61 43 2c 4f 62 6a 65 63 74 5b 27 70 72 6f 74 6f 74 79 70 65 27 5d 5b 27 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 27 5d 5b 27 63 61 6c 6c 27 5d 28 61 41 2c 61 44 29 29 61 45 3d 61 44 3b 65 6c Data Ascii: B[aC]=!0x0),aD=aE+aC,Object['prototype']['hasOwnProperty']['call'](aA,aD))aE=aD;else{if(Object['prototype']['hasOwnProperty']['call'](aB,aE)){if(aE['charCodeAt'](0x0)<0x100){for(ax=0x0;ax<aH;ax++)aJ<<=0x1,aK==ah-0x1?(aK=0x0,aI['push'](aw(aJ)),
Oct 13, 2024 05:28:43.886756897 CEST	1236	IN	Data Raw: 32 30 30 30 0d 0a 3a 61 4b 2b 2b 2c 61 79 3e 3e 3d 30 78 31 3b 30 78 30 3d 3d 2d 2d 61 46 26 26 28 61 46 3d 4d 61 74 68 5b 27 70 6f 77 27 5d 28 30 78 32 2c 61 48 29 2c 61 48 2b 2b 29 2c 61 41 5b 61 44 5d 3d 61 47 2b 2b 2c 61 45 3d 53 74 72 69 6e Data Ascii: 2000:aK++,ay>>=0x1;0x0==--aF&&(aF=Math['pow'](0x2,aH),aH++),aA[aD]=aG++,aE=String(aC);}if(''!==aE){if(Object['prototype']['hasOwnProperty']['call'](aB,aE)){if(aE['charCodeAt'](0x0)<0x100){for(ax=0x0;ax<aH;ax++)aJ<<=0x1,aK==ah-0x1?(aK=0x0,aI[
Oct 13, 2024 05:28:43.886838913 CEST	224	IN	Data Raw: 74 72 75 63 74 6f 72 27 5d 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 4d 21 3d 3d 53 79 6d 62 6f 6c 5b 27 70 72 6f 74 6f 74 79 70 65 27 5d 3f 27 73 79 6d 62 6f 6c 27 3a 74 79 70 65 6f 66 20 61 4d 3b 7d 29 28 61 4d 29 3b 7d 76 61 72 20 61 50 3d 7b 27 70 Data Ascii: tructor']===Symbol&&aM!==Symbol['prototype']?'symbol':typeof aM;})(aM);}var aP={'parse':function gw(aV){return eval('('+aV+')');},'stringify':(aQ=Object['prototype']['toString'],aR=Object['prototype']['hasOwnProperty'],aS={'
Oct 13, 2024 05:28:43.886852026 CEST	1236	IN	Data Raw: 22 27 3a 27 5c 78 35 63 5c 78 32 32 27 2c 27 5c 5c 27 3a 27 5c 78 35 63 5c 78 35 63 27 2c 27 5c 62 27 3a 27 5c 78 35 63 62 27 2c 27 5c 66 27 3a 27 5c 78 35 63 66 27 2c 27 5c 6e 27 3a 27 5c 78 35 63 6e 27 2c 27 5c 72 27 3a 27 5c 78 35 63 72 27 2c Data Ascii: "':'\x5c\x22','\\':'\x5c\x5c','\b':'\x5cb','\f':'\x5cf','\n':'\x5cn','\r':'\x5cr','\t':'\x5ct'},aT=function(aW){return aS[aW]\|\|'\x5cu'+(aW['charCodeAt'](0x0)+0x10000)['toString'](0x10)['substr'](0x1);},aU=/[\\"\u0000-\u001F\u2028\u2029]/g,func
Oct 13, 2024 05:28:43.886862993 CEST	1236	IN	Data Raw: 30 78 64 2c 30 78 30 2c 30 78 30 5d 29 2c 62 39 3d 6e 65 77 20 62 34 28 5b 30 78 31 30 2c 30 78 31 31 2c 30 78 31 32 2c 30 78 30 2c 30 78 38 2c 30 78 37 2c 30 78 39 2c 30 78 36 2c 30 78 61 2c 30 78 35 2c 30 78 62 2c 30 78 34 2c 30 78 63 2c 30 78 Data Ascii: 0xd,0x0,0x0]),b9=new b4([0x10,0x11,0x12,0x0,0x8,0x7,0x9,0x6,0xa,0x5,0xb,0x4,0xc,0x3,0xd,0x2,0xe,0x1,0xf]),ba=function(b4,b7){for(var b8=new b5(0x1f),b9=0x0;b9<0x1f;++b9)b8[b9]=b7+=0x1<<b4[b9-0x1];var ba=new b6(b8[0x1e]);for(b9=0x1;b9<0x1e;++b9
Oct 13, 2024 05:28:43.886874914 CEST	1236	IN	Data Raw: 6e 3d 30 78 31 31 38 3b 62 6e 3c 30 78 31 32 30 3b 2b 2b 62 6e 29 62 71 5b 62 6e 5d 3d 30 78 38 3b 76 61 72 20 62 45 3d 6e 65 77 20 62 34 28 30 78 32 30 29 3b 66 6f 72 28 62 6e 3d 30 78 30 3b 62 6e 3c 30 78 32 30 3b 2b 2b 62 6e 29 62 45 5b 62 6e Data Ascii: n=0x118;bn<0x120;++bn)bq[bn]=0x8;var bE=new b4(0x20);for(bn=0x0;bn<0x20;++bn)bE[bn]=0x5;var bF=bp(bq,0x9,0x0),bG=bp(bE,0x5,0x0),bH=function(b4){return(b4/0x8\|0x0)+(0x7&b4&&0x1);},bI=function(b7,b8,b9){(null==b8\|\|b8<0x0)&&(b8=0x0),(null==b9\|\|b9
Oct 13, 2024 05:28:43.886887074 CEST	1236	IN	Data Raw: 27 73 27 5d 29 3b 76 61 72 20 62 70 3d 6e 65 77 20 62 35 28 62 6f 2b 30 78 31 29 2c 62 71 3d 62 4d 28 62 38 5b 62 6d 2d 30 78 31 5d 2c 62 70 2c 30 78 30 29 3b 69 66 28 62 71 3e 62 37 29 7b 62 39 3d 30 78 30 3b 76 61 72 20 62 45 3d 30 78 30 2c 62 Data Ascii: 's']);var bp=new b5(bo+0x1),bq=bM(b8[bm-0x1],bp,0x0);if(bq>b7){b9=0x0;var bE=0x0,bF=bq-b7,bG=0x1<<bF;for(bb['sort'](function(b4,b5){return bp[b5['s']]-bp[b4['s']]\|\|b4['f']-b5['f'];});b9<ba;++b9){var bH=bb[b9]['s'];if(!(bp[bH]>b7))break;bE+=bG-
Oct 13, 2024 05:28:43.886898041 CEST	896	IN	Data Raw: 30 78 32 5d 3d 30 78 66 66 5e 62 34 5b 62 38 5d 2c 62 34 5b 62 38 2b 30 78 33 5d 3d 30 78 66 66 5e 62 34 5b 62 38 2b 30 78 31 5d 3b 66 6f 72 28 76 61 72 20 62 39 3d 30 78 30 3b 62 39 3c 62 37 3b 2b 2b 62 39 29 62 34 5b 62 38 2b 62 39 2b 30 78 34 Data Ascii: 0x2]=0xff^b4[b8],b4[b8+0x3]=0xff^b4[b8+0x1];for(var b9=0x0;b9<b7;++b9)b4[b8+b9+0x4]=b6[b9];return 0x8*(b8+0x4+b7);},bQ=function(b4,b6,ba,bb,bc,bd,bk,bl,bm,bn,bo){bJ(b6,bo++,ba),++bc[0x100];for(var bH=bL(bc,0xf),bI=bH[0x0],bM=bH[0x1],bQ=bL(bd,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	90.84.161.27	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:46.337965012 CEST	876	OUT	POST /v6/collect?dt=4 HTTP/1.1 Host: collect-v6.51.la Connection: keep-alive Content-Length: 504 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Origin: http://www.yishimei.cn Referer: http://www.yishimei.cn/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 1f 8b 08 00 6d 3e 0b 67 00 03 5d 52 5d 6b d4 40 14 fd 2b 21 8f 62 36 99 49 d2 24 0b e2 8b 2f ad 96 0a d5 8a e2 4b 4c 32 dd b8 db 64 9b 8f 0d 45 94 45 0a 6a 5b 57 aa 2b ba 1a 14 1f d4 05 a1 15 ac a8 59 db fe 18 93 4c 7d f2 2f 38 37 d9 96 d2 87 4c ee 9c 7b ee 39 77 66 ee 3d de b5 f9 26 c7 cf 5d e9 ad de bc b5 b0 b4 36 33 b7 3a 3f db 55 f8 f3 1c 1f 44 2c 83 34 ac 6b 86 84 b0 aa 48 12 03 23 00 f9 cb f3 8b 45 3a a6 d9 61 79 d8 2f f7 26 37 5c 0f 21 4e e4 90 c4 16 9d 7d 5a f1 7c 6b 81 10 d7 72 d8 66 c9 0d 5d 9f fd af 06 fe 5d c7 8a 38 2c 61 e5 01 96 90 94 ff da bc 14 98 cb be c7 e4 e8 c7 77 7f 0f 46 f4 c9 63 81 ee 6f d3 49 5a be 1c d1 f1 66 fe 73 50 6e f4 cb 74 f7 b6 27 e4 d9 a7 f2 f5 2e 3d 18 d4 04 e8 b0 9d 40 33 74 f8 fd 68 7d bb 7c f1 34 df 4f 8b af cf 58 41 f1 e3 f3 bf df 5b 47 3b 1f e8 ce ab 32 cd 6a 09 a6 45 bf 4d e8 e4 7d 91 0d e9 70 cc 08 53 a7 2a 5b fb 81 a8 1d 82 e8 19 37 90 7b b4 57 6c bc cd b3 41 ed 74 5a 8b 49 9f 98 9d 16 a5 6f d6 67 af 01 f0 65 f4 a7 ff 10 c4 c3 fa ba 65 43 35 74 4b b3 05 82 [TRUNCATED] Data Ascii: m>g]R]k@+!b6I$/KL2dEEj[W+YL}/87L{9wf=&]63:?UD,4kH#E:ay/&7\!N}Z\|krf]]8,awFcoIZfsPnt'.=@3th}\|4OXA[G;2jEM}pS*[7{WlAtZIogeeC5tKA,lQ1nnEQ)I48nD?h22hsXobJUis]=@[Q}"8 Xd50v0^hMyq}DRu-ASPJTPUbrvc(
Oct 13, 2024 05:28:47.380707979 CEST	413	IN	HTTP/1.1 200 Date: Sun, 13 Oct 2024 03:28:47 GMT Content-Length: 0 Connection: keep-alive Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Allow-Origin: http://www.yishimei.cn Access-Control-Allow-Credentials: true via: EU-GER-frankfurt-EDGE5-CACHE5[402],EU-GER-frankfurt-EDGE5-CACHE5[ovl,398] X-CCDN-REQ-ID-46B1: 8bc1ac734cd0e1472c7d6d85fc76af3e
Oct 13, 2024 05:29:32.384536982 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 13, 2024 05:30:17.392465115 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	38.54.26.75	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:47.417061090 CEST	284	OUT	GET /v6/collect?dt=4 HTTP/1.1 Host: collect-v6.51.la Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:48.467170000 CEST	387	IN	HTTP/1.1 220 Date: Sun, 13 Oct 2024 03:28:48 GMT Content-Length: 0 Connection: keep-alive Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers via: EU-BGR-sofia-EDGE1-CACHE3[373],EU-BGR-sofia-EDGE1-CACHE3[ovl,370],EU-CZE-prague-EDGE1-CACHE1[ovl,350],EU-GER-frankfurt-EDGE5-CACHE3[ovl,343] X-CCDN-REQ-ID-46B1: aaeff81d18a97d3ebbdd8fedbab05d2d
Oct 13, 2024 05:29:33.481365919 CEST	6	OUT	Data Raw: 00 Data Ascii:
Oct 13, 2024 05:30:18.486206055 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49763	43.129.254.124	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:56.665601015 CEST	450	OUT	GET /r/iz8qMuHEDbxyraVR92qZ HTTP/1.1 Host: weixin.qq.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:28:57.626563072 CEST	158	IN	HTTP/1.1 302 Found Location: https://weixin.qq.com/r/iz8qMuHEDbxyraVR92qZ Date: Sun, 13-Oct-2024 03:28:57 GMT Content-Length: 0 Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49766	43.154.240.170	80	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 13, 2024 05:28:59.296855927 CEST	463	OUT	GET /cgi-bin/readtemplate?t=market_redirect HTTP/1.1 Host: wechat.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 13, 2024 05:29:00.214782000 CEST	171	IN	HTTP/1.1 302 Found Location: https://wechat.com/cgi-bin/readtemplate?t=market_redirect Date: Sun, 13-Oct-2024 03:29:00 GMT Content-Length: 0 Connection: keep-alive

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49734	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:28:34 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 03:28:34 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=220621 Date: Sun, 13 Oct 2024 03:28:34 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:28:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-13 03:28:35 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=220561 Date: Sun, 13 Oct 2024 03:28:35 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-13 03:28:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49756	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:28:43 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bDYYwy2HHAPAYbs&MD=v2V+7VXT HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-13 03:28:43 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 67988875-365a-4335-b8eb-fa484ac7e916 MS-RequestId: ff7a7b27-1630-48b2-a4d9-1c900c7dac69 MS-CV: PuqWNomcoEG5vIbs.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 13 Oct 2024 03:28:43 GMT Connection: close Content-Length: 24490
2024-10-13 03:28:43 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-13 03:28:43 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49765	43.154.254.90	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:28:58 UTC	678	OUT	GET /r/iz8qMuHEDbxyraVR92qZ HTTP/1.1 Host: weixin.qq.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:28:59 UTC	186	IN	HTTP/1.1 200 OK Content-Length: 544 Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, must-revalidate Connection: close Strict-Transport-Security: max-age=31536000
2024-10-13 03:28:59 UTC	544	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 67 62 32 33 31 32 22 2f 3e 0d 0a 09 09 0d 0a 09 3c 2f 68 65 61 64 3e 0d 0a 09 3c 62 6f 64 79 3e 0d 0a 09 09 0d 0a 09 09 3c 73 63 72 69 70 74 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 0d 0a 09 09 09 20 20 20 20 20 20 20 20 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 6c 61 6e 67 75 61 67 65 20 3d 3d 20 22 7a 68 2d 43 4e 22 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 20 3d 3d 20 22 7a 68 2d 43 4e 22 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 77 69 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="content-type" content="text/html;charset=gb2312"/></head><body><script> if(navigator.language == "zh-CN" \|\| navigator.userLanguage == "zh-CN"){ wi

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.4	49768	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:00 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:00 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:00 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 12 Oct 2024 04:31:01 GMT ETag: "0x8DCEA76AD821850" x-ms-request-id: 5e3cf53f-d01e-007a-3ba0-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032900Z-17db6f7c8cfcrfgzd01a8emnyg00000001w0000000005gx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:00 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-13 03:29:00 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-13 03:29:00 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-13 03:29:00 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-13 03:29:00 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-13 03:29:00 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-13 03:29:00 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-13 03:29:00 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-13 03:29:00 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-13 03:29:00 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.4	49774	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:01 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:01 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: b913ea27-a01e-0002-1718-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032901Z-17db6f7c8cfqxt4wrzg7st2fm800000004bg00000000dv2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:01 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49771	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:01 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:01 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 3735e006-a01e-006f-3de4-1a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032901Z-17db6f7c8cfhzb2znbk0zyvf6n00000003xg00000000fg8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:01 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49773	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:01 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:01 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:01 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 971a1148-a01e-000d-48cd-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032901Z-17db6f7c8cf5mtxmr1c51513n000000004mg000000002042 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:01 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49770	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:01 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:01 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d08e5818-a01e-003d-3417-1c98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032901Z-17db6f7c8cfvtw4hh2496wp8p800000002sg0000000089f2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:01 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49772	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:01 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:01 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 695c64e8-001e-0034-5de7-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032901Z-17db6f7c8cf96l6t7bwyfgbkhw000000038g00000000ekxz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:01 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49769	43.155.124.49	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:01 UTC	677	OUT	GET /cgi-bin/readtemplate?t=market_redirect HTTP/1.1 Host: wechat.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:01 UTC	506	IN	HTTP/1.1 302 Found Strict-Transport-Security: max-age=15768000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Authorization,Origin,No-Cache,X-Requested-With,If-Modified-Since,Pragma,Last-Modified,Cache-Control,Expires,Content-Type,X-E4M-With Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Max-Age: 1728000 Location: /mobile Vary: Accept Content-Type: text/html; charset=utf-8 Content-Length: 58 Date: Sun, 13 Oct 2024 03:29:01 GMT Connection: close
2024-10-13 03:29:01 UTC	58	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 6d 6f 62 69 6c 65 22 3e 2f 6d 6f 62 69 6c 65 3c 2f 61 3e 3c 2f 70 3e Data Ascii: <p>Found. Redirecting to <a href="/mobile">/mobile</a></p>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49777	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:02 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:02 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 52965a57-601e-000d-5970-1c2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032902Z-17db6f7c8cf9wwz8ehu7c5p33g00000001hg00000000cs8c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:02 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49775	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:02 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 6c20420a-501e-008f-0947-1c9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032902Z-17db6f7c8cffhvbz3mt0ydz7x400000002gg000000008mt2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49779	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:02 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:02 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: efaf982b-c01e-008e-2e47-1c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032902Z-17db6f7c8cfjxfnba42c5rukwg000000018g00000000a8m6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:02 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49778	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:02 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:02 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: c77ee0be-a01e-0032-0c24-1b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032902Z-17db6f7c8cfbd7pgux3k6qfa6000000003a0000000001q6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:02 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49776	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:02 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:02 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032902Z-17db6f7c8cfhzb2znbk0zyvf6n00000003zg00000000awan x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:02 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49780	43.155.124.49	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:02 UTC	645	OUT	GET /mobile HTTP/1.1 Host: wechat.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:03 UTC	195	IN	HTTP/1.1 301 Moved Permanently Location: https://www.wechat.com/mobile Date: Sun, 13-Oct-2024 03:29:03 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49783	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:03 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:03 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 458f517b-301e-000c-2fe6-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032903Z-17db6f7c8cfwtn5x6ye8p8q9m000000002w0000000009uyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:03 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49784	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:03 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:03 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 4a155f70-001e-0017-2dd7-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032903Z-17db6f7c8cfvzwz27u5rnq9kpc00000004ng000000007fyr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:03 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49781	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:03 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:03 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: aec2753b-d01e-007a-1ef5-1cf38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032903Z-17db6f7c8cfnqpbkckdefmqa44000000047g00000000f67p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:03 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49782	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:03 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:03 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 0f9ac3ff-201e-0003-4016-1cf85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032903Z-17db6f7c8cfmhggkx889x958tc00000001n00000000000pf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:03 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49785	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:03 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:03 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e456ac6c-b01e-0097-6bbf-1a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032903Z-17db6f7c8cfspvtq2pgqb2w5k0000000042g00000000kzw7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:03 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49788	13.107.246.60	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:03 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:03 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 0c32318b-701e-0098-6762-1c395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032903Z-17db6f7c8cf6f7vv3recfp4a6w00000001dg000000005r3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:03 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49787	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:03 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b85ce019-d01e-0028-4fe2-1a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032903Z-17db6f7c8cfwtn5x6ye8p8q9m000000002vg00000000bgac x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49786	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:03 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:03 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 3826920f-501e-0078-42aa-1b06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032903Z-17db6f7c8cfwtn5x6ye8p8q9m000000002zg000000002thp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:03 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49790	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:03 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:03 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 55879866-201e-0033-5b1c-1cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032903Z-17db6f7c8cf5mtxmr1c51513n000000004h0000000007xrv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:04 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49789	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:03 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:04 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:04 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5355bdce-701e-0021-10ea-1a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032904Z-17db6f7c8cfnqpbkckdefmqa44000000048g00000000d0bm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:04 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49791	43.153.248.110	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:04 UTC	649	OUT	GET /mobile HTTP/1.1 Host: www.wechat.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:05 UTC	259	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=15768000 Access-Control-Allow-Origin: * Content-Type: text/html; charset=utf-8 Content-Length: 10146 ETag: W/"27a2-WvYeIiA4oKS+8Y35rMsZTtaiYXM" Date: Sun, 13 Oct 2024 03:29:04 GMT Connection: close
2024-10-13 03:29:05 UTC	10146	IN	Data Raw: 20 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 20 63 6c 61 73 73 3d 65 6e 3e 20 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 66 61 63 65 62 6f 6f 6b 2d 64 6f 6d 61 69 6e 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 20 63 6f 6e 74 65 6e 74 3d 62 33 73 70 79 6c 6d 32 39 72 6d 74 77 31 76 39 31 37 36 35 69 7a 38 64 37 6f 38 66 6c 37 20 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 74 77 69 74 74 65 72 3a 63 61 72 64 20 63 6f 6e 74 65 6e 74 3d 61 70 70 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 74 77 69 74 74 65 72 3a 61 70 70 3a 63 6f 75 6e 74 72 79 20 63 6f 6e 74 65 6e 74 3d 75 73 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 74 77 69 74 74 65 72 3a 61 70 70 3a 6e 61 6d 65 3a 69 70 68 6f 6e 65 20 63 6f 6e 74 65 6e 74 3d 57 65 Data Ascii: <!doctype html> <html lang=en class=en> <head> <meta name=facebook-domain-verification content=b3spylm29rmtw1v91765iz8d7o8fl7 /> <meta name=twitter:card content=app> <meta name=twitter:app:country content=us> <meta name=twitter:app:name:iphone content=We

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49796	13.107.246.60	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:05 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:05 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6ca0adc2-b01e-0021-19e3-1acab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032905Z-17db6f7c8cfqxt4wrzg7st2fm800000004dg000000009712 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:05 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49795	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:05 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 11c3f343-501e-0078-0139-1c06cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032905Z-17db6f7c8cfpm9w8b1ybgtytds000000027000000000bv64 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49792	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:05 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 94304cac-901e-0048-809f-1bb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032905Z-17db6f7c8cf9c22xp43k2gbqvn00000001xg00000000buux x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49794	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:05 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:05 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: fa6a24a8-e01e-0099-78e3-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032905Z-17db6f7c8cfspvtq2pgqb2w5k0000000049g000000001u1m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:05 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49793	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:05 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: a5b27f46-b01e-003d-5a47-1cd32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032905Z-17db6f7c8cf9c22xp43k2gbqvn00000001z0000000007q5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49799	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:06 UTC	646	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/css/46172cee66bf4f26d72091b7741b1a7e.css HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.wechat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:06 UTC	498	IN	HTTP/1.1 200 OK Last-Modified: Tue, 01 Aug 2023 11:37:19 GMT Etag: "46172cee66bf4f26d72091b7741b1a7e" Content-Type: text/css Date: Mon, 30 Sep 2024 17:15:46 GMT Server: tencent-cos x-cos-hash-crc64ecma: 530333092591062886 x-cos-request-id: NjZmYWRjYzJfNTc5NjdmMGJfMzAwNV8xZDYwN2E3 Content-Length: 9788 Accept-Ranges: bytes X-NWS-LOG-UUID: 15353265729387535557 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:06 UTC	9788	IN	Data Raw: 2e 66 6f 6f 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 63 6f 6c 6f 72 3a 23 61 38 61 38 61 38 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 65 65 3b 70 61 64 64 69 6e 67 3a 35 30 70 78 20 30 20 38 30 70 78 7d 2e 66 6f 6f 74 65 72 5f 69 6e 6e 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 31 32 29 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 66 6f 6f 74 65 72 20 2e 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 3a 36 70 78 20 35 70 78 3b 63 6f 6c 6f 72 3a 23 61 38 61 38 61 38 7d 2e 66 6f 6f 74 65 72 5f 65 6c 65 7b 70 61 64 64 69 6e 67 3a 36 70 78 20 34 70 78 7d 2e 66 6f 6f 74 Data Ascii: .footer{position:relative;font-size:12px;color:#a8a8a8;text-align:center;background:#eee;padding:50px 0 80px}.footer_inner{border-top:1px solid hsla(0,0%,100%,.12);margin:0 auto}.footer .link{padding:6px 5px;color:#a8a8a8}.footer_ele{padding:6px 4px}.foot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49801	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:06 UTC	667	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1-MVNBf.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wechat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:06 UTC	502	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "d125f273833371ee3a018cbcbc8aec86" Content-Type: image/png Date: Wed, 12 Jun 2024 08:20:58 GMT Server: tencent-cos x-cos-hash-crc64ecma: 15853789266458649732 x-cos-request-id: NjY2OTVhNmFfMWU5NjNkMDlfYWM0M18yNTYyNDY5 Content-Length: 167984 Accept-Ranges: bytes X-NWS-LOG-UUID: 4847447226536249946 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 6c 00 00 04 dd 08 03 00 00 00 c5 0d fa fd 00 00 01 80 50 4c 54 45 47 70 4c 29 21 31 ef ef ef 18 17 17 29 29 21 f7 f7 f7 21 21 21 10 10 10 29 29 29 29 21 21 54 54 53 de 4a 4a e7 ef f0 54 32 27 64 44 32 3b 32 30 30 18 10 c7 cb ca 21 18 27 b8 bb bc ce d6 d7 48 40 40 bc c6 c8 d8 da dc 6b 55 48 37 28 21 ce ce d3 92 68 4f 63 5b 5c 31 45 5e dc e7 e9 da bb ac 28 34 4c 35 31 27 39 42 41 7f 50 38 b4 89 6e 31 29 31 87 59 46 c7 96 73 79 64 52 92 74 68 9f 85 78 b2 93 8b 40 53 6d eb cc b5 9a a1 9d a9 a9 a8 ff ff ff aa b5 b9 db cb b7 ef d8 ca f7 ee e8 ae 79 66 fb ed dc d9 d8 c9 90 92 95 ef ef f7 a6 ad b3 a5 73 54 ef ef e6 4b 63 7c 5b 72 8f dc b6 9b d5 de e8 e8 e7 e3 ca 99 88 29 31 31 39 21 17 bc a6 94 96 a9 b5 d9 Data Ascii: PNGIHDRlPLTEGpL)!1))!!!!))))!!TTSJJT2'dD2;200!'H@@kUH7(!hOc[\1E^(4L51'9BAP8n1)1YFsydRthx@SmyfsTKc\|[r)119!
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 9c 82 2d 5f a5 f3 ab 73 1f 32 75 b6 50 d4 06 a9 cc 60 80 dc 80 59 93 22 e0 e0 83 a9 a4 cb c0 d9 b6 44 b3 99 0d 5f 68 1b a7 61 94 28 30 6c 2a a5 31 7a 43 46 2a 2a 55 6c dd 90 72 0a 3c b1 5e 82 63 c3 ae ed a8 f6 d1 d6 92 e3 82 34 17 e6 cd 0b 23 69 75 6a 98 4c a5 09 99 f7 d7 ee 44 35 9a f5 11 c4 f7 24 31 1d 07 2b 76 74 6c d7 c2 b7 47 b0 cd 9c 3d 3e 9b b9 16 c2 06 c7 66 96 9a 2d e4 45 ad 26 c5 c5 12 58 73 dd 45 1a 9d c5 45 57 c8 1b c7 4e 24 02 76 43 25 d4 ea 75 67 cb a9 2f 91 02 6a 2a 7b 3a ae 84 a8 78 47 4e a1 f4 94 68 53 2e 15 9a 1d 22 60 93 0b 8d 8b d1 a7 e8 ca 32 3b 9b 09 69 51 27 7e 27 5d 66 4b 4b db 55 d4 1b 05 6c cf 26 c1 36 de 1b 4d e6 b3 79 59 65 db b9 8f 67 a3 89 b9 3c 63 2d ad 6c f9 32 4e 0c 90 7e ce 65 61 63 5d 5b 8d fd da f6 f6 da a0 5a 76 0d 31 Data Ascii: -_s2uP`Y"D_ha(0l1zCFUlr<^c4#iujLD5$1+vtlG=>f-E&XsEEWN$vC%ug/j{:xGNhS."`2;iQ'~']fKKUl&6MyYeg<c-l2N~eac][Zv1
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 2d 54 ed 81 d6 d6 df 54 18 6c 65 a8 ca 08 d8 84 d1 6c b1 4e 77 72 63 e3 3b ba f7 8b 68 b5 2a 96 b5 eb 0d a7 ac 74 51 3a ba 01 e1 94 c3 84 b1 f4 1d a8 68 b1 f0 db a0 19 60 0e 53 72 6d 3c 78 30 1c fe 78 c2 ce 1b d1 5a 00 00 76 a3 b0 de 79 26 c1 a8 12 96 c0 46 41 d5 b0 9e bf 84 01 c2 79 29 b0 1a 96 12 1b 16 78 e7 1b 3c e7 d4 49 d5 26 d1 9f dd 16 a9 2c 57 ad 93 da d1 3f f1 d9 7a ff 1c c4 9f 80 b6 70 4c b1 28 f0 32 a0 33 82 98 cd 19 4d c6 69 2c 9a ee 3e 43 b2 2d 12 b8 c1 82 1a b9 31 48 d7 ab 6c 00 5b 38 02 5b 42 a4 e9 d4 db 68 80 0e d1 1a 0e b5 06 f7 d9 c8 f3 80 54 3a bd db fd d6 c4 87 73 d9 67 78 f1 27 12 b9 12 1a 58 6e e3 ac 2e 33 a6 59 dc 67 1b 24 22 a3 e1 40 26 c8 7f ff 6d 6a a3 ba 55 74 37 33 e4 72 cc d3 54 b9 60 94 78 4d d0 f6 e6 1a 60 5b 5e 39 5a bb 7d Data Ascii: -TTlelNwrc;h*tQ:h`Srm<x0xZvy&FAy)x<I&,W?zpL(23Mi,>C-1Hl[8[BhT:sgx'Xn.3Yg$"@&mjUt73rT`xM`[^9Z}
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 24 f1 31 26 31 67 3e ec d4 08 b6 d5 8b 04 ea 83 bd d5 f5 ad c4 ab b7 af d1 65 0b 3e fa 81 2b 04 cf 79 63 a2 4f a5 d3 e9 be 57 77 06 4d 10 fc 71 f4 71 7f 8e 9d b3 ae 89 8e 8a 29 8b 37 0f 7a a6 e5 86 f4 6d d3 ce 48 11 43 ff b1 b8 79 c2 79 29 31 b7 b8 70 d5 c8 3a 1e b5 a9 35 a1 50 5b e8 25 1a 20 15 f7 f6 d8 4c 0f 7c 9e 7d 35 9f d7 64 ca 86 d5 1c ec c0 32 7f 75 ba e7 67 4f 8f e7 06 c5 cb cb c6 65 d1 c0 6b 50 2c 36 8a 7c d2 18 0c 00 35 17 6d 86 d9 28 53 ac a3 02 b5 9f dc 35 26 00 29 de d1 f0 e7 9b 8a 59 02 b4 a3 ef d1 d4 15 66 73 1e d8 67 2b 75 5d cb 51 5f 89 d0 dc d8 58 fb 4a d2 48 13 37 aa 67 9d 9d 9f bc d4 3e 9b d5 fa a0 b6 fa 32 1c 0d 04 84 75 ac 1f 91 ed e4 b7 39 99 c9 6a 4f 3c cc ad a4 78 ca 38 d2 e1 45 c5 57 8a 83 a1 b0 54 0c c9 b0 94 1c 04 1b 8f d2 92 Data Ascii: $1&1g>e>+ycOWwMqq)7zmHCyy)1p:5P[% L\|}5d2ugOekP,6\|5m(S5&)Yfsg+u]Q_XJH7g>2u9jO<x8EWT
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 99 04 b5 43 6d 60 a6 3b d5 58 58 c6 d7 2b df 61 b3 30 19 65 18 3d 8a c8 c8 40 05 dc eb f4 b3 a5 17 4e 4a 87 01 b2 02 25 f1 14 e5 02 5d 32 5e 27 97 46 4b 67 90 13 53 7d 6a 0a 06 7b e4 77 ee ac b6 4a d5 2a 28 64 7b 76 f4 34 49 3e 6b 1a 93 4a 11 64 a7 4b e4 5d 62 84 14 47 2f 79 ca 46 6d cc 30 23 9b 65 96 86 64 b8 6e 3a e6 46 e4 1b 52 d7 9d 2a 24 33 83 6f 63 fa f2 88 be fc a5 44 4f 29 b1 c3 35 cd 21 dd 12 da ba a0 ad 62 7d 9a b3 70 9f 19 84 07 f3 d9 62 98 b5 f8 b3 06 9b af ce 75 9c b7 66 92 1d 28 a9 28 f8 de cf ea 61 2e ec 86 69 c7 2a 4d d9 81 b8 0a 81 c8 e2 57 89 8c 14 8c 18 ab ed b6 6b 1c d1 86 96 8d c4 a7 58 ae d3 43 e5 5e 40 d9 41 d9 f2 56 97 7f 5e 5e a9 3a b1 2c 88 e2 4d c6 b1 f2 a2 c8 4c fb cc 00 61 b0 5d f4 c5 95 2a 99 97 f8 bc df ef 76 8f 59 f6 f4 dd Data Ascii: Cm`;XX+a0e=@NJ%]2^'FKgS}j{wJ(d{v4I>kJdK]bG/yFm0#edn:FR$3ocDO)5!b}pbuf((a.iMWkXC^@AV^^:,MLa]vY
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 51 cf de da de 21 52 23 a8 95 c7 8b 03 e6 b7 e3 63 46 db d5 e8 95 bf 3d 37 e6 51 cd a8 79 6e cd bf bd ff fb a6 9a a0 d7 cf 82 9c 92 6c ac df 54 01 44 e6 56 03 16 6e 17 5f 8c d1 a7 b3 d1 3f 56 d6 6c 95 b6 90 7e cc 2b e3 28 13 58 ab 3c 41 77 9c 4e 26 49 f9 ac 65 08 2d 33 69 81 c8 26 c6 47 ae 0d e5 93 49 e8 c8 01 4e f4 65 cf ad 16 ed f8 ac 92 63 0c 4f 8b 89 cb 1a d2 2c 1d 0e 63 7a dd 58 70 d1 1b c4 6b 0d 41 6d 18 a7 26 98 8d ae d8 c0 9f 98 ec ca e5 49 9a d3 96 d0 ef 7d 9c 41 b7 a1 b3 c4 98 cb 74 f3 ad 7c 81 28 25 99 56 7c e9 af a1 4d 76 f8 66 9b 9f 9e 31 27 bf 16 36 c8 6f 8e ff 71 7d 7d 78 d2 a1 21 da f1 43 82 1a dd fb b0 1d fa 4e de a1 21 1a fc 76 f6 70 f3 70 70 70 84 8f 23 05 37 4c d4 63 8d b6 1d 92 6d 06 0a 49 ae 17 c4 fd db df 0f 2b 6a ed fa 79 34 27 5b Data Ascii: Q!R#cF=7QynlTDVn_?Vl~+(X<AwN&Ie-3i&GINecO,czXpkAm&I}At\|(%V\|Mvf1'6oq}}x!CN!vpppp#7LcmI+jy4'[
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: e9 07 66 4f 18 ed 67 b8 d3 29 c7 9a 28 4c 99 ce 08 f5 6c 5b 8b 60 d9 50 a9 3b ad 77 d7 cd 01 d9 d2 4f 0c 1d e5 e0 d0 3e 19 d7 fd be 91 28 61 7f 80 a6 62 ba 36 18 54 74 cb 92 3a 52 27 55 29 ef 1e d4 4e 63 8d 83 66 b3 e6 fe 37 e6 b4 db 8e 6b 37 dc 8b aa 59 8a 27 2b 15 24 3e ce ab 6b c9 12 54 69 f1 92 aa 16 ae 21 36 e2 69 25 d9 92 7c 68 7b 9e bd da 76 ee df 16 b0 dc 49 2e 80 22 91 7e 47 ea 2e a6 66 23 f7 01 8f 3b c4 28 a1 45 17 6e ba ed 05 fb ca 21 c2 37 ed 71 5e 8a e5 a8 cc b3 eb 04 17 b4 19 eb 48 4d 42 64 73 48 cb b6 15 1c f3 ba 3f 72 dd 91 6b a7 f7 3e ed 61 4c 83 ce 40 6c 55 55 39 d4 ca e4 f6 61 b1 55 3e 22 db d6 c6 dc ea 14 5d da 92 d2 ad dc 2e 1a 7f f8 1e 94 bf be 51 56 d8 3a 5f 3a 2f c0 26 14 52 2c 2c 0b 5b 40 7f 37 d1 1f 95 70 43 c4 85 74 a3 b4 32 3c Data Ascii: fOg)(Ll[`P;wO>(ab6Tt:R'U)Ncf7k7Y'+$>kTi!6i%\|h{vI."~G.f#;(En!7q^HMBdsH?rk>aL@lUU9aU>"].QV:_:/&R,,[@7pCt2<
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: d9 09 d4 6c 90 fc 60 22 8a ce 9b c0 d5 51 0c 46 3d 58 37 67 cc 54 51 b3 d5 33 34 d8 92 47 94 4a e9 91 03 6c 19 95 6e 18 74 12 bf 64 7e e0 f2 cc 21 cb 54 bd c7 5d 37 7a a2 d7 0a bd a2 56 2b 3c be ac 8c cf 06 d8 94 ca 08 91 6d d0 91 2b 7d 27 d7 67 af 4d 58 7b 3d 17 d8 2a 48 bb bd 66 5b 60 36 ba a7 e7 52 4d b6 a4 2f 5b 6a b2 71 56 55 bb 29 51 a2 9e 66 fb a5 a8 b7 ac e2 82 bd e0 8a 08 c0 91 76 f6 5e 3d 65 1f 19 eb 11 af 6d 63 7d 1d 0f 77 75 bb bd 75 b8 f1 db d6 ef bf ec 1c ee ff be 75 3c fd 63 d4 1a 3d 7b f5 6a 3a 22 d4 8d a8 86 bb f9 63 77 da 19 dd e4 fc 37 65 31 b9 c7 d5 df fd 10 fd 10 e5 a9 ab e6 f0 c1 92 da 40 08 d4 78 b7 c2 42 f5 b5 db f2 6e 5a 89 c5 d2 1a 58 da 1f cd 16 02 db 3d 0e 6b dc 62 3b 24 7e 70 7e de f9 3f 6d d7 fe 9b c6 99 45 a5 00 f5 e2 6a be Data Ascii: l`"QF=X7gTQ34GJlntd~!T]7zV+<m+}'gMX{=*Hf[`6RM/[jqVU)Qfv^=emc}wuuu<c={j:"cw7e1@xBnZX=kb;$~p~?mEj
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: e5 7e a3 58 1f 58 2a 32 70 08 b3 c6 59 db bb cf ff fc 6e 36 fa 93 ca b3 5d 9d d4 c2 f9 7c 86 be 8f b9 04 1b 99 30 c2 9b 83 b1 4d 9d 4c 17 6a 24 93 09 38 c2 04 2d 20 00 9b 3e dd e1 dd 06 c4 13 10 c4 d9 81 b5 83 0d 8f 64 da d0 f3 c6 f3 06 74 b1 7d 65 c9 ad a8 12 f9 0b c7 2e 13 e4 26 04 b4 d6 69 ef d4 31 9c 52 44 61 9e 9e 4b d0 d3 d0 23 72 7a 80 0d 61 48 97 58 5d ba 7f 3b d1 c5 5c 7d 10 24 b1 a1 3e 4d 46 b4 f2 cb af 1c a6 89 d9 03 06 dc ee 8a 22 28 cb c6 cd 93 08 dc 1e 26 66 1b cb 86 b4 76 3c 9c 27 84 be e9 be 54 ea 0d 41 55 c3 63 ac af 1f 9f 37 20 8d 96 a2 f7 16 6f 2e c7 40 f5 f3 f3 a1 b4 69 22 8b 4b f6 8c 71 46 5f ce 85 57 65 17 4a df 34 1f 02 74 00 1b fc 27 b9 d1 b7 be 44 5b 59 b9 51 09 37 d6 f9 10 1a 46 02 6f 12 69 c6 3a 23 e5 1e 71 82 5b da 7c 71 f8 f3 Data Ascii: ~XX*2pYn6]\|0MLj$8- >dt}e.&i1RDaK#rzaHX];\}$>MF"(&fv<'TAUc7 o.@i"KqF_WeJ4t'D[YQ7Foi:#q[\|q
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 28 4d dd a5 98 28 f5 17 4d bd 5b 72 96 b8 36 98 bf 91 ad cd 66 a5 c7 a7 0d 83 21 ae c6 a3 8b f1 8d 16 d9 dc 7e 0a 9b 95 79 0f dc 41 e2 af 0c 6b e8 8e fd ec f8 b6 54 1c b8 ac 5e 93 68 3f 29 33 ea e4 36 98 6b c4 f6 b9 be 89 f2 0d 80 2f 24 1b 1f ee a5 30 1b ab dd c6 d6 3c c1 7e 96 d7 0b 5b 63 01 6b 8b 41 ad 2e 97 ae 5b 8e 87 56 1d ed 72 31 c6 6a 37 40 2e eb cd 1d 8d 4c 5f 55 1a 5b ea 37 55 d7 36 2c f3 db 9f c7 1b b7 b3 b1 a3 b9 ad 7e db d9 a1 5e 14 cf 4f 30 36 2c 9a 4b f9 bd 02 11 2d ed 72 42 09 9b 46 51 cb 20 f5 12 04 19 b5 55 b5 b1 ad f6 a4 6d 8b 46 8d 5f cc 76 7a 1e d4 69 99 6f 05 0d 53 92 0c 12 0b 29 64 59 1e da 70 11 dc b7 87 18 38 d2 a8 d3 93 60 b4 8c cf e8 d5 e0 15 c7 87 da 26 1f ac cb b0 b3 b1 ba 63 d8 aa f0 d9 b1 ac 87 19 2d d4 ee 39 42 f0 aa ba 01 Data Ascii: (M(M[r6f!~yAkT^h?)36k/$0<~[ckA.[Vr1j7@.L_U[7U6,~^O06,K-rBFQ UmF_vzioS)dYp8`&c-9B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49798	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:06 UTC	667	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1jwBxj0.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wechat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:06 UTC	500	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "6bfeee13f3fd56248a37a219cf248391" Content-Type: image/png Date: Mon, 30 Sep 2024 16:26:48 GMT Server: tencent-cos x-cos-hash-crc64ecma: 4818056123997281099 x-cos-request-id: NjZmYWQxNDhfYmNlZjk4MWVfMjJkMF8xY2FiM2Ri Content-Length: 15808 Accept-Ranges: bytes X-NWS-LOG-UUID: 3947641528840359920 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:06 UTC	15808	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 36 00 00 01 aa 08 03 00 00 00 cd 8b a6 26 00 00 00 33 50 4c 54 45 00 00 00 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe c4 07 d7 d8 00 00 00 10 74 52 4e 53 00 bf 40 7f 10 ef 9f 60 cf 20 df 30 50 70 af 8f 25 bc 38 2f 00 00 3d 2c 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 f6 e0 40 00 00 00 00 00 c8 ff b5 11 54 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: PNGIHDR6&3PLTEtRNS@` 0Pp%8/=,IDATx`@TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49800	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:06 UTC	562	OUT	GET /t/wx_fed/cdn_libs/res/jquery/1.7.2/jquery.min.js HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wechat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:06 UTC	515	IN	HTTP/1.1 200 OK Last-Modified: Tue, 30 Mar 2021 16:41:05 GMT Etag: "b11ced65f32fedbe9bf81ef9db0f3c94" Content-Type: application/javascript Date: Mon, 30 Sep 2024 16:35:41 GMT Server: tencent-cos x-cos-hash-crc64ecma: 13566890593835603385 x-cos-request-id: NjZmYWQzNWRfMWEwZjc1MDlfOThiNl8xODlmNDk4 Content-Length: 94839 Accept-Ranges: bytes X-NWS-LOG-UUID: 18018442247447295722 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 32 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 69 66 28 21 63 6a 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d Data Ascii: /! jQuery v1.7.2 jquery.com \| jquery.org/license /(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e=
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 22 57 69 74 68 22 5d 28 74 68 69 73 3d 3d 3d 69 3f 64 3a 74 68 69 73 2c 5b 67 5d 29 7d 29 3a 69 5b 61 5d 28 64 5b 65 5d 29 7d 29 7d 29 2e 70 72 6f 6d 69 73 65 28 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 61 3d 68 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 62 20 69 6e 20 68 29 61 5b 62 5d 3d 68 5b 62 5d 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 69 3d 68 2e 70 72 6f 6d 69 73 65 28 7b 7d 29 2c 6a 3b 66 6f 72 28 6a 20 69 6e 20 67 29 69 5b 6a 5d 3d 67 5b 6a 5d 2e 66 69 72 65 2c 69 5b 6a 2b 22 57 69 74 68 22 5d 3d 67 5b 6a 5d 2e 66 69 72 65 57 69 74 68 3b 69 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 3d 22 72 65 73 6f 6c 76 65 64 22 7d 2c 63 2e 64 69 73 61 62 6c 65 2c 64 2e 6c 6f 63 6b 29 2e 66 61 Data Ascii: "With"](this===i?d:this,[g])}):i[a](d[e])})}).promise()},promise:function(a){if(a==null)a=h;else for(var b in h)a[b]=h[b];return a}},i=h.promise({}),j;for(j in g)i[j]=g[j].fire,i[j+"With"]=g[j].fireWith;i.done(function(){e="resolved"},c.disable,d.lock).fa
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 68 6f 76 65 72 3f 61 3a 61 2e 72 65 70 6c 61 63 65 28 42 2c 22 6d 6f 75 73 65 65 6e 74 65 72 24 31 20 6d 6f 75 73 65 6c 65 61 76 65 24 31 22 29 7d 3b 66 2e 65 76 65 6e 74 3d 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 2c 65 2c 67 29 7b 76 61 72 20 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 3b 69 66 28 21 28 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 33 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 38 7c 7c 21 63 7c 7c 21 64 7c 7c 21 28 68 3d 66 2e 5f 64 61 74 61 28 61 29 29 29 29 7b 64 2e 68 61 6e 64 6c 65 72 26 26 28 70 3d 64 2c 64 3d 70 2e 68 61 6e 64 6c 65 72 2c 67 3d 70 2e 73 65 6c 65 63 74 6f 72 29 2c 64 2e 67 75 69 64 7c 7c 28 64 2e 67 75 69 64 3d 66 2e 67 75 69 64 2b 2b Data Ascii: .event.special.hover?a:a.replace(B,"mouseenter$1 mouseleave$1")};f.event={add:function(a,c,d,e,g){var h,i,j,k,l,m,n,o,p,q,r,s;if(!(a.nodeType===3\|\|a.nodeType===8\|\|!c\|\|!d\|\|!(h=f._data(a)))){d.handler&&(p=d,d=p.handler,g=p.selector),d.guid\|\|(d.guid=f.guid++
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 2e 66 69 6c 74 65 72 28 62 2c 61 2c 21 30 29 7d 2c 22 3e 22 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 74 79 70 65 6f 66 20 62 3d 3d 22 73 74 72 69 6e 67 22 2c 65 3d 30 2c 66 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 64 26 26 21 6c 2e 74 65 73 74 28 62 29 29 7b 62 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 66 6f 72 28 3b 65 3c 66 3b 65 2b 2b 29 7b 63 3d 61 5b 65 5d 3b 69 66 28 63 29 7b 76 61 72 20 67 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 61 5b 65 5d 3d 67 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 3f 67 3a 21 31 7d 7d 7d 65 6c 73 65 7b 66 6f 72 28 3b 65 3c 66 3b 65 2b 2b 29 63 3d 61 5b 65 5d 2c 63 26 26 28 61 5b 65 5d 3d 64 3f 63 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 63 2e 70 61 72 65 Data Ascii: .filter(b,a,!0)},">":function(a,b){var c,d=typeof b=="string",e=0,f=a.length;if(d&&!l.test(b)){b=b.toLowerCase();for(;e<f;e++){c=a[e];if(c){var g=c.parentNode;a[e]=g.nodeName.toLowerCase()===b?g:!1}}}else{for(;e<f;e++)c=a[e],c&&(a[e]=d?c.parentNode:c.pare
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 6e 74 73 29 3b 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 66 2e 63 6c 65 61 6e 28 61 72 67 75 6d 65 6e 74 73 29 29 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3b 28 64 3d 74 68 69 73 5b 63 5d 29 21 3d 6e 75 6c 6c 3b 63 2b 2b 29 69 66 28 21 61 7c 7c 66 2e 66 69 6c 74 65 72 28 61 2c 5b 64 5d 29 2e 6c 65 6e 67 74 68 29 21 62 26 26 64 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 28 66 2e 63 6c 65 61 6e 44 61 74 61 28 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 29 2c 66 2e 63 6c 65 61 6e 44 61 74 61 28 5b 64 5d 29 29 2c 64 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 64 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c Data Ascii: nts);a.push.apply(a,f.clean(arguments));return a}},remove:function(a,b){for(var c=0,d;(d=this[c])!=null;c++)if(!a\|\|f.filter(a,[d]).length)!b&&d.nodeType===1&&(f.cleanData(d.getElementsByTagName("*")),f.cleanData([d])),d.parentNode&&d.parentNode.removeChil
2024-10-13 03:29:06 UTC	12919	IN	Data Raw: 6e 29 7b 76 61 72 20 64 2c 65 3d 63 2e 68 65 61 64 7c 7c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 7c 7c 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 7b 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 64 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 64 2e 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 2c 61 2e 73 63 72 69 70 74 43 68 61 72 73 65 74 26 26 28 64 2e 63 68 61 72 73 65 74 3d 61 2e 73 63 72 69 70 74 43 68 61 72 73 65 74 29 2c 64 2e 73 72 63 3d 61 2e 75 72 6c 2c 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 69 66 28 63 7c 7c 21 64 2e 72 65 61 Data Ascii: n){var d,e=c.head\|\|c.getElementsByTagName("head")[0]\|\|c.documentElement;return{send:function(f,g){d=c.createElement("script"),d.async="async",a.scriptCharset&&(d.charset=a.scriptCharset),d.src=a.url,d.onload=d.onreadystatechange=function(a,c){if(c\|\|!d.rea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49797	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:06 UTC	611	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/js/index_f89dbf8.js HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.wechat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:06 UTC	514	IN	HTTP/1.1 200 OK Last-Modified: Thu, 29 Feb 2024 07:37:00 GMT Etag: "f89dbf8f275e3c9144675c3f49959141" Content-Type: application/javascript Date: Sun, 29 Sep 2024 03:14:33 GMT Server: tencent-cos x-cos-hash-crc64ecma: 17369729491291850190 x-cos-request-id: NjZmOGM2MTlfNDkyYTY4MDlfMTg4YV8xYWZjYTJj Content-Length: 97034 Accept-Ranges: bytes X-NWS-LOG-UUID: 1636511671696682858 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 69 66 28 6e 5b 72 5d 29 72 65 74 75 72 6e 20 6e 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 74 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 2e 6d 3d 65 2c 74 2e 63 3d 6e 2c 74 2e 70 3d 22 2f 2f 6e 65 77 72 65 73 2e 77 65 63 68 61 74 2e 63 6f 6d 2f 74 2f 77 78 5f 66 65 64 2f 62 61 73 65 2f 77 65 63 68 61 74 2f 77 65 63 68 61 74 2d 6d 61 69 6e 2d 70 61 67 65 2f 77 65 63 68 61 74 Data Ascii: !function(e){function t(r){if(n[r])return n[r].exports;var i=n[r]={exports:{},id:r,loaded:!1};return e[r].call(i.exports,i,i.exports,t),i.loaded=!0,i.exports}var n={};return t.m=e,t.c=n,t.p="//newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 6c 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 63 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 63 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 43 65 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 6c 26 26 28 61 3d 74 68 69 73 2c 73 2d 2d 29 3b 73 3c 6c 3b 73 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f Data Ascii: .fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,l=arguments.length,c=!1;for("boolean"==typeof a&&(c=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|Ce(a)\|\|(a={}),s===l&&(a=this,s--);s<l;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 72 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 3d 72 2b 22 2d 22 29 29 7d 7d 2c 43 48 49 4c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 22 6e 74 68 22 21 3d 3d 65 2e 73 6c 69 63 65 28 30 2c 33 29 2c 61 3d 22 6c 61 73 74 22 21 3d 3d 65 2e 73 6c 69 63 65 28 2d 34 29 2c 73 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 74 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 72 26 26 30 3d 3d 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 6c 29 7b 76 61 72 20 63 2c 75 2c 66 2c 70 2c 64 2c 68 2c 67 3d 6f 21 3d 3d 61 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 6d 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 Data Ascii: r.length+1)===r+"-"))}},CHILD:function(e,t,n,r,i){var o="nth"!==e.slice(0,3),a="last"!==e.slice(-4),s="of-type"===t;return 1===r&&0===i?function(e){return!!e.parentNode}:function(t,n,l){var c,u,f,p,d,h,g=o!==a?"nextSibling":"previousSibling",m=t.parentNod
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 45 65 2e 71 75 65 75 65 28 74 68 69 73 2c 65 2c 74 29 3b 45 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 65 29 2c 22 66 78 22 3d 3d 3d 65 26 26 22 69 6e 70 72 6f 67 72 65 73 73 22 21 3d 3d 6e 5b 30 5d 26 26 45 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 65 29 7d 29 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 45 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 65 29 7d 29 7d 2c 63 6c 65 61 72 51 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 75 65 28 65 7c 7c 22 66 78 22 2c 5b 5d 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: h(function(){var n=Ee.queue(this,e,t);Ee._queueHooks(this,e),"fx"===e&&"inprogress"!==n[0]&&Ee.dequeue(this,e)})},dequeue:function(e){return this.each(function(){Ee.dequeue(this,e)})},clearQueue:function(e){return this.queue(e\|\|"fx",[])},promise:function(
2024-10-13 03:29:06 UTC	16384	IN	Data Raw: 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 31 21 3d 3d 65 2e 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 7c 7c 6e 75 6c 6c 21 3d 65 2e 65 6c 65 6d 5b 65 2e 70 72 6f 70 5d 26 26 6e 75 6c 6c 3d 3d 65 2e 65 6c 65 6d 2e 73 74 79 6c 65 5b 65 2e 70 72 6f 70 5d 3f 65 2e 65 6c 65 6d 5b 65 2e 70 72 6f 70 5d 3a 28 74 3d 45 65 2e 63 73 73 28 65 2e 65 6c 65 6d 2c 65 2e 70 72 6f 70 2c 22 22 29 2c 74 26 26 22 61 75 74 6f 22 21 3d 3d 74 3f 74 3a 30 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 45 65 2e 66 78 2e 73 74 65 70 5b 65 2e 70 72 6f 70 5d 3f 45 65 2e 66 78 2e 73 74 65 70 5b 65 2e 70 72 6f 70 5d 28 65 29 3a 31 21 3d 3d 65 2e 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 45 65 2e 63 73 73 48 6f 6f 6b 73 5b 65 2e 70 72 6f 70 5d 26 26 6e 75 6c 6c 3d 3d Data Ascii: e){var t;return 1!==e.elem.nodeType\|\|null!=e.elem[e.prop]&&null==e.elem.style[e.prop]?e.elem[e.prop]:(t=Ee.css(e.elem,e.prop,""),t&&"auto"!==t?t:0)},set:function(e){Ee.fx.step[e.prop]?Ee.fx.step[e.prop](e):1!==e.elem.nodeType\|\|!Ee.cssHooks[e.prop]&&null==
2024-10-13 03:29:06 UTC	15114	IN	Data Raw: 70 5d 29 3b 69 66 28 68 2e 62 65 66 6f 72 65 53 65 6e 64 26 26 28 68 2e 62 65 66 6f 72 65 53 65 6e 64 2e 63 61 6c 6c 28 67 2c 43 2c 68 29 3d 3d 3d 21 31 7c 7c 75 29 29 72 65 74 75 72 6e 20 43 2e 61 62 6f 72 74 28 29 3b 69 66 28 77 3d 22 61 62 6f 72 74 22 2c 79 2e 61 64 64 28 68 2e 63 6f 6d 70 6c 65 74 65 29 2c 43 2e 64 6f 6e 65 28 68 2e 73 75 63 63 65 73 73 29 2c 43 2e 66 61 69 6c 28 68 2e 65 72 72 6f 72 29 2c 69 3d 73 65 28 51 74 2c 68 2c 74 2c 43 29 29 7b 69 66 28 43 2e 72 65 61 64 79 53 74 61 74 65 3d 31 2c 66 26 26 6d 2e 74 72 69 67 67 65 72 28 22 61 6a 61 78 53 65 6e 64 22 2c 5b 43 2c 68 5d 29 2c 75 29 72 65 74 75 72 6e 20 43 3b 68 2e 61 73 79 6e 63 26 26 68 2e 74 69 6d 65 6f 75 74 3e 30 26 26 28 6c 3d 6e 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e Data Ascii: p]);if(h.beforeSend&&(h.beforeSend.call(g,C,h)===!1\|\|u))return C.abort();if(w="abort",y.add(h.complete),C.done(h.success),C.fail(h.error),i=se(Qt,h,t,C)){if(C.readyState=1,f&&m.trigger("ajaxSend",[C,h]),u)return C;h.async&&h.timeout>0&&(l=n.setTimeout(fun

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:06 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:06 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032906Z-17db6f7c8cfnqpbkckdefmqa4400000004a000000000apau x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:06 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:06 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d4fa587e-101e-008e-331f-1ccf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032906Z-17db6f7c8cfvtw4hh2496wp8p800000002vg000000001cct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49802	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:06 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:06 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 5007ca28-801e-00a0-7d20-1b2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032906Z-17db6f7c8cfbr2wt66emzt78g400000003xg000000003zg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:06 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49803	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:06 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3776c2af-901e-0048-1a6f-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032906Z-17db6f7c8cf9c22xp43k2gbqvn000000021g000000002ray x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:06 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:06 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7708100b-601e-003e-5be1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032906Z-17db6f7c8cfnqpbkckdefmqa44000000048g00000000d0f7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:06 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49807	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	788	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/3cBQnDI.jpg HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/css/46172cee66bf4f26d72091b7741b1a7e.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:07 UTC	503	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "892e1d57bc6289186c3dc0506c1c760e" Content-Type: image/jpeg Date: Sun, 29 Sep 2024 11:42:49 GMT Server: tencent-cos x-cos-hash-crc64ecma: 13507878429684184734 x-cos-request-id: NjZmOTNkMzlfNzJiNjgwOV8xMzQ3MV8xM2VhNzBk Content-Length: 92578 Accept-Ranges: bytes X-NWS-LOG-UUID: 12978025919216539212 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:07 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c2 00 11 08 06 e0 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 00 02 03 04 06 05 07 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 ce 6d 8a a2 24 22 22 22 Data Ascii: JFIFC#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;@m$"""
2024-10-13 03:29:07 UTC	16384	IN	Data Raw: 23 08 9a 84 a0 32 bc e3 91 c9 78 cb c5 79 98 5c 94 ba b3 67 43 aa 76 4e d6 76 3a 27 44 d5 68 88 02 20 58 08 88 88 88 80 82 33 6e 64 ca e4 ca e4 25 2a 05 64 88 48 48 44 08 20 50 25 c8 2e 4c 98 5c 2e 4c 80 11 0c 24 44 11 93 26 42 b2 64 2a 48 51 b3 49 ab 11 4a a2 40 84 44 d1 b3 66 d3 66 cd 1a 88 40 00 ca e0 c2 e2 39 2f 38 e6 b8 5c 2e 65 16 84 55 35 08 c4 04 82 89 19 00 03 20 15 25 52 55 59 15 99 4c d7 33 99 ce b9 27 33 06 41 42 88 88 ad a4 aa 96 22 21 28 a9 96 21 54 90 59 20 02 b0 02 00 3e 93 d3 e7 d9 bb 3a 1b 3a 59 a3 75 a3 48 88 91 10 92 c4 41 11 0c b4 52 d9 ac b6 69 29 2e 23 9a f2 8e 27 05 f3 a7 9e b8 1c 0e 56 72 30 00 26 a5 e8 bb 8e b2 f4 5d ae a1 aa 0a c9 94 c5 65 2b 13 76 74 3a 59 b3 56 46 4e 66 0c d0 91 ab 34 6a b7 5a 34 24 09 2e 60 33 19 33 01 99 40 Data Ascii: #2xy\gCvNv:'Dh X3nd%dHHD P%.L\.L$D&BdHQIJ@Dff@9/8\.eU5 %RUYL3'3AB"!(!TY >::YuHARi).#'Vr0&]e+vt:YVFNf4jZ4$.`33@
2024-10-13 03:29:07 UTC	16384	IN	Data Raw: 00 c8 02 14 19 00 32 00 01 51 01 01 01 01 44 44 23 15 ac 22 24 44 24 04 44 29 53 09 08 90 50 06 0c 81 09 a3 a2 ec e9 1d 0d 1b 58 44 88 91 20 20 20 4c e3 a0 64 ca e0 c1 93 06 40 c8 15 43 2c 26 84 d1 b3 67 44 d9 b4 d0 19 b3 91 c4 e3 67 03 8a 72 ac 19 02 12 12 22 21 21 54 61 13 46 85 74 26 c6 34 6d 75 26 8d 0a a2 05 19 58 0a 58 8d 10 c4 34 01 93 35 8b 32 62 b2 99 a0 2a 88 aa 28 48 44 8a a8 40 aa 28 80 80 8a a1 84 84 aa 22 28 88 88 d4 68 d4 bd 0d c7 48 e8 bb 8d 89 01 93 15 ce cc 18 ac d6 52 21 15 d4 68 61 12 00 5c d9 93 20 15 11 09 08 94 26 8d 1b 3a 1d 0e c7 73 b2 76 5e a7 48 42 b0 73 38 9c 4e 2b c8 e6 98 00 02 48 95 48 88 48 84 88 88 48 88 95 34 26 8d 1b 4d 1b 34 6e 36 ba 34 6a 54 44 44 88 2c 2c 2b 28 59 9b 0a 90 20 20 00 08 ad 20 20 02 00 09 6a 08 08 00 0c Data Ascii: 2QDD#"$D$D)SPXD Ld@C,&gDgr"!!TaFt&4mu&XX452b*(HD@("(hHR!ha\ &:sv^HBs8N+HHHH4&M4n64jTDD,,+(Y j
2024-10-13 03:29:07 UTC	16384	IN	Data Raw: 88 8d 22 30 90 91 09 11 51 15 50 54 40 50 50 06 53 26 0c 57 33 9a 73 b7 06 13 35 90 22 22 10 18 aa 56 22 11 21 58 44 88 88 88 62 a8 84 a1 a8 62 21 11 54 d0 8c 68 57 49 a3 52 e8 d1 a9 74 2a c2 52 b2 c4 42 ac 42 22 44 40 04 04 45 51 11 11 12 24 44 44 40 00 00 66 8b 02 a5 1b 36 74 4e b6 75 3a d9 d0 e9 66 86 4c ae 2b 94 bc 0e 27 09 78 2f 13 99 ce 32 01 40 11 01 11 11 10 11 11 11 11 00 91 11 10 15 44 42 44 44 44 04 40 44 44 44 45 10 a8 42 b0 94 42 a8 9a 35 1a 34 ba 11 18 09 40 22 22 11 34 69 35 5b 4d 56 93 46 91 1b 11 11 b3 42 9a ad 8a 6a b4 9a 11 22 a0 20 00 32 00 64 00 00 c9 93 26 4c 2e 50 00 00 22 02 21 25 48 48 84 84 88 84 86 2a a2 12 48 96 22 02 20 22 22 02 22 01 96 a8 88 a2 12 3f 1e ca 13 51 a5 d0 9a 35 08 8d 30 88 8d 26 a1 21 24 56 12 2a a1 22 aa 22 aa Data Ascii: "0QPT@PPS&W3s5""V"!XDbb!ThWIRtRBB"D@EQ$DD@f6tNu:fL+'x/2@DBDDD@DDDEBB54@""4i5[MVFBj" 2d&L.P"!%HHH" """?Q50&!$V*""
2024-10-13 03:29:07 UTC	16384	IN	Data Raw: 54 63 18 f6 92 49 24 e4 b9 ce 73 f4 f2 49 24 92 49 24 92 49 24 93 90 74 00 92 4f ae 31 8f 6d 34 e6 39 ce 73 f4 72 49 24 92 49 24 92 49 24 92 69 24 9c 33 a1 8f b3 31 8c 74 3e 51 c8 89 3e 7e 49 24 92 49 24 92 49 a4 92 49 24 93 b6 70 0c 63 ed 0c 63 1f 2f 11 13 c8 7c 7c 92 49 24 92 49 27 9e 75 9d 27 86 49 dc 63 1f 68 63 18 c7 cb 44 44 4f 19 f1 d2 49 24 92 49 39 f2 49 24 92 49 3a 1c bb 75 bf 2a 63 18 c7 cb c4 44 47 c4 78 ee bd 2f b1 9d 64 92 49 24 92 49 24 f4 92 49 24 92 4e 7d f9 83 18 c6 38 96 df 7f 22 22 22 70 af 4b ad f6 13 ba 69 a7 49 24 d3 d2 c9 24 92 49 24 e7 5f 98 3a 18 4c 63 83 7a 5b 6d b6 dd 7a 5f 69 11 11 11 3c b6 f6 5b ee 24 9a 4d 3d 6c 92 49 24 93 ee 4c 63 18 4c 79 ad b6 db 6d b6 db 6d b7 da 44 44 44 4f 1d b7 a5 b7 ec 67 49 24 d3 ee 4c 61 30 98 7c Data Ascii: TcI$sI$I$I$tO1m49srI$I$I$i$31t>Q>~I$I$II$pcc/\|\|I$I'u'IchcDDOI$I9I$I:u*cDGx/dI$I$I$N}8"""pKiI$$I$_:Lcz[mz_i<[$M=lI$LcLymmDDDOgI$La0\|
2024-10-13 03:29:07 UTC	10658	IN	Data Raw: b8 09 03 c8 32 cb 2c b2 ce 1c 2d b6 d9 8c 62 94 a5 9f ae db e7 7d 6f 37 9b dd b6 18 61 86 1b 6d 88 43 86 f1 b6 db 6d b6 db 6d b6 db 6d b6 db 6d b6 db 6d b6 db 6d b6 db 2d b2 cb 6c b2 db 6d b6 db 6f e4 df c8 74 8b 38 10 59 64 16 59 65 92 49 65 96 59 04 44 70 47 ac b2 cb 2c b2 cb 3a 44 41 04 10 41 04 16 59 65 96 49 67 82 23 c3 3e 41 9f 44 44 47 c8 e1 11 11 11 1f 85 99 e3 f1 cb 2c b2 cb 2c b2 cf a8 f8 1c 33 8c e9 96 7c 40 08 42 65 96 59 65 96 59 c1 08 42 10 e8 21 d0 7e 01 00 0c b2 cb 2c f5 b6 cb 2c b3 16 52 cb f9 36 db 7d 0f 37 c6 db 0d b6 db 6f 07 03 c0 6d bc 6d b6 db 6d b6 db 6d b6 db 6d b6 db 6d b6 db 6d b6 db 6c b2 db 2d b2 db 6d b6 f7 7f 90 44 10 41 04 16 41 65 96 59 65 96 59 65 96 59 04 10 44 44 47 8c b3 99 65 96 59 67 08 88 88 20 82 08 20 b2 cb 2c b2 Data Ascii: 2,-b}o7amCmmmmmm-lmot8YdYeIeYDpG,:DAAYeIg#>ADDG,,3\|@BeYeYB!~,,R6}7ommmmmmml-mDAAeYeYeYDDGeYg ,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49812	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	788	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/3ou3PnG.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/css/46172cee66bf4f26d72091b7741b1a7e.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:07 UTC	502	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "5496c1924fd485d9c8e2541434a1b3dc" Content-Type: image/png Date: Mon, 29 Apr 2024 08:59:45 GMT Server: tencent-cos x-cos-hash-crc64ecma: 417740338250459693 x-cos-request-id: NjYyZjYxODFfNDhjZDExMGJfN2EwMV8xMTJmZThhZA== Content-Length: 5167 Accept-Ranges: bytes X-NWS-LOG-UUID: 1810445945833522448 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:07 UTC	5167	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 4c 00 00 01 4c 08 03 00 00 00 97 b0 75 6d 00 00 02 fd 50 4c 54 45 47 70 4c f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 Data Ascii: PNGIHDRLLumPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49808	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	788	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/u7U1PY3.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/css/46172cee66bf4f26d72091b7741b1a7e.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:07 UTC	503	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "aaec6a453c14067cd710518fca1e718d" Content-Type: image/png Date: Mon, 29 Apr 2024 08:59:45 GMT Server: tencent-cos x-cos-hash-crc64ecma: 1664858056339643561 x-cos-request-id: NjYyZjYxODFfMjhmMzRmMGJfMjE1M2JfOWNiNjBlZA== Content-Length: 3004 Accept-Ranges: bytes X-NWS-LOG-UUID: 6865068047658983699 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:07 UTC	3004	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 64 00 00 00 60 08 03 00 00 00 1d 23 f8 b0 00 00 00 9f 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 df df df 40 40 40 20 20 20 bf bf bf 80 80 80 10 10 10 ef ef ef 60 60 60 a0 a0 a0 9f 9f 9f 90 90 90 30 30 30 cf cf cf 50 50 50 70 70 70 af af af 6f 6f 6f 7f 7f 7f 5f 5f 5f 4f 4f 4f 8f 8f 8f b0 b0 b0 01 01 01 fe fe fe ee ee ee 21 21 21 ce ce ce 71 71 71 be be be 31 31 31 9e 9e 9e de de de 11 11 11 61 61 61 41 41 41 ae ae ae eb 42 11 26 00 00 00 0f 74 52 4e 53 00 20 df ce cf 8f 40 fe 10 90 a0 8e 9f 9e de b3 15 8b ed 00 00 0a bd 49 44 41 54 78 da ed 9d d9 62 db b6 12 86 99 2e a9 d3 b3 fc Data Ascii: PNGIHDRd`#PLTEGpL@@@ ```000PPPpppooo___OOO!!!qqq111aaaAAAB&tRNS @IDATxb.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49811	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	788	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/3MmDWEv.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/css/46172cee66bf4f26d72091b7741b1a7e.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:07 UTC	503	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "7eafe952fdf131b0d254ed55e02c4bd5" Content-Type: image/png Date: Fri, 10 May 2024 05:18:58 GMT Server: tencent-cos x-cos-hash-crc64ecma: 8149413540536343828 x-cos-request-id: NjYzZGFlNDJfYjk5MmYyMWVfMzM3ODZfOGEyMTEyMQ== Content-Length: 2445 Accept-Ranges: bytes X-NWS-LOG-UUID: 8527598900030989557 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:07 UTC	2445	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 64 00 00 00 60 08 03 00 00 00 1d 23 f8 b0 00 00 00 75 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 20 20 20 40 40 40 df df df bf bf bf 80 80 80 60 60 60 10 10 10 ef ef ef 9f 9f 9f a0 a0 a0 90 90 90 cf cf cf 30 30 30 50 50 50 70 70 70 af af af 6f 6f 6f 5f 5f 5f 7f 7f 7f 8f 8f 8f 4f 4f 4f b0 b0 b0 43 9f 72 c7 00 00 00 0f 74 52 4e 53 00 20 df ce cf 8f 40 fe 10 90 a0 8e 9f 9e de b3 15 8b ed 00 00 08 b8 49 44 41 54 78 da ed 9d 59 63 db b8 0e 85 d5 99 69 6f 3a 77 39 00 01 2e 5a 2d d9 6e ff ff 4f bc 0f 5a 4c 59 5e 14 27 76 9c 0c f1 d0 26 b6 28 29 9f c0 83 85 74 92 65 59 96 fd f8 f9 07 25 Data Ascii: PNGIHDRd`#uPLTEGpL @@@```000PPPpppooo___OOOCrtRNS @IDATxYcio:w9.Z-nOZLY^'v&()teY%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49810	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	788	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/uq8YAlZ.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/css/46172cee66bf4f26d72091b7741b1a7e.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:07 UTC	504	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "624b20ee57c48301212460b460a47ebc" Content-Type: image/png Date: Mon, 29 Apr 2024 08:59:45 GMT Server: tencent-cos x-cos-hash-crc64ecma: 4522457139527761912 x-cos-request-id: NjYyZjYxODFfMWU5NjNkMDlfMTQ5NDRfYTIzZjQ3ZA== Content-Length: 2242 Accept-Ranges: bytes X-NWS-LOG-UUID: 13714220544721446511 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:07 UTC	2242	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 60 08 03 00 00 00 db e6 6c 09 00 00 00 a5 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 40 40 40 df df df bf bf bf 80 80 80 fe fe fe 01 01 01 20 20 20 10 10 10 60 60 60 9f 9f 9f ef ef ef a0 a0 a0 be be be 90 90 90 70 70 70 61 61 61 41 41 41 de de de cf cf cf af af af 5f 5f 5f 11 11 11 30 30 30 6f 6f 6f 21 21 21 9e 9e 9e 50 50 50 8f 8f 8f 7f 7f 7f ee ee ee 31 31 31 4f 4f 4f 51 51 51 71 71 71 ce ce ce ae ae ae b0 b0 b0 8e 8e 8e 21 12 0c 6d 00 00 00 0f 74 52 4e 53 00 20 df ce cf 8f 40 fe 10 90 a0 8e 9f 9e de b3 15 8b ed 00 00 07 bd 49 44 41 54 78 da ed dd 5b 7b da b8 16 06 Data Ascii: PNGIHDR`lPLTEGpL@@@ ```pppaaaAAA___000ooo!!!PPP111OOOQQQqqq!mtRNS @IDATx[{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49809	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	788	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/2d9odS_.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/css/46172cee66bf4f26d72091b7741b1a7e.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:07 UTC	501	IN	HTTP/1.1 200 OK Last-Modified: Sun, 30 Apr 2023 15:13:30 GMT Etag: "c338cda91242421593eeefd63e87db5e" Content-Type: image/png Date: Thu, 08 Aug 2024 18:15:24 GMT Server: tencent-cos x-cos-hash-crc64ecma: 13447340991404977418 x-cos-request-id: NjZiNTBiM2NfZDk5M2M1MDlfN2QwMl83ODM1OTNm Content-Length: 5997 Accept-Ranges: bytes X-NWS-LOG-UUID: 16596951311703391325 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:07 UTC	5997	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 2a 00 00 01 20 08 03 00 00 00 6c 13 77 ba 00 00 00 7b 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 60 60 60 40 40 40 20 20 20 df df df bf bf bf 80 80 80 10 10 10 9f 9f 9f ef ef ef 70 70 70 a0 a0 a0 90 90 90 cf cf cf 50 50 50 30 30 30 af af af 8f 8f 8f 7f 7f 7f b0 b0 b0 6f 6f 6f 5f 5f 5f d0 2a ff c8 00 00 00 12 74 52 4e 53 00 7f cf bf 60 df 10 ef 20 80 90 50 af 9f 5f 8f b0 a0 72 49 df 87 00 00 16 8f 49 44 41 54 78 da ed 9d 6b 63 9b b8 b6 40 3d 7d 4f 67 e6 9c 73 6d 90 84 00 03 c6 69 e7 ff ff c2 1b c7 b1 2d 40 8f 0d 71 12 bb 5d eb 5b 53 1b 0b b1 17 da 7a 20 Data Ascii: PNGIHDR* lw{PLTEGpL```@@@ pppPPP000ooo___*tRNS` P_rIIDATxkc@=}Ogsmi-@q][Sz

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:07 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: fcff0b5c-f01e-005d-588a-1b13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032907Z-17db6f7c8cfbd7pgux3k6qfa60000000035g00000000d37u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:07 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:07 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 574f47a0-001e-0028-2c81-1bc49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032907Z-17db6f7c8cfwtn5x6ye8p8q9m000000002ug00000000dx4d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:07 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 69483ed4-001e-0034-56df-1add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032907Z-17db6f7c8cfnqpbkckdefmqa44000000047000000000kq75 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1375d82d-b01e-0084-53a9-1cd736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032907Z-17db6f7c8cfqkqk8bn4ck6f7200000000430000000007q38 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:07 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 4ea1e91c-d01e-0066-2741-1cea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032907Z-17db6f7c8cf6f7vv3recfp4a6w00000001f0000000002573 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:07 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49819	101.33.21.91	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	434	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1jwBxj0.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:08 UTC	500	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "6bfeee13f3fd56248a37a219cf248391" Content-Type: image/png Date: Mon, 05 Aug 2024 02:25:15 GMT Server: tencent-cos x-cos-hash-crc64ecma: 4818056123997281099 x-cos-request-id: NjZiMDM4MGJfYTk2YzE0MGJfNmQzZV8xYmZjOTgx Content-Length: 15808 Accept-Ranges: bytes X-NWS-LOG-UUID: 2537817255355278179 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:08 UTC	15808	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 36 00 00 01 aa 08 03 00 00 00 cd 8b a6 26 00 00 00 33 50 4c 54 45 00 00 00 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe c4 07 d7 d8 00 00 00 10 74 52 4e 53 00 bf 40 7f 10 ef 9f 60 cf 20 df 30 50 70 af 8f 25 bc 38 2f 00 00 3d 2c 49 44 41 54 78 da ec c1 81 00 00 00 00 80 a0 fd a9 17 a9 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 f6 e0 40 00 00 00 00 00 c8 ff b5 11 54 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: PNGIHDR6&3PLTEtRNS@` 0Pp%8/=,IDATx`@TUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49824	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	667	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1TQxEzr.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wechat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:08 UTC	499	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "e8a575bcdb8ec7be3fc87e234811c5b1" Content-Type: image/png Date: Tue, 18 Jun 2024 14:38:22 GMT Server: tencent-cos x-cos-hash-crc64ecma: 8627293270071395601 x-cos-request-id: NjY3MTliZGVfODhhMDA4MDlfOWUwZV8yZDAyNDky Content-Length: 292 Accept-Ranges: bytes X-NWS-LOG-UUID: 17751634912380315843 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:08 UTC	292	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 54 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 83 4b e9 d3 00 00 00 1b 74 52 4e 53 00 2d d2 f6 a9 ec ae ee 11 14 d7 56 99 2c d6 26 d0 d5 35 da 3a 82 f8 96 1f 0f 80 13 7f 7d b3 00 00 00 64 49 44 41 54 38 cb 63 60 40 05 42 3c 02 ac ec 40 c0 80 1d 48 b2 48 43 01 76 79 4e 3e 69 fc 0a d8 a4 f1 2b 10 91 26 a0 40 9c 90 02 61 b0 14 13 37 3f 27 07 07 56 05 62 60 05 12 0c 38 01 3e f7 d3 43 01 c2 83 ec cc 40 42 10 8f 02 30 90 22 a4 80 97 80 02 Data Ascii: PNGIHDR DTPLTEGpLKtRNS-V,&5:}dIDAT8c`@B<@HHCvyN>i+&@a7?'Vb`8>C@B0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49818	101.33.21.91	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	389	OUT	GET /t/wx_fed/cdn_libs/res/jquery/1.7.2/jquery.min.js HTTP/1.1 Host: newres.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:08 UTC	514	IN	HTTP/1.1 200 OK Last-Modified: Tue, 30 Mar 2021 16:41:05 GMT Etag: "b11ced65f32fedbe9bf81ef9db0f3c94" Content-Type: application/javascript Date: Mon, 19 Aug 2024 03:44:52 GMT Server: tencent-cos x-cos-hash-crc64ecma: 13566890593835603385 x-cos-request-id: NjZjMmJmYjRfNzljZDExMGJfMTA0M2JfNWIwMzFj Content-Length: 94839 Accept-Ranges: bytes X-NWS-LOG-UUID: 9602536132470999527 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 32 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 69 66 28 21 63 6a 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d Data Ascii: /! jQuery v1.7.2 jquery.com \| jquery.org/license /(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e=
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 22 57 69 74 68 22 5d 28 74 68 69 73 3d 3d 3d 69 3f 64 3a 74 68 69 73 2c 5b 67 5d 29 7d 29 3a 69 5b 61 5d 28 64 5b 65 5d 29 7d 29 7d 29 2e 70 72 6f 6d 69 73 65 28 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 61 3d 68 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 62 20 69 6e 20 68 29 61 5b 62 5d 3d 68 5b 62 5d 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 69 3d 68 2e 70 72 6f 6d 69 73 65 28 7b 7d 29 2c 6a 3b 66 6f 72 28 6a 20 69 6e 20 67 29 69 5b 6a 5d 3d 67 5b 6a 5d 2e 66 69 72 65 2c 69 5b 6a 2b 22 57 69 74 68 22 5d 3d 67 5b 6a 5d 2e 66 69 72 65 57 69 74 68 3b 69 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 3d 22 72 65 73 6f 6c 76 65 64 22 7d 2c 63 2e 64 69 73 61 62 6c 65 2c 64 2e 6c 6f 63 6b 29 2e 66 61 Data Ascii: "With"](this===i?d:this,[g])}):i[a](d[e])})}).promise()},promise:function(a){if(a==null)a=h;else for(var b in h)a[b]=h[b];return a}},i=h.promise({}),j;for(j in g)i[j]=g[j].fire,i[j+"With"]=g[j].fireWith;i.done(function(){e="resolved"},c.disable,d.lock).fa
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 68 6f 76 65 72 3f 61 3a 61 2e 72 65 70 6c 61 63 65 28 42 2c 22 6d 6f 75 73 65 65 6e 74 65 72 24 31 20 6d 6f 75 73 65 6c 65 61 76 65 24 31 22 29 7d 3b 66 2e 65 76 65 6e 74 3d 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 2c 65 2c 67 29 7b 76 61 72 20 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 3b 69 66 28 21 28 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 33 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 38 7c 7c 21 63 7c 7c 21 64 7c 7c 21 28 68 3d 66 2e 5f 64 61 74 61 28 61 29 29 29 29 7b 64 2e 68 61 6e 64 6c 65 72 26 26 28 70 3d 64 2c 64 3d 70 2e 68 61 6e 64 6c 65 72 2c 67 3d 70 2e 73 65 6c 65 63 74 6f 72 29 2c 64 2e 67 75 69 64 7c 7c 28 64 2e 67 75 69 64 3d 66 2e 67 75 69 64 2b 2b Data Ascii: .event.special.hover?a:a.replace(B,"mouseenter$1 mouseleave$1")};f.event={add:function(a,c,d,e,g){var h,i,j,k,l,m,n,o,p,q,r,s;if(!(a.nodeType===3\|\|a.nodeType===8\|\|!c\|\|!d\|\|!(h=f._data(a)))){d.handler&&(p=d,d=p.handler,g=p.selector),d.guid\|\|(d.guid=f.guid++
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 2e 66 69 6c 74 65 72 28 62 2c 61 2c 21 30 29 7d 2c 22 3e 22 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 74 79 70 65 6f 66 20 62 3d 3d 22 73 74 72 69 6e 67 22 2c 65 3d 30 2c 66 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 64 26 26 21 6c 2e 74 65 73 74 28 62 29 29 7b 62 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 66 6f 72 28 3b 65 3c 66 3b 65 2b 2b 29 7b 63 3d 61 5b 65 5d 3b 69 66 28 63 29 7b 76 61 72 20 67 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 61 5b 65 5d 3d 67 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 3f 67 3a 21 31 7d 7d 7d 65 6c 73 65 7b 66 6f 72 28 3b 65 3c 66 3b 65 2b 2b 29 63 3d 61 5b 65 5d 2c 63 26 26 28 61 5b 65 5d 3d 64 3f 63 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 63 2e 70 61 72 65 Data Ascii: .filter(b,a,!0)},">":function(a,b){var c,d=typeof b=="string",e=0,f=a.length;if(d&&!l.test(b)){b=b.toLowerCase();for(;e<f;e++){c=a[e];if(c){var g=c.parentNode;a[e]=g.nodeName.toLowerCase()===b?g:!1}}}else{for(;e<f;e++)c=a[e],c&&(a[e]=d?c.parentNode:c.pare
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 6e 74 73 29 3b 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 66 2e 63 6c 65 61 6e 28 61 72 67 75 6d 65 6e 74 73 29 29 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3b 28 64 3d 74 68 69 73 5b 63 5d 29 21 3d 6e 75 6c 6c 3b 63 2b 2b 29 69 66 28 21 61 7c 7c 66 2e 66 69 6c 74 65 72 28 61 2c 5b 64 5d 29 2e 6c 65 6e 67 74 68 29 21 62 26 26 64 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 26 26 28 66 2e 63 6c 65 61 6e 44 61 74 61 28 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 29 2c 66 2e 63 6c 65 61 6e 44 61 74 61 28 5b 64 5d 29 29 2c 64 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 64 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c Data Ascii: nts);a.push.apply(a,f.clean(arguments));return a}},remove:function(a,b){for(var c=0,d;(d=this[c])!=null;c++)if(!a\|\|f.filter(a,[d]).length)!b&&d.nodeType===1&&(f.cleanData(d.getElementsByTagName("*")),f.cleanData([d])),d.parentNode&&d.parentNode.removeChil
2024-10-13 03:29:08 UTC	12919	IN	Data Raw: 6e 29 7b 76 61 72 20 64 2c 65 3d 63 2e 68 65 61 64 7c 7c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 7c 7c 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 7b 73 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 64 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 64 2e 61 73 79 6e 63 3d 22 61 73 79 6e 63 22 2c 61 2e 73 63 72 69 70 74 43 68 61 72 73 65 74 26 26 28 64 2e 63 68 61 72 73 65 74 3d 61 2e 73 63 72 69 70 74 43 68 61 72 73 65 74 29 2c 64 2e 73 72 63 3d 61 2e 75 72 6c 2c 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 69 66 28 63 7c 7c 21 64 2e 72 65 61 Data Ascii: n){var d,e=c.head\|\|c.getElementsByTagName("head")[0]\|\|c.documentElement;return{send:function(f,g){d=c.createElement("script"),d.async="async",a.scriptCharset&&(d.charset=a.scriptCharset),d.src=a.url,d.onload=d.onreadystatechange=function(a,c){if(c\|\|!d.rea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49821	101.33.21.91	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	438	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/js/index_f89dbf8.js HTTP/1.1 Host: newres.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:08 UTC	515	IN	HTTP/1.1 200 OK Last-Modified: Thu, 29 Feb 2024 07:37:00 GMT Etag: "f89dbf8f275e3c9144675c3f49959141" Content-Type: application/javascript Date: Thu, 26 Sep 2024 05:11:27 GMT Server: tencent-cos x-cos-hash-crc64ecma: 17369729491291850190 x-cos-request-id: NjZmNGVjZmZfYjJhNTY4NjRfZDEzYl8xMTUxZDdl Content-Length: 97034 Accept-Ranges: bytes X-NWS-LOG-UUID: 17703141300844714114 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 72 29 7b 69 66 28 6e 5b 72 5d 29 72 65 74 75 72 6e 20 6e 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 74 29 2c 69 2e 6c 6f 61 64 65 64 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 2e 6d 3d 65 2c 74 2e 63 3d 6e 2c 74 2e 70 3d 22 2f 2f 6e 65 77 72 65 73 2e 77 65 63 68 61 74 2e 63 6f 6d 2f 74 2f 77 78 5f 66 65 64 2f 62 61 73 65 2f 77 65 63 68 61 74 2f 77 65 63 68 61 74 2d 6d 61 69 6e 2d 70 61 67 65 2f 77 65 63 68 61 74 Data Ascii: !function(e){function t(r){if(n[r])return n[r].exports;var i=n[r]={exports:{},id:r,loaded:!1};return e[r].call(i.exports,i,i.exports,t),i.loaded=!0,i.exports}var n={};return t.m=e,t.c=n,t.p="//newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 6c 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 63 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 63 3d 61 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 7c 7c 7b 7d 2c 73 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 43 65 28 61 29 7c 7c 28 61 3d 7b 7d 29 2c 73 3d 3d 3d 6c 26 26 28 61 3d 74 68 69 73 2c 73 2d 2d 29 3b 73 3c 6c 3b 73 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 72 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f Data Ascii: .fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,l=arguments.length,c=!1;for("boolean"==typeof a&&(c=a,a=arguments[s]\|\|{},s++),"object"==typeof a\|\|Ce(a)\|\|(a={}),s===l&&(a=this,s--);s<l;s++)if(null!=(e=arguments[s]))for(t in e)r=e[t],"__proto__
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 72 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 3d 72 2b 22 2d 22 29 29 7d 7d 2c 43 48 49 4c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 22 6e 74 68 22 21 3d 3d 65 2e 73 6c 69 63 65 28 30 2c 33 29 2c 61 3d 22 6c 61 73 74 22 21 3d 3d 65 2e 73 6c 69 63 65 28 2d 34 29 2c 73 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 74 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 72 26 26 30 3d 3d 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 6c 29 7b 76 61 72 20 63 2c 75 2c 66 2c 70 2c 64 2c 68 2c 67 3d 6f 21 3d 3d 61 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 6d 3d 74 2e 70 61 72 65 6e 74 4e 6f 64 Data Ascii: r.length+1)===r+"-"))}},CHILD:function(e,t,n,r,i){var o="nth"!==e.slice(0,3),a="last"!==e.slice(-4),s="of-type"===t;return 1===r&&0===i?function(e){return!!e.parentNode}:function(t,n,l){var c,u,f,p,d,h,g=o!==a?"nextSibling":"previousSibling",m=t.parentNod
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 45 65 2e 71 75 65 75 65 28 74 68 69 73 2c 65 2c 74 29 3b 45 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 65 29 2c 22 66 78 22 3d 3d 3d 65 26 26 22 69 6e 70 72 6f 67 72 65 73 73 22 21 3d 3d 6e 5b 30 5d 26 26 45 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 65 29 7d 29 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 45 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 65 29 7d 29 7d 2c 63 6c 65 61 72 51 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 75 65 28 65 7c 7c 22 66 78 22 2c 5b 5d 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: h(function(){var n=Ee.queue(this,e,t);Ee._queueHooks(this,e),"fx"===e&&"inprogress"!==n[0]&&Ee.dequeue(this,e)})},dequeue:function(e){return this.each(function(){Ee.dequeue(this,e)})},clearQueue:function(e){return this.queue(e\|\|"fx",[])},promise:function(
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 31 21 3d 3d 65 2e 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 7c 7c 6e 75 6c 6c 21 3d 65 2e 65 6c 65 6d 5b 65 2e 70 72 6f 70 5d 26 26 6e 75 6c 6c 3d 3d 65 2e 65 6c 65 6d 2e 73 74 79 6c 65 5b 65 2e 70 72 6f 70 5d 3f 65 2e 65 6c 65 6d 5b 65 2e 70 72 6f 70 5d 3a 28 74 3d 45 65 2e 63 73 73 28 65 2e 65 6c 65 6d 2c 65 2e 70 72 6f 70 2c 22 22 29 2c 74 26 26 22 61 75 74 6f 22 21 3d 3d 74 3f 74 3a 30 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 45 65 2e 66 78 2e 73 74 65 70 5b 65 2e 70 72 6f 70 5d 3f 45 65 2e 66 78 2e 73 74 65 70 5b 65 2e 70 72 6f 70 5d 28 65 29 3a 31 21 3d 3d 65 2e 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 45 65 2e 63 73 73 48 6f 6f 6b 73 5b 65 2e 70 72 6f 70 5d 26 26 6e 75 6c 6c 3d 3d Data Ascii: e){var t;return 1!==e.elem.nodeType\|\|null!=e.elem[e.prop]&&null==e.elem.style[e.prop]?e.elem[e.prop]:(t=Ee.css(e.elem,e.prop,""),t&&"auto"!==t?t:0)},set:function(e){Ee.fx.step[e.prop]?Ee.fx.step[e.prop](e):1!==e.elem.nodeType\|\|!Ee.cssHooks[e.prop]&&null==
2024-10-13 03:29:08 UTC	15114	IN	Data Raw: 70 5d 29 3b 69 66 28 68 2e 62 65 66 6f 72 65 53 65 6e 64 26 26 28 68 2e 62 65 66 6f 72 65 53 65 6e 64 2e 63 61 6c 6c 28 67 2c 43 2c 68 29 3d 3d 3d 21 31 7c 7c 75 29 29 72 65 74 75 72 6e 20 43 2e 61 62 6f 72 74 28 29 3b 69 66 28 77 3d 22 61 62 6f 72 74 22 2c 79 2e 61 64 64 28 68 2e 63 6f 6d 70 6c 65 74 65 29 2c 43 2e 64 6f 6e 65 28 68 2e 73 75 63 63 65 73 73 29 2c 43 2e 66 61 69 6c 28 68 2e 65 72 72 6f 72 29 2c 69 3d 73 65 28 51 74 2c 68 2c 74 2c 43 29 29 7b 69 66 28 43 2e 72 65 61 64 79 53 74 61 74 65 3d 31 2c 66 26 26 6d 2e 74 72 69 67 67 65 72 28 22 61 6a 61 78 53 65 6e 64 22 2c 5b 43 2c 68 5d 29 2c 75 29 72 65 74 75 72 6e 20 43 3b 68 2e 61 73 79 6e 63 26 26 68 2e 74 69 6d 65 6f 75 74 3e 30 26 26 28 6c 3d 6e 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e Data Ascii: p]);if(h.beforeSend&&(h.beforeSend.call(g,C,h)===!1\|\|u))return C.abort();if(w="abort",y.add(h.complete),C.done(h.success),C.fail(h.error),i=se(Qt,h,t,C)){if(C.readyState=1,f&&m.trigger("ajaxSend",[C,h]),u)return C;h.async&&h.timeout>0&&(l=n.setTimeout(fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49820	101.33.21.91	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:07 UTC	434	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1-MVNBf.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:08 UTC	502	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "d125f273833371ee3a018cbcbc8aec86" Content-Type: image/png Date: Fri, 18 Aug 2023 02:40:42 GMT Server: tencent-cos x-cos-hash-crc64ecma: 15853789266458649732 x-cos-request-id: NjRkZWRhMmFfZTg1NGI1MDlfMWJkN182N2YzOGM5 Content-Length: 167984 Accept-Ranges: bytes X-NWS-LOG-UUID: 4119289832512488009 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 6c 00 00 04 dd 08 03 00 00 00 c5 0d fa fd 00 00 01 80 50 4c 54 45 47 70 4c 29 21 31 ef ef ef 18 17 17 29 29 21 f7 f7 f7 21 21 21 10 10 10 29 29 29 29 21 21 54 54 53 de 4a 4a e7 ef f0 54 32 27 64 44 32 3b 32 30 30 18 10 c7 cb ca 21 18 27 b8 bb bc ce d6 d7 48 40 40 bc c6 c8 d8 da dc 6b 55 48 37 28 21 ce ce d3 92 68 4f 63 5b 5c 31 45 5e dc e7 e9 da bb ac 28 34 4c 35 31 27 39 42 41 7f 50 38 b4 89 6e 31 29 31 87 59 46 c7 96 73 79 64 52 92 74 68 9f 85 78 b2 93 8b 40 53 6d eb cc b5 9a a1 9d a9 a9 a8 ff ff ff aa b5 b9 db cb b7 ef d8 ca f7 ee e8 ae 79 66 fb ed dc d9 d8 c9 90 92 95 ef ef f7 a6 ad b3 a5 73 54 ef ef e6 4b 63 7c 5b 72 8f dc b6 9b d5 de e8 e8 e7 e3 ca 99 88 29 31 31 39 21 17 bc a6 94 96 a9 b5 d9 Data Ascii: PNGIHDRlPLTEGpL)!1))!!!!))))!!TTSJJT2'dD2;200!'H@@kUH7(!hOc[\1E^(4L51'9BAP8n1)1YFsydRthx@SmyfsTKc\|[r)119!
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 9c 82 2d 5f a5 f3 ab 73 1f 32 75 b6 50 d4 06 a9 cc 60 80 dc 80 59 93 22 e0 e0 83 a9 a4 cb c0 d9 b6 44 b3 99 0d 5f 68 1b a7 61 94 28 30 6c 2a a5 31 7a 43 46 2a 2a 55 6c dd 90 72 0a 3c b1 5e 82 63 c3 ae ed a8 f6 d1 d6 92 e3 82 34 17 e6 cd 0b 23 69 75 6a 98 4c a5 09 99 f7 d7 ee 44 35 9a f5 11 c4 f7 24 31 1d 07 2b 76 74 6c d7 c2 b7 47 b0 cd 9c 3d 3e 9b b9 16 c2 06 c7 66 96 9a 2d e4 45 ad 26 c5 c5 12 58 73 dd 45 1a 9d c5 45 57 c8 1b c7 4e 24 02 76 43 25 d4 ea 75 67 cb a9 2f 91 02 6a 2a 7b 3a ae 84 a8 78 47 4e a1 f4 94 68 53 2e 15 9a 1d 22 60 93 0b 8d 8b d1 a7 e8 ca 32 3b 9b 09 69 51 27 7e 27 5d 66 4b 4b db 55 d4 1b 05 6c cf 26 c1 36 de 1b 4d e6 b3 79 59 65 db b9 8f 67 a3 89 b9 3c 63 2d ad 6c f9 32 4e 0c 90 7e ce 65 61 63 5d 5b 8d fd da f6 f6 da a0 5a 76 0d 31 Data Ascii: -_s2uP`Y"D_ha(0l1zCFUlr<^c4#iujLD5$1+vtlG=>f-E&XsEEWN$vC%ug/j{:xGNhS."`2;iQ'~']fKKUl&6MyYeg<c-l2N~eac][Zv1
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 2d 54 ed 81 d6 d6 df 54 18 6c 65 a8 ca 08 d8 84 d1 6c b1 4e 77 72 63 e3 3b ba f7 8b 68 b5 2a 96 b5 eb 0d a7 ac 74 51 3a ba 01 e1 94 c3 84 b1 f4 1d a8 68 b1 f0 db a0 19 60 0e 53 72 6d 3c 78 30 1c fe 78 c2 ce 1b d1 5a 00 00 76 a3 b0 de 79 26 c1 a8 12 96 c0 46 41 d5 b0 9e bf 84 01 c2 79 29 b0 1a 96 12 1b 16 78 e7 1b 3c e7 d4 49 d5 26 d1 9f dd 16 a9 2c 57 ad 93 da d1 3f f1 d9 7a ff 1c c4 9f 80 b6 70 4c b1 28 f0 32 a0 33 82 98 cd 19 4d c6 69 2c 9a ee 3e 43 b2 2d 12 b8 c1 82 1a b9 31 48 d7 ab 6c 00 5b 38 02 5b 42 a4 e9 d4 db 68 80 0e d1 1a 0e b5 06 f7 d9 c8 f3 80 54 3a bd db fd d6 c4 87 73 d9 67 78 f1 27 12 b9 12 1a 58 6e e3 ac 2e 33 a6 59 dc 67 1b 24 22 a3 e1 40 26 c8 7f ff 6d 6a a3 ba 55 74 37 33 e4 72 cc d3 54 b9 60 94 78 4d d0 f6 e6 1a 60 5b 5e 39 5a bb 7d Data Ascii: -TTlelNwrc;h*tQ:h`Srm<x0xZvy&FAy)x<I&,W?zpL(23Mi,>C-1Hl[8[BhT:sgx'Xn.3Yg$"@&mjUt73rT`xM`[^9Z}
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 24 f1 31 26 31 67 3e ec d4 08 b6 d5 8b 04 ea 83 bd d5 f5 ad c4 ab b7 af d1 65 0b 3e fa 81 2b 04 cf 79 63 a2 4f a5 d3 e9 be 57 77 06 4d 10 fc 71 f4 71 7f 8e 9d b3 ae 89 8e 8a 29 8b 37 0f 7a a6 e5 86 f4 6d d3 ce 48 11 43 ff b1 b8 79 c2 79 29 31 b7 b8 70 d5 c8 3a 1e b5 a9 35 a1 50 5b e8 25 1a 20 15 f7 f6 d8 4c 0f 7c 9e 7d 35 9f d7 64 ca 86 d5 1c ec c0 32 7f 75 ba e7 67 4f 8f e7 06 c5 cb cb c6 65 d1 c0 6b 50 2c 36 8a 7c d2 18 0c 00 35 17 6d 86 d9 28 53 ac a3 02 b5 9f dc 35 26 00 29 de d1 f0 e7 9b 8a 59 02 b4 a3 ef d1 d4 15 66 73 1e d8 67 2b 75 5d cb 51 5f 89 d0 dc d8 58 fb 4a d2 48 13 37 aa 67 9d 9d 9f bc d4 3e 9b d5 fa a0 b6 fa 32 1c 0d 04 84 75 ac 1f 91 ed e4 b7 39 99 c9 6a 4f 3c cc ad a4 78 ca 38 d2 e1 45 c5 57 8a 83 a1 b0 54 0c c9 b0 94 1c 04 1b 8f d2 92 Data Ascii: $1&1g>e>+ycOWwMqq)7zmHCyy)1p:5P[% L\|}5d2ugOekP,6\|5m(S5&)Yfsg+u]Q_XJH7g>2u9jO<x8EWT
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 99 04 b5 43 6d 60 a6 3b d5 58 58 c6 d7 2b df 61 b3 30 19 65 18 3d 8a c8 c8 40 05 dc eb f4 b3 a5 17 4e 4a 87 01 b2 02 25 f1 14 e5 02 5d 32 5e 27 97 46 4b 67 90 13 53 7d 6a 0a 06 7b e4 77 ee ac b6 4a d5 2a 28 64 7b 76 f4 34 49 3e 6b 1a 93 4a 11 64 a7 4b e4 5d 62 84 14 47 2f 79 ca 46 6d cc 30 23 9b 65 96 86 64 b8 6e 3a e6 46 e4 1b 52 d7 9d 2a 24 33 83 6f 63 fa f2 88 be fc a5 44 4f 29 b1 c3 35 cd 21 dd 12 da ba a0 ad 62 7d 9a b3 70 9f 19 84 07 f3 d9 62 98 b5 f8 b3 06 9b af ce 75 9c b7 66 92 1d 28 a9 28 f8 de cf ea 61 2e ec 86 69 c7 2a 4d d9 81 b8 0a 81 c8 e2 57 89 8c 14 8c 18 ab ed b6 6b 1c d1 86 96 8d c4 a7 58 ae d3 43 e5 5e 40 d9 41 d9 f2 56 97 7f 5e 5e a9 3a b1 2c 88 e2 4d c6 b1 f2 a2 c8 4c fb cc 00 61 b0 5d f4 c5 95 2a 99 97 f8 bc df ef 76 8f 59 f6 f4 dd Data Ascii: Cm`;XX+a0e=@NJ%]2^'FKgS}j{wJ(d{v4I>kJdK]bG/yFm0#edn:FR$3ocDO)5!b}pbuf((a.iMWkXC^@AV^^:,MLa]vY
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 51 cf de da de 21 52 23 a8 95 c7 8b 03 e6 b7 e3 63 46 db d5 e8 95 bf 3d 37 e6 51 cd a8 79 6e cd bf bd ff fb a6 9a a0 d7 cf 82 9c 92 6c ac df 54 01 44 e6 56 03 16 6e 17 5f 8c d1 a7 b3 d1 3f 56 d6 6c 95 b6 90 7e cc 2b e3 28 13 58 ab 3c 41 77 9c 4e 26 49 f9 ac 65 08 2d 33 69 81 c8 26 c6 47 ae 0d e5 93 49 e8 c8 01 4e f4 65 cf ad 16 ed f8 ac 92 63 0c 4f 8b 89 cb 1a d2 2c 1d 0e 63 7a dd 58 70 d1 1b c4 6b 0d 41 6d 18 a7 26 98 8d ae d8 c0 9f 98 ec ca e5 49 9a d3 96 d0 ef 7d 9c 41 b7 a1 b3 c4 98 cb 74 f3 ad 7c 81 28 25 99 56 7c e9 af a1 4d 76 f8 66 9b 9f 9e 31 27 bf 16 36 c8 6f 8e ff 71 7d 7d 78 d2 a1 21 da f1 43 82 1a dd fb b0 1d fa 4e de a1 21 1a fc 76 f6 70 f3 70 70 70 84 8f 23 05 37 4c d4 63 8d b6 1d 92 6d 06 0a 49 ae 17 c4 fd db df 0f 2b 6a ed fa 79 34 27 5b Data Ascii: Q!R#cF=7QynlTDVn_?Vl~+(X<AwN&Ie-3i&GINecO,czXpkAm&I}At\|(%V\|Mvf1'6oq}}x!CN!vpppp#7LcmI+jy4'[
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: e9 07 66 4f 18 ed 67 b8 d3 29 c7 9a 28 4c 99 ce 08 f5 6c 5b 8b 60 d9 50 a9 3b ad 77 d7 cd 01 d9 d2 4f 0c 1d e5 e0 d0 3e 19 d7 fd be 91 28 61 7f 80 a6 62 ba 36 18 54 74 cb 92 3a 52 27 55 29 ef 1e d4 4e 63 8d 83 66 b3 e6 fe 37 e6 b4 db 8e 6b 37 dc 8b aa 59 8a 27 2b 15 24 3e ce ab 6b c9 12 54 69 f1 92 aa 16 ae 21 36 e2 69 25 d9 92 7c 68 7b 9e bd da 76 ee df 16 b0 dc 49 2e 80 22 91 7e 47 ea 2e a6 66 23 f7 01 8f 3b c4 28 a1 45 17 6e ba ed 05 fb ca 21 c2 37 ed 71 5e 8a e5 a8 cc b3 eb 04 17 b4 19 eb 48 4d 42 64 73 48 cb b6 15 1c f3 ba 3f 72 dd 91 6b a7 f7 3e ed 61 4c 83 ce 40 6c 55 55 39 d4 ca e4 f6 61 b1 55 3e 22 db d6 c6 dc ea 14 5d da 92 d2 ad dc 2e 1a 7f f8 1e 94 bf be 51 56 d8 3a 5f 3a 2f c0 26 14 52 2c 2c 0b 5b 40 7f 37 d1 1f 95 70 43 c4 85 74 a3 b4 32 3c Data Ascii: fOg)(Ll[`P;wO>(ab6Tt:R'U)Ncf7k7Y'+$>kTi!6i%\|h{vI."~G.f#;(En!7q^HMBdsH?rk>aL@lUU9aU>"].QV:_:/&R,,[@7pCt2<
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: d9 09 d4 6c 90 fc 60 22 8a ce 9b c0 d5 51 0c 46 3d 58 37 67 cc 54 51 b3 d5 33 34 d8 92 47 94 4a e9 91 03 6c 19 95 6e 18 74 12 bf 64 7e e0 f2 cc 21 cb 54 bd c7 5d 37 7a a2 d7 0a bd a2 56 2b 3c be ac 8c cf 06 d8 94 ca 08 91 6d d0 91 2b 7d 27 d7 67 af 4d 58 7b 3d 17 d8 2a 48 bb bd 66 5b 60 36 ba a7 e7 52 4d b6 a4 2f 5b 6a b2 71 56 55 bb 29 51 a2 9e 66 fb a5 a8 b7 ac e2 82 bd e0 8a 08 c0 91 76 f6 5e 3d 65 1f 19 eb 11 af 6d 63 7d 1d 0f 77 75 bb bd 75 b8 f1 db d6 ef bf ec 1c ee ff be 75 3c fd 63 d4 1a 3d 7b f5 6a 3a 22 d4 8d a8 86 bb f9 63 77 da 19 dd e4 fc 37 65 31 b9 c7 d5 df fd 10 fd 10 e5 a9 ab e6 f0 c1 92 da 40 08 d4 78 b7 c2 42 f5 b5 db f2 6e 5a 89 c5 d2 1a 58 da 1f cd 16 02 db 3d 0e 6b dc 62 3b 24 7e 70 7e de f9 3f 6d d7 fe 9b c6 99 45 a5 00 f5 e2 6a be Data Ascii: l`"QF=X7gTQ34GJlntd~!T]7zV+<m+}'gMX{=*Hf[`6RM/[jqVU)Qfv^=emc}wuuu<c={j:"cw7e1@xBnZX=kb;$~p~?mEj
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: e5 7e a3 58 1f 58 2a 32 70 08 b3 c6 59 db bb cf ff fc 6e 36 fa 93 ca b3 5d 9d d4 c2 f9 7c 86 be 8f b9 04 1b 99 30 c2 9b 83 b1 4d 9d 4c 17 6a 24 93 09 38 c2 04 2d 20 00 9b 3e dd e1 dd 06 c4 13 10 c4 d9 81 b5 83 0d 8f 64 da d0 f3 c6 f3 06 74 b1 7d 65 c9 ad a8 12 f9 0b c7 2e 13 e4 26 04 b4 d6 69 ef d4 31 9c 52 44 61 9e 9e 4b d0 d3 d0 23 72 7a 80 0d 61 48 97 58 5d ba 7f 3b d1 c5 5c 7d 10 24 b1 a1 3e 4d 46 b4 f2 cb af 1c a6 89 d9 03 06 dc ee 8a 22 28 cb c6 cd 93 08 dc 1e 26 66 1b cb 86 b4 76 3c 9c 27 84 be e9 be 54 ea 0d 41 55 c3 63 ac af 1f 9f 37 20 8d 96 a2 f7 16 6f 2e c7 40 f5 f3 f3 a1 b4 69 22 8b 4b f6 8c 71 46 5f ce 85 57 65 17 4a df 34 1f 02 74 00 1b fc 27 b9 d1 b7 be 44 5b 59 b9 51 09 37 d6 f9 10 1a 46 02 6f 12 69 c6 3a 23 e5 1e 71 82 5b da 7c 71 f8 f3 Data Ascii: ~XX*2pYn6]\|0MLj$8- >dt}e.&i1RDaK#rzaHX];\}$>MF"(&fv<'TAUc7 o.@i"KqF_WeJ4t'D[YQ7Foi:#q[\|q
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 28 4d dd a5 98 28 f5 17 4d bd 5b 72 96 b8 36 98 bf 91 ad cd 66 a5 c7 a7 0d 83 21 ae c6 a3 8b f1 8d 16 d9 dc 7e 0a 9b 95 79 0f dc 41 e2 af 0c 6b e8 8e fd ec f8 b6 54 1c b8 ac 5e 93 68 3f 29 33 ea e4 36 98 6b c4 f6 b9 be 89 f2 0d 80 2f 24 1b 1f ee a5 30 1b ab dd c6 d6 3c c1 7e 96 d7 0b 5b 63 01 6b 8b 41 ad 2e 97 ae 5b 8e 87 56 1d ed 72 31 c6 6a 37 40 2e eb cd 1d 8d 4c 5f 55 1a 5b ea 37 55 d7 36 2c f3 db 9f c7 1b b7 b3 b1 a3 b9 ad 7e db d9 a1 5e 14 cf 4f 30 36 2c 9a 4b f9 bd 02 11 2d ed 72 42 09 9b 46 51 cb 20 f5 12 04 19 b5 55 b5 b1 ad f6 a4 6d 8b 46 8d 5f cc 76 7a 1e d4 69 99 6f 05 0d 53 92 0c 12 0b 29 64 59 1e da 70 11 dc b7 87 18 38 d2 a8 d3 93 60 b4 8c cf e8 d5 e0 15 c7 87 da 26 1f ac cb b0 b3 b1 ba 63 d8 aa f0 d9 b1 ac 87 19 2d d4 ee 39 42 f0 aa ba 01 Data Ascii: (M(M[r6f!~yAkT^h?)36k/$0<~[ckA.[Vr1j7@.L_U[7U6,~^O06,K-rBFQ UmF_vzioS)dYp8`&c-9B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49825	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:08 UTC	667	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1on3CPc.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wechat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:08 UTC	500	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "be8ca9c3c5a9845a868a070c6ce17939" Content-Type: image/png Date: Mon, 29 Apr 2024 08:59:44 GMT Server: tencent-cos x-cos-hash-crc64ecma: 15810568966885896784 x-cos-request-id: NjYyZjYxODBfNmQ0ODEyMDlfZDMwMl82YWNlYmUz Content-Length: 769 Accept-Ranges: bytes X-NWS-LOG-UUID: 15975033627898344877 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:08 UTC	769	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 01 47 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR DGPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49822	101.33.21.91	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:08 UTC	434	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/3ou3PnG.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:08 UTC	502	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "5496c1924fd485d9c8e2541434a1b3dc" Content-Type: image/png Date: Fri, 30 Aug 2024 05:03:45 GMT Server: tencent-cos x-cos-hash-crc64ecma: 417740338250459693 x-cos-request-id: NjZkMTUyYjFfNTc5NjdmMGJfMWE3ZWRfMTdiYTE3MA== Content-Length: 5167 Accept-Ranges: bytes X-NWS-LOG-UUID: 4279219040564470261 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:08 UTC	5167	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 4c 00 00 01 4c 08 03 00 00 00 97 b0 75 6d 00 00 02 fd 50 4c 54 45 47 70 4c f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 f6 Data Ascii: PNGIHDRLLumPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:08 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:08 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032908Z-17db6f7c8cfp6mfve0htepzbps00000003rg000000008na7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:08 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:08 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:08 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: e9bc8845-c01e-008d-06d9-1a2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032908Z-17db6f7c8cfhzb2znbk0zyvf6n0000000400000000009ru6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:08 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:08 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 38f28e88-001e-0046-4a22-1bda4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032908Z-17db6f7c8cfhzb2znbk0zyvf6n0000000400000000009ru7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:08 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:08 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 65388d65-201e-0051-79ef-1a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032908Z-17db6f7c8cf5mtxmr1c51513n000000004e000000000e30u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:08 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49830	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:08 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:08 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: eba22146-701e-0021-1f31-1c3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032908Z-17db6f7c8cfvq8pt2ak3arkg6n000000028000000000cc5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:08 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49823	101.33.21.91	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:08 UTC	434	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/u7U1PY3.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:08 UTC	500	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "aaec6a453c14067cd710518fca1e718d" Content-Type: image/png Date: Wed, 06 Dec 2023 10:23:08 GMT Server: tencent-cos x-cos-hash-crc64ecma: 1664858056339643561 x-cos-request-id: NjU3MDRiOGNfOTIzMjE2MGJfZjhjNV85Mzk3ODA4 Content-Length: 3004 Accept-Ranges: bytes X-NWS-LOG-UUID: 13083903583529226372 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:08 UTC	3004	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 64 00 00 00 60 08 03 00 00 00 1d 23 f8 b0 00 00 00 9f 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 df df df 40 40 40 20 20 20 bf bf bf 80 80 80 10 10 10 ef ef ef 60 60 60 a0 a0 a0 9f 9f 9f 90 90 90 30 30 30 cf cf cf 50 50 50 70 70 70 af af af 6f 6f 6f 7f 7f 7f 5f 5f 5f 4f 4f 4f 8f 8f 8f b0 b0 b0 01 01 01 fe fe fe ee ee ee 21 21 21 ce ce ce 71 71 71 be be be 31 31 31 9e 9e 9e de de de 11 11 11 61 61 61 41 41 41 ae ae ae eb 42 11 26 00 00 00 0f 74 52 4e 53 00 20 df ce cf 8f 40 fe 10 90 a0 8e 9f 9e de b3 15 8b ed 00 00 0a bd 49 44 41 54 78 da ed 9d d9 62 db b6 12 86 99 2e a9 d3 b3 fc Data Ascii: PNGIHDRd`#PLTEGpL@@@ ```000PPPpppooo___OOO!!!qqq111aaaAAAB&tRNS @IDATxb.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49833	101.33.21.91	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:08 UTC	434	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/3cBQnDI.jpg HTTP/1.1 Host: newres.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:08 UTC	502	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "892e1d57bc6289186c3dc0506c1c760e" Content-Type: image/jpeg Date: Wed, 14 Aug 2024 08:43:44 GMT Server: tencent-cos x-cos-hash-crc64ecma: 13507878429684184734 x-cos-request-id: NjZiYzZlNDBfOTczMjE2MGJfMjkxZV84MDAyN2U4 Content-Length: 92578 Accept-Ranges: bytes X-NWS-LOG-UUID: 8937607937249519945 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 0a 0b 0b 0e 0d 0e 1c 10 10 1c 3b 28 22 28 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b 3b ff c2 00 11 08 06 e0 0b 40 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 01 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 00 02 03 04 06 05 07 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f9 ce 6d 8a a2 24 22 22 22 Data Ascii: JFIFC#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;@m$"""
2024-10-13 03:29:08 UTC	16384	IN	Data Raw: 23 08 9a 84 a0 32 bc e3 91 c9 78 cb c5 79 98 5c 94 ba b3 67 43 aa 76 4e d6 76 3a 27 44 d5 68 88 02 20 58 08 88 88 88 80 82 33 6e 64 ca e4 ca e4 25 2a 05 64 88 48 48 44 08 20 50 25 c8 2e 4c 98 5c 2e 4c 80 11 0c 24 44 11 93 26 42 b2 64 2a 48 51 b3 49 ab 11 4a a2 40 84 44 d1 b3 66 d3 66 cd 1a 88 40 00 ca e0 c2 e2 39 2f 38 e6 b8 5c 2e 65 16 84 55 35 08 c4 04 82 89 19 00 03 20 15 25 52 55 59 15 99 4c d7 33 99 ce b9 27 33 06 41 42 88 88 ad a4 aa 96 22 21 28 a9 96 21 54 90 59 20 02 b0 02 00 3e 93 d3 e7 d9 bb 3a 1b 3a 59 a3 75 a3 48 88 91 10 92 c4 41 11 0c b4 52 d9 ac b6 69 29 2e 23 9a f2 8e 27 05 f3 a7 9e b8 1c 0e 56 72 30 00 26 a5 e8 bb 8e b2 f4 5d ae a1 aa 0a c9 94 c5 65 2b 13 76 74 3a 59 b3 56 46 4e 66 0c d0 91 ab 34 6a b7 5a 34 24 09 2e 60 33 19 33 01 99 40 Data Ascii: #2xy\gCvNv:'Dh X3nd%dHHD P%.L\.L$D&BdHQIJ@Dff@9/8\.eU5 %RUYL3'3AB"!(!TY >::YuHARi).#'Vr0&]e+vt:YVFNf4jZ4$.`33@
2024-10-13 03:29:09 UTC	16384	IN	Data Raw: 00 c8 02 14 19 00 32 00 01 51 01 01 01 01 44 44 23 15 ac 22 24 44 24 04 44 29 53 09 08 90 50 06 0c 81 09 a3 a2 ec e9 1d 0d 1b 58 44 88 91 20 20 20 4c e3 a0 64 ca e0 c1 93 06 40 c8 15 43 2c 26 84 d1 b3 67 44 d9 b4 d0 19 b3 91 c4 e3 67 03 8a 72 ac 19 02 12 12 22 21 21 54 61 13 46 85 74 26 c6 34 6d 75 26 8d 0a a2 05 19 58 0a 58 8d 10 c4 34 01 93 35 8b 32 62 b2 99 a0 2a 88 aa 28 48 44 8a a8 40 aa 28 80 80 8a a1 84 84 aa 22 28 88 88 d4 68 d4 bd 0d c7 48 e8 bb 8d 89 01 93 15 ce cc 18 ac d6 52 21 15 d4 68 61 12 00 5c d9 93 20 15 11 09 08 94 26 8d 1b 3a 1d 0e c7 73 b2 76 5e a7 48 42 b0 73 38 9c 4e 2b c8 e6 98 00 02 48 95 48 88 48 84 88 88 48 88 95 34 26 8d 1b 4d 1b 34 6e 36 ba 34 6a 54 44 44 88 2c 2c 2b 28 59 9b 0a 90 20 20 00 08 ad 20 20 02 00 09 6a 08 08 00 0c Data Ascii: 2QDD#"$D$D)SPXD Ld@C,&gDgr"!!TaFt&4mu&XX452b*(HD@("(hHR!ha\ &:sv^HBs8N+HHHH4&M4n64jTDD,,+(Y j
2024-10-13 03:29:09 UTC	16384	IN	Data Raw: 88 8d 22 30 90 91 09 11 51 15 50 54 40 50 50 06 53 26 0c 57 33 9a 73 b7 06 13 35 90 22 22 10 18 aa 56 22 11 21 58 44 88 88 88 62 a8 84 a1 a8 62 21 11 54 d0 8c 68 57 49 a3 52 e8 d1 a9 74 2a c2 52 b2 c4 42 ac 42 22 44 40 04 04 45 51 11 11 12 24 44 44 40 00 00 66 8b 02 a5 1b 36 74 4e b6 75 3a d9 d0 e9 66 86 4c ae 2b 94 bc 0e 27 09 78 2f 13 99 ce 32 01 40 11 01 11 11 10 11 11 11 11 00 91 11 10 15 44 42 44 44 44 04 40 44 44 44 45 10 a8 42 b0 94 42 a8 9a 35 1a 34 ba 11 18 09 40 22 22 11 34 69 35 5b 4d 56 93 46 91 1b 11 11 b3 42 9a ad 8a 6a b4 9a 11 22 a0 20 00 32 00 64 00 00 c9 93 26 4c 2e 50 00 00 22 02 21 25 48 48 84 84 88 84 86 2a a2 12 48 96 22 02 20 22 22 02 22 01 96 a8 88 a2 12 3f 1e ca 13 51 a5 d0 9a 35 08 8d 30 88 8d 26 a1 21 24 56 12 2a a1 22 aa 22 aa Data Ascii: "0QPT@PPS&W3s5""V"!XDbb!ThWIRtRBB"D@EQ$DD@f6tNu:fL+'x/2@DBDDD@DDDEBB54@""4i5[MVFBj" 2d&L.P"!%HHH" """?Q50&!$V*""
2024-10-13 03:29:09 UTC	16384	IN	Data Raw: 54 63 18 f6 92 49 24 e4 b9 ce 73 f4 f2 49 24 92 49 24 92 49 24 93 90 74 00 92 4f ae 31 8f 6d 34 e6 39 ce 73 f4 72 49 24 92 49 24 92 49 24 92 69 24 9c 33 a1 8f b3 31 8c 74 3e 51 c8 89 3e 7e 49 24 92 49 24 92 49 a4 92 49 24 93 b6 70 0c 63 ed 0c 63 1f 2f 11 13 c8 7c 7c 92 49 24 92 49 27 9e 75 9d 27 86 49 dc 63 1f 68 63 18 c7 cb 44 44 4f 19 f1 d2 49 24 92 49 39 f2 49 24 92 49 3a 1c bb 75 bf 2a 63 18 c7 cb c4 44 47 c4 78 ee bd 2f b1 9d 64 92 49 24 92 49 24 f4 92 49 24 92 4e 7d f9 83 18 c6 38 96 df 7f 22 22 22 70 af 4b ad f6 13 ba 69 a7 49 24 d3 d2 c9 24 92 49 24 e7 5f 98 3a 18 4c 63 83 7a 5b 6d b6 dd 7a 5f 69 11 11 11 3c b6 f6 5b ee 24 9a 4d 3d 6c 92 49 24 93 ee 4c 63 18 4c 79 ad b6 db 6d b6 db 6d b7 da 44 44 44 4f 1d b7 a5 b7 ec 67 49 24 d3 ee 4c 61 30 98 7c Data Ascii: TcI$sI$I$I$tO1m49srI$I$I$i$31t>Q>~I$I$II$pcc/\|\|I$I'u'IchcDDOI$I9I$I:u*cDGx/dI$I$I$N}8"""pKiI$$I$_:Lcz[mz_i<[$M=lI$LcLymmDDDOgI$La0\|
2024-10-13 03:29:09 UTC	10658	IN	Data Raw: b8 09 03 c8 32 cb 2c b2 ce 1c 2d b6 d9 8c 62 94 a5 9f ae db e7 7d 6f 37 9b dd b6 18 61 86 1b 6d 88 43 86 f1 b6 db 6d b6 db 6d b6 db 6d b6 db 6d b6 db 6d b6 db 6d b6 db 2d b2 cb 6c b2 db 6d b6 db 6f e4 df c8 74 8b 38 10 59 64 16 59 65 92 49 65 96 59 04 44 70 47 ac b2 cb 2c b2 cb 3a 44 41 04 10 41 04 16 59 65 96 49 67 82 23 c3 3e 41 9f 44 44 47 c8 e1 11 11 11 1f 85 99 e3 f1 cb 2c b2 cb 2c b2 cf a8 f8 1c 33 8c e9 96 7c 40 08 42 65 96 59 65 96 59 c1 08 42 10 e8 21 d0 7e 01 00 0c b2 cb 2c f5 b6 cb 2c b3 16 52 cb f9 36 db 7d 0f 37 c6 db 0d b6 db 6f 07 03 c0 6d bc 6d b6 db 6d b6 db 6d b6 db 6d b6 db 6d b6 db 6d b6 db 6c b2 db 2d b2 db 6d b6 f7 7f 90 44 10 41 04 16 41 65 96 59 65 96 59 65 96 59 04 10 44 44 47 8c b3 99 65 96 59 67 08 88 88 20 82 08 20 b2 cb 2c b2 Data Ascii: 2,-b}o7amCmmmmmm-lmot8YdYeIeYDpG,:DAAYeIg#>ADDG,,3\|@BeYeYB!~,,R6}7ommmmmmml-mDAAeYeYeYDDGeYg ,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49831	43.159.26.129	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:08 UTC	636	OUT	GET /cgi-bin/mmsupport-bin/reportforweb?rid=64692&rkey=17&rvalue=1 HTTP/1.1 Host: support.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wechat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:09 UTC	57	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49832	43.159.26.129	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:08 UTC	636	OUT	GET /cgi-bin/mmsupport-bin/reportforweb?rid=64692&rkey=15&rvalue=1 HTTP/1.1 Host: support.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wechat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:09 UTC	57	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49834	101.33.21.91	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:09 UTC	434	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/3MmDWEv.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:09 UTC	499	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "7eafe952fdf131b0d254ed55e02c4bd5" Content-Type: image/png Date: Thu, 16 Nov 2023 10:25:25 GMT Server: tencent-cos x-cos-hash-crc64ecma: 8149413540536343828 x-cos-request-id: NjU1NWVlMTVfYjAzMjY4MDlfNmY5MV84ZjY1ZDhh Content-Length: 2445 Accept-Ranges: bytes X-NWS-LOG-UUID: 6745756635065988761 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:09 UTC	2445	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 64 00 00 00 60 08 03 00 00 00 1d 23 f8 b0 00 00 00 75 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 20 20 20 40 40 40 df df df bf bf bf 80 80 80 60 60 60 10 10 10 ef ef ef 9f 9f 9f a0 a0 a0 90 90 90 cf cf cf 30 30 30 50 50 50 70 70 70 af af af 6f 6f 6f 5f 5f 5f 7f 7f 7f 8f 8f 8f 4f 4f 4f b0 b0 b0 43 9f 72 c7 00 00 00 0f 74 52 4e 53 00 20 df ce cf 8f 40 fe 10 90 a0 8e 9f 9e de b3 15 8b ed 00 00 08 b8 49 44 41 54 78 da ed 9d 59 63 db b8 0e 85 d5 99 69 6f 3a 77 39 00 01 2e 5a 2d d9 6e ff ff 4f bc 0f 5a 4c 59 5e 14 27 76 9c 0c f1 d0 26 b6 28 29 9f c0 83 85 74 92 65 59 96 fd f8 f9 07 25 Data Ascii: PNGIHDRd`#uPLTEGpL @@@```000PPPpppooo___OOOCrtRNS @IDATxYcio:w9.Z-nOZLY^'v&()teY%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49843	101.33.21.91	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:09 UTC	434	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/uq8YAlZ.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:09 UTC	502	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "624b20ee57c48301212460b460a47ebc" Content-Type: image/png Date: Fri, 04 Aug 2023 10:18:21 GMT Server: tencent-cos x-cos-hash-crc64ecma: 4522457139527761912 x-cos-request-id: NjRjY2QwNmRfNGQ1NmI1MDlfMTI1Y2JfM2JlNjc3Zg== Content-Length: 2242 Accept-Ranges: bytes X-NWS-LOG-UUID: 909597436975969948 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:09 UTC	2242	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 60 08 03 00 00 00 db e6 6c 09 00 00 00 a5 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 40 40 40 df df df bf bf bf 80 80 80 fe fe fe 01 01 01 20 20 20 10 10 10 60 60 60 9f 9f 9f ef ef ef a0 a0 a0 be be be 90 90 90 70 70 70 61 61 61 41 41 41 de de de cf cf cf af af af 5f 5f 5f 11 11 11 30 30 30 6f 6f 6f 21 21 21 9e 9e 9e 50 50 50 8f 8f 8f 7f 7f 7f ee ee ee 31 31 31 4f 4f 4f 51 51 51 71 71 71 ce ce ce ae ae ae b0 b0 b0 8e 8e 8e 21 12 0c 6d 00 00 00 0f 74 52 4e 53 00 20 df ce cf 8f 40 fe 10 90 a0 8e 9f 9e de b3 15 8b ed 00 00 07 bd 49 44 41 54 78 da ed dd 5b 7b da b8 16 06 Data Ascii: PNGIHDR`lPLTEGpL@@@ ```pppaaaAAA___000ooo!!!PPP111OOOQQQqqq!mtRNS @IDATx[{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49842	101.33.21.91	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:09 UTC	434	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/2d9odS_.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:09 UTC	501	IN	HTTP/1.1 200 OK Last-Modified: Sun, 30 Apr 2023 15:13:30 GMT Etag: "c338cda91242421593eeefd63e87db5e" Content-Type: image/png Date: Fri, 18 Aug 2023 02:40:56 GMT Server: tencent-cos x-cos-hash-crc64ecma: 13447340991404977418 x-cos-request-id: NjRkZWRhMzhfMmZiMzcxMDlfOWU2MV82MTZmMDZj Content-Length: 5997 Accept-Ranges: bytes X-NWS-LOG-UUID: 12454576462414615584 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:09 UTC	5997	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 2a 00 00 01 20 08 03 00 00 00 6c 13 77 ba 00 00 00 7b 50 4c 54 45 47 70 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 00 00 60 60 60 40 40 40 20 20 20 df df df bf bf bf 80 80 80 10 10 10 9f 9f 9f ef ef ef 70 70 70 a0 a0 a0 90 90 90 cf cf cf 50 50 50 30 30 30 af af af 8f 8f 8f 7f 7f 7f b0 b0 b0 6f 6f 6f 5f 5f 5f d0 2a ff c8 00 00 00 12 74 52 4e 53 00 7f cf bf 60 df 10 ef 20 80 90 50 af 9f 5f 8f b0 a0 72 49 df 87 00 00 16 8f 49 44 41 54 78 da ed 9d 6b 63 9b b8 b6 40 3d 7d 4f 67 e6 9c 73 6d 90 84 00 03 c6 69 e7 ff ff c2 1b c7 b1 2d 40 8f 0d 71 12 bb 5d eb 5b 53 1b 0b b1 17 da 7a 20 Data Ascii: PNGIHDR* lw{PLTEGpL```@@@ pppPPP000ooo___*tRNS` P_rIIDATxkc@=}Ogsmi-@q][Sz

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:09 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:09 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 725817be-301e-0052-7ede-1a65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032909Z-17db6f7c8cfqxt4wrzg7st2fm800000004h0000000001kth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:09 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:09 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:09 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 36e78a2e-101e-008d-054a-1c92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032909Z-17db6f7c8cfcrfgzd01a8emnyg00000001rg00000000emd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:09 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:09 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:09 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 72dafb48-001e-0079-44ea-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032909Z-17db6f7c8cfp6mfve0htepzbps00000003t000000000531u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:09 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:09 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:09 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 95529de3-401e-0064-4a25-1b54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032909Z-17db6f7c8cfnqpbkckdefmqa4400000004eg000000000a2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:09 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:09 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:09 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:09 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 9ba87e07-d01e-008e-2ae9-1a387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032909Z-17db6f7c8cfbr2wt66emzt78g400000003yg0000000021vq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:09 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49835	101.33.21.91	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:09 UTC	434	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1TQxEzr.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:09 UTC	503	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "e8a575bcdb8ec7be3fc87e234811c5b1" Content-Type: image/png Date: Mon, 02 Sep 2024 03:59:33 GMT Server: tencent-cos x-cos-hash-crc64ecma: 8627293270071395601 x-cos-request-id: NjZkNTM4MjVfY2NhZDFjMDlfMTZiYTFfMTQ2YjA1MA== Content-Length: 292 Accept-Ranges: bytes X-NWS-LOG-UUID: 10460096969245825052 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:09 UTC	292	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 00 54 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 83 4b e9 d3 00 00 00 1b 74 52 4e 53 00 2d d2 f6 a9 ec ae ee 11 14 d7 56 99 2c d6 26 d0 d5 35 da 3a 82 f8 96 1f 0f 80 13 7f 7d b3 00 00 00 64 49 44 41 54 38 cb 63 60 40 05 42 3c 02 ac ec 40 c0 80 1d 48 b2 48 43 01 76 79 4e 3e 69 fc 0a d8 a4 f1 2b 10 91 26 a0 40 9c 90 02 61 b0 14 13 37 3f 27 07 07 56 05 62 60 05 12 0c 38 01 3e f7 d3 43 01 c2 83 ec cc 40 42 10 8f 02 30 90 22 a4 80 97 80 02 Data Ascii: PNGIHDR DTPLTEGpLKtRNS-V,&5:}dIDAT8c`@B<@HHCvyN>i+&@a7?'Vb`8>C@B0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49837	101.33.21.91	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:09 UTC	434	OUT	GET /t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1on3CPc.png HTTP/1.1 Host: newres.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:09 UTC	499	IN	HTTP/1.1 200 OK Last-Modified: Fri, 07 Apr 2023 17:42:19 GMT Etag: "be8ca9c3c5a9845a868a070c6ce17939" Content-Type: image/png Date: Fri, 18 Aug 2023 02:40:19 GMT Server: tencent-cos x-cos-hash-crc64ecma: 15810568966885896784 x-cos-request-id: NjRkZWRhMTNfNjc0ZWJlMDlfYzdlOF81OTZhYjVh Content-Length: 769 Accept-Ranges: bytes X-NWS-LOG-UUID: 2754687910147117391 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:09 UTC	769	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 01 47 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR DGPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49844	43.152.183.74	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:10 UTC	636	OUT	GET /t/fed_upload/25d133b0-63d9-4102-857c-5cc84c752232/NTI4MWU5.ico HTTP/1.1 Host: newres.wechat.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.wechat.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:10 UTC	513	IN	HTTP/1.1 200 OK Last-Modified: Mon, 05 Sep 2022 17:20:18 GMT Etag: "5281e972ec463897022f56464011b5ed" Content-Type: image/vnd.microsoft.icon Date: Mon, 29 Apr 2024 08:59:38 GMT Server: tencent-cos x-cos-hash-crc64ecma: 5285476954071319079 x-cos-request-id: NjYyZjYxN2FfYzRhMzEyMDlfYTFjZl9kMGUxZTM5 Content-Length: 827 Accept-Ranges: bytes X-NWS-LOG-UUID: 2824878709695522195 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:10 UTC	827	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 02 49 44 41 54 58 85 ed 96 41 68 14 67 18 86 9f f7 df b8 59 6b 2e 4a 08 31 b3 ac 59 0c 56 8a 47 2f 3d 15 45 a8 a6 8a c9 08 5e 8c a7 22 a5 f4 54 3c f4 14 88 07 29 1e bc 79 91 22 f5 20 ad 07 5d 0d 92 2a a5 d4 4a 8f d5 1e 44 44 64 53 63 33 b3 95 65 29 1e 42 d9 6c e3 7c 1e b2 a9 9a 9d d9 8c cd 46 0f ed 7b 9b ff 7f e7 7b 9e 81 61 fe 81 ff 7a 94 b6 98 bf 96 1f b2 86 ed 46 b6 0b 6c c8 a0 17 d4 b7 b8 6b 55 41 0d 54 c6 74 53 59 fd 18 1c 08 ca ab 16 18 fa 6e 28 5b 9f ff 6b 2c 32 3b 8e f1 5e 5a d9 e6 e4 fb 4e 3a 9d eb 7e e7 42 79 b8 dc 78 6d 01 ef 8a 37 66 16 9d c6 e8 7b 2d 70 2b a1 2a b9 e3 e1 68 78 21 95 c0 b6 6b 03 bd 73 7f f3 15 66 23 ab 02 b7 90 74 b5 67 Data Ascii: PNGIHDR szzIDATXAhgYk.J1YVG/=E^"T<)y" ]JDDdSc3e)Bl\|F{{azFlkUATtSYn([k,2;^ZN:~Byxm7f{-p+hx!ksf#tg

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:10 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:10 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: d280ac0f-001e-0079-3c69-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032910Z-17db6f7c8cf9c22xp43k2gbqvn00000001w000000000ea7n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:10 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:10 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:10 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 64ee2c34-901e-0048-70e2-1ab800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032910Z-17db6f7c8cf4g2pjavqhm24vp400000004dg00000000hna7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:10 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:10 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: fe0e2196-001e-0079-5547-1c12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032910Z-17db6f7c8cf9wwz8ehu7c5p33g00000001hg00000000cshg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:10 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: cbabfe0b-601e-00ab-0220-1c66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032910Z-17db6f7c8cf8rgvlb86c9c009800000002f0000000005mzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:10 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:10 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:10 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032910Z-17db6f7c8cfbr2wt66emzt78g400000003xg000000003zk8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:10 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49850	43.159.26.129	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:10 UTC	403	OUT	GET /cgi-bin/mmsupport-bin/reportforweb?rid=64692&rkey=17&rvalue=1 HTTP/1.1 Host: support.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:11 UTC	57	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49851	43.159.26.129	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:10 UTC	403	OUT	GET /cgi-bin/mmsupport-bin/reportforweb?rid=64692&rkey=15&rvalue=1 HTTP/1.1 Host: support.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:11 UTC	57	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:10 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:10 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c0284108-301e-005d-6416-1ce448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032910Z-17db6f7c8cfjxfnba42c5rukwg000000015g00000000k91z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:10 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:10 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:10 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: b0fa5ee8-501e-0047-295e-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032910Z-17db6f7c8cfcl4jvqfdxaxz9w800000001s0000000007puc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49859	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:10 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:10 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032910Z-17db6f7c8cfbr2wt66emzt78g400000003u000000000c1gd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:10 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:10 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 0e087f1c-801e-00ac-7d47-1cfd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032910Z-17db6f7c8cfcrfgzd01a8emnyg00000001vg000000006xxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:11 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:10 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 09dd28b8-c01e-008d-23de-1b2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032910Z-17db6f7c8cfwtn5x6ye8p8q9m000000002tg00000000fdgy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49854	101.33.21.91	443	7800	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:11 UTC	403	OUT	GET /t/fed_upload/25d133b0-63d9-4102-857c-5cc84c752232/NTI4MWU5.ico HTTP/1.1 Host: newres.wechat.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-13 03:29:11 UTC	513	IN	HTTP/1.1 200 OK Last-Modified: Mon, 05 Sep 2022 17:20:18 GMT Etag: "5281e972ec463897022f56464011b5ed" Content-Type: image/vnd.microsoft.icon Date: Sun, 25 Aug 2024 02:29:52 GMT Server: tencent-cos x-cos-hash-crc64ecma: 5285476954071319079 x-cos-request-id: NjZjYTk3MjBfNTBlZTk4MWVfY2IwMl9lMmMxNjM= Content-Length: 827 Accept-Ranges: bytes X-NWS-LOG-UUID: 4150312670953375146 Connection: close X-Cache-Lookup: Cache Hit Cache-Control: max-age=31536000 Access-Control-Allow-Origin: * Vary: Origin
2024-10-13 03:29:11 UTC	827	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 02 49 44 41 54 58 85 ed 96 41 68 14 67 18 86 9f f7 df b8 59 6b 2e 4a 08 31 b3 ac 59 0c 56 8a 47 2f 3d 15 45 a8 a6 8a c9 08 5e 8c a7 22 a5 f4 54 3c f4 14 88 07 29 1e bc 79 91 22 f5 20 ad 07 5d 0d 92 2a a5 d4 4a 8f d5 1e 44 44 64 53 63 33 b3 95 65 29 1e 42 d9 6c e3 7c 1e b2 a9 9a 9d d9 8c cd 46 0f ed 7b 9b ff 7f e7 7b 9e 81 61 fe 81 ff 7a 94 b6 98 bf 96 1f b2 86 ed 46 b6 0b 6c c8 a0 17 d4 b7 b8 6b 55 41 0d 54 c6 74 53 59 fd 18 1c 08 ca ab 16 18 fa 6e 28 5b 9f ff 6b 2c 32 3b 8e f1 5e 5a d9 e6 e4 fb 4e 3a 9d eb 7e e7 42 79 b8 dc 78 6d 01 ef 8a 37 66 16 9d c6 e8 7b 2d 70 2b a1 2a b9 e3 e1 68 78 21 95 c0 b6 6b 03 bd 73 7f f3 15 66 23 ab 02 b7 90 74 b5 67 Data Ascii: PNGIHDR szzIDATXAhgYk.J1YVG/=E^"T<)y" ]JDDdSc3e)Bl\|F{{azFlkUATtSYn([k,2;^ZN:~Byxm7f{-p+hx!ksf#tg

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:11 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:11 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 7a709d5d-301e-0099-436d-1c6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032911Z-17db6f7c8cfvzwz27u5rnq9kpc00000004p0000000006cqs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:11 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:11 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:11 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: f1a7bbb3-001e-00a2-248a-1bd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032911Z-17db6f7c8cf6qp7g7r97wxgbqc00000003kg00000000dpd0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:11 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:11 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:11 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 9a6afd11-d01e-0049-3e83-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032911Z-17db6f7c8cfhrxld7punfw920n00000002z000000000gupy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:11 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:11 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:11 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:11 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 9aad704f-d01e-0049-789c-1be7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032911Z-17db6f7c8cfgqlr45m385mnngs00000003000000000001rp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:11 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:11 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:12 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:11 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 23e49b38-a01e-001e-1147-1c49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032911Z-17db6f7c8cf96l6t7bwyfgbkhw00000003c000000000619k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-13 03:29:12 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:12 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:12 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: fe1a2dd9-a01e-0053-57d8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032912Z-17db6f7c8cfbr2wt66emzt78g400000003xg000000003zmm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:12 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:12 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:12 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: a84dc0aa-d01e-002b-1b83-1b25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032912Z-17db6f7c8cfq2j6f03aq9y8dns00000003mg00000000283e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:12 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:12 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:12 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 1bfa4875-a01e-0084-0b1c-1c9ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032912Z-17db6f7c8cf9wwz8ehu7c5p33g00000001mg0000000080p1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:12 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:12 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:12 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 0dbfe92b-d01e-0082-7aa8-1ce489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032912Z-17db6f7c8cf9wwz8ehu7c5p33g00000001m0000000008vw2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:12 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:12 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:12 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:12 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 2da2c30a-901e-005b-13dd-1b2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032912Z-17db6f7c8cfvtw4hh2496wp8p800000002v00000000026xa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:12 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49870	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:13 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:13 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 24028bf8-401e-00a3-4b1c-1c8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032913Z-17db6f7c8cfvq8pt2ak3arkg6n000000026g00000000h7z5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:13 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:13 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 581fb33a-501e-00a0-339b-1b9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032913Z-17db6f7c8cf4g2pjavqhm24vp400000004f000000000ezcy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:13 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:13 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:13 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:13 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 5c2b82db-e01e-0071-3c2b-1c08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032913Z-17db6f7c8cfq2j6f03aq9y8dns00000003g000000000b1q5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:13 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:13 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:13 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 1c70dbaf-401e-000a-0f1b-1c4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032913Z-17db6f7c8cfvq8pt2ak3arkg6n00000002dg000000000faw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:13 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:13 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:13 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:13 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: eb876971-601e-0001-084f-1cfaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032913Z-17db6f7c8cfpm9w8b1ybgtytds000000028g000000008dur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:13 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:14 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 959f4817-801e-0078-5157-1cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032914Z-17db6f7c8cfgqlr45m385mnngs00000002xg0000000059p6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49876	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:14 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:14 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 0588c624-801e-0048-72e0-1af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032914Z-17db6f7c8cfqxt4wrzg7st2fm800000004d000000000bfuk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:14 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:14 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:14 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 67009796-e01e-0085-29b5-1cc311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032914Z-17db6f7c8cf9wwz8ehu7c5p33g00000001hg00000000csru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:14 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:14 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:14 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 38d12744-701e-0050-7297-1b6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032914Z-17db6f7c8cfvq8pt2ak3arkg6n000000027000000000h335 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:14 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49879	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:14 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:14 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:14 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 9ad66ff1-501e-00a0-38ec-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032914Z-17db6f7c8cfbr2wt66emzt78g400000003v000000000a2we x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:14 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:14 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:15 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 739bd3f0-001e-0034-450f-1cdd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032915Z-17db6f7c8cf5mtxmr1c51513n000000004fg00000000a8d2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:15 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:14 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:14 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: f4b6e6ad-001e-00a2-4de9-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032914Z-17db6f7c8cfqxt4wrzg7st2fm800000004a000000000htt7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:15 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:15 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:15 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 529596da-301e-001f-21a5-1caa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032915Z-17db6f7c8cfhzb2znbk0zyvf6n00000003x000000000h6u6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:15 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:15 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:15 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2eee43c6-d01e-0066-0203-1bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032915Z-17db6f7c8cffhvbz3mt0ydz7x400000002m0000000003hnh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:15 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49884	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:15 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:15 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:15 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 35556aea-401e-0064-3048-1c54af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032915Z-17db6f7c8cf9wwz8ehu7c5p33g00000001kg00000000b669 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:15 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49885	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:15 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:15 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 0cb7a61f-501e-0064-6562-1c1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032915Z-17db6f7c8cffhvbz3mt0ydz7x400000002fg00000000aze6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:15 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49886	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:15 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:15 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:15 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 46e4659a-701e-000d-2947-1c6de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032915Z-17db6f7c8cfjxfnba42c5rukwg00000001c00000000036ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:15 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49888	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:16 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:16 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: defb5908-e01e-0033-2de2-1a4695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032916Z-17db6f7c8cfvzwz27u5rnq9kpc00000004rg000000001kqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:16 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:16 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:16 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 4dc67717-001e-005a-3747-1cc3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032916Z-17db6f7c8cfmhggkx889x958tc00000001gg0000000081yk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:16 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:16 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:16 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 7d81a33d-101e-00a2-42e1-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032916Z-17db6f7c8cf5mtxmr1c51513n000000004eg00000000dptx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:16 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:16 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:16 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: b7d01dc4-701e-0032-5f3b-1ca540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032916Z-17db6f7c8cf6f7vv3recfp4a6w00000001ag00000000cpvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:16 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49891	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:16 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:16 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:16 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 07f85e87-a01e-003d-78df-1a98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032916Z-17db6f7c8cfwtn5x6ye8p8q9m000000002z0000000003nua x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:16 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49893	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:17 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:17 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: f7510ca4-501e-000a-5e6f-1c0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032917Z-17db6f7c8cf6f7vv3recfp4a6w00000001eg000000003mek x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:17 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49892	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:17 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:17 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032917Z-17db6f7c8cfwtn5x6ye8p8q9m000000002zg000000002u5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:17 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49894	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:17 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:17 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: de2b4a30-201e-0071-54e2-1aff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032917Z-17db6f7c8cfnqpbkckdefmqa44000000047000000000kqk9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:17 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49896	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:17 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:17 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: b764448c-501e-008c-4097-1bcd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032917Z-17db6f7c8cfwtn5x6ye8p8q9m000000002ug00000000dxne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:17 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49897	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:17 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:17 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: efbad5a3-301e-0000-2ec0-1aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032917Z-17db6f7c8cfhzb2znbk0zyvf6n000000041g000000005nga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:17 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49898	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:17 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:17 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:17 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 37770a76-901e-0048-046f-1cb800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032917Z-17db6f7c8cfcrfgzd01a8emnyg00000001v00000000071yq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:17 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49899	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:17 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:18 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:17 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 234b0266-801e-0035-5da3-1b752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032917Z-17db6f7c8cf96l6t7bwyfgbkhw00000003a000000000bky2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:18 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49900	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:18 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:18 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c0002b7f-501e-0029-6e1c-1cd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032918Z-17db6f7c8cf9c22xp43k2gbqvn00000001z0000000007qg7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:18 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49895	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:18 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:18 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:18 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 0b054cf6-001e-00a2-745b-1cd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032918Z-17db6f7c8cfpm9w8b1ybgtytds000000025g00000000evv8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:18 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49902	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:18 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:18 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: e2d37e80-101e-0079-6257-1c5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032918Z-17db6f7c8cfcrfgzd01a8emnyg00000001y000000000153f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49901	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:18 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:18 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:18 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: fe1a38a0-a01e-0053-6ad8-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032918Z-17db6f7c8cfcrfgzd01a8emnyg00000001x0000000003xt7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:18 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49903	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:18 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:18 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 37d30e57-901e-0015-1248-1cb284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032918Z-17db6f7c8cffhvbz3mt0ydz7x400000002kg000000004afq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49904	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:18 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:18 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 44110a29-201e-00aa-4c81-1a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032918Z-17db6f7c8cfhrxld7punfw920n000000031000000000b0eq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:19 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49905	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:19 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:19 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fa68fd7e-e01e-0099-0ae2-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032919Z-17db6f7c8cfvtw4hh2496wp8p800000002w00000000006q5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:19 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49906	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:19 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:19 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 5892b05f-f01e-0085-23d9-1a88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032919Z-17db6f7c8cfqkqk8bn4ck6f720000000041g00000000baue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:19 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49907	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:19 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:19 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: f4958516-001e-00a2-15de-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032919Z-17db6f7c8cfvzwz27u5rnq9kpc00000004h000000000famb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:19 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49908	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:19 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:19 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 4704ee26-501e-0047-65aa-1cce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032919Z-17db6f7c8cfmhggkx889x958tc00000001f000000000be3a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:19 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49909	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:19 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:19 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:19 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: b9db8c53-a01e-0002-5a69-1c5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032919Z-17db6f7c8cfpm9w8b1ybgtytds00000002800000000091bt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:19 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49912	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:21 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:21 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 16892f44-001e-008d-0d14-1cd91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032921Z-17db6f7c8cf9c22xp43k2gbqvn00000001yg0000000094w0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:21 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49914	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:21 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 540e34d0-301e-0096-5f1b-1ce71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032921Z-17db6f7c8cfvtw4hh2496wp8p800000002u0000000004sfp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49913	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:21 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:21 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 92868876-901e-0016-791d-1cefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032921Z-17db6f7c8cfnqpbkckdefmqa44000000047000000000kqqk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:21 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49910	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:21 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:21 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 05046913-601e-000d-6fd8-1a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032921Z-17db6f7c8cfwtn5x6ye8p8q9m000000002v000000000d0zg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:21 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49911	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:21 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-13 03:29:21 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 13 Oct 2024 03:29:21 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7536bc90-101e-005a-6b87-1c882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241013T032921Z-17db6f7c8cfmhggkx889x958tc00000001eg00000000cgvx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-13 03:29:21 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49915	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-13 03:29:21 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=bDYYwy2HHAPAYbs&MD=v2V+7VXT HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-13 03:29:21 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 9af17546-f285-479c-9b8c-4512285b40b4 MS-RequestId: 50b3900d-03ef-455d-a3b3-2706ee9c340c MS-CV: 471IaTr8HkS/TfGi.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 13 Oct 2024 03:29:21 GMT Connection: close Content-Length: 30005
2024-10-13 03:29:21 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-13 03:29:21 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Target ID:	0
Start time:	23:28:27
Start date:	12/10/2024
Path:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe"
Imagebase:	0x8d0000
File size:	368'128 bytes
MD5 hash:	F2697E68F50EA7ED7AC3346DC515E0BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	23:28:34
Start date:	12/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://www.yishimei.cn/network/319.html?=23:28:29
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	23:28:35
Start date:	12/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2008,i,3068019957751357711,9581699129498719414,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	23:28:56
Start date:	12/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://weixin.qq.com/r/iz8qMuHEDbxyraVR92qZ
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	23:28:56
Start date:	12/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=2012,i,3075348156008277268,14418062507845200439,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	10.4%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	3
Total number of Limit Nodes:	0

Executed Functions

Function 00007FFD9B626C4E Relevance: 1.7, Strings: 1, Instructions: 421
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

', xrefs: 00007FFD9B627FD8

Memory Dump Source

Source File: 00000000.00000002.2021221187.00007FFD9B620000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b620000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: '
API String ID: 0-1997036262
Opcode ID: 5e19967c418e97834483b8eeb329fea5e2b8793c3f87c760abda84951eb0dcd7
Instruction ID: 7ca459737d15c47b067057c924a90f5a1f28e85a797124c2c321bf5663c8acd9
Opcode Fuzzy Hash: 5e19967c418e97834483b8eeb329fea5e2b8793c3f87c760abda84951eb0dcd7
Instruction Fuzzy Hash: 7B0266A290E3C64FD7138B7488756903FB1AF17214B0A45EBC4C4CF1E3E6286A5AD762

Function 00007FFD9B620568 Relevance: .9, Instructions: 911
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.2021221187.00007FFD9B620000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b620000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 129fb5a5cb127cd6d39ef0de4fd1aefdef7b921e8b421570ecc0c6bacdfbdee0
Instruction ID: 235c5327229096401bb95c6aa77343868697d5b0e321f0c92d9019a16d9f49de
Opcode Fuzzy Hash: 129fb5a5cb127cd6d39ef0de4fd1aefdef7b921e8b421570ecc0c6bacdfbdee0
Instruction Fuzzy Hash: FB62013061DA098FEB29DF58C4A09B573E1FF94300B21467DD4ABCB6A6DA39F942C740

Function 00007FFD9B62089D Relevance: .6, Instructions: 620
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.2021221187.00007FFD9B620000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b620000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43210df44232473b9f24e570ca9374513794a9d775cd3bcd902817178f521bb1
Instruction ID: 90833799b3e3729072dc12df637106526b3f8d68c5ddd1ac07bf6b3dc8f8dba6
Opcode Fuzzy Hash: 43210df44232473b9f24e570ca9374513794a9d775cd3bcd902817178f521bb1
Instruction Fuzzy Hash: 7A125331B189494FE75CDF2C84A4525BBD2FF9830475582BED49ACF2ABDE34E8428780

Function 00007FFD9B620B40 Relevance: .4, Instructions: 419
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.2021221187.00007FFD9B620000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b620000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20bdf842b920f9ede5d2ae98b18ab5109c71afee612bd368b8b14c86b2db6806
Instruction ID: 767ca15013c74b5b2bc622f72d50e79f00701ff419153abd45624a79addeac3e
Opcode Fuzzy Hash: 20bdf842b920f9ede5d2ae98b18ab5109c71afee612bd368b8b14c86b2db6806
Instruction Fuzzy Hash: 16D165316189494BE72CDF1C8495421BBD6EFD830975582BEC89ACF6AFDE35F4038681

Function 00007FFD9B62A721 Relevance: .2, Instructions: 154
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.2021221187.00007FFD9B620000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b620000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9e0dde8626cc70f4a13e4e7edbf41d03368852d3c292e98bc7cc45d5e97a449
Instruction ID: a39fe94b8ddbc9793cf5309b7cf54c73ecc6d8eae30e426da6f770c67942c02c
Opcode Fuzzy Hash: d9e0dde8626cc70f4a13e4e7edbf41d03368852d3c292e98bc7cc45d5e97a449
Instruction Fuzzy Hash: 01417C71A0D78D0FD71E9F7488261B57BA1EB43310B0682BFD096CB1E7DD2469068391

Function 00007FFD9B628E5D Relevance: 1.7, APIs: 1, Instructions: 206
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNEL32 ref: 00007FFD9B628FB1

Memory Dump Source

Source File: 00000000.00000002.2021221187.00007FFD9B620000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b620000_SecuriteInfo.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: adfaad39c913ed228c4497333f6d31c50e1d955f6f7664fedec817bd9645bb54
Instruction ID: 791b6c45b4d5e966bd3c7293c37deea8feb36d624a4c76a73fe967513c87b2a8
Opcode Fuzzy Hash: adfaad39c913ed228c4497333f6d31c50e1d955f6f7664fedec817bd9645bb54
Instruction Fuzzy Hash: 7D511B71A0EA894FF7249FA99C655F87FE1FF65310B0441BFC0A8C71A3DA2479098381

Non-executed Functions

Function 00007FFD9B627D08 Relevance: 1.6, Strings: 1, Instructions: 322COMMON

Download Yara Rule

Strings

', xrefs: 00007FFD9B627FD8

Memory Dump Source

Source File: 00000000.00000002.2021221187.00007FFD9B620000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b620000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: '
API String ID: 0-1997036262
Opcode ID: 718d382403381545de0726f1a53ca2527eeea6018acb9a1d3964ef1c80419a27
Instruction ID: 00dcf9b3806425c561d403931e06b4a4743c09af7ecc9965cb6766f7b49078a5
Opcode Fuzzy Hash: 718d382403381545de0726f1a53ca2527eeea6018acb9a1d3964ef1c80419a27
Instruction Fuzzy Hash: F2D10EA294E3D25FE7138BB458765913FB1AF23214B0F49DBC4C0CF0A3E5186A5AD762

Function 00007FFD9B620508 Relevance: .5, Instructions: 529COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2021221187.00007FFD9B620000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b620000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29514647126ea31257bc48ed2a20dd1ff907cffbb3507415d809c852af020e0e
Instruction ID: 44b5af87137e75dc50b0f6e1ec985bc23a83d120e07b13f34a41eb2195050034
Opcode Fuzzy Hash: 29514647126ea31257bc48ed2a20dd1ff907cffbb3507415d809c852af020e0e
Instruction Fuzzy Hash: A4E12637A0D6554FE315ABBDF8919EA3794DF8233170502BBD1E9CE0A3CD18744A8BA1

Function 00007FFD9B620500 Relevance: .4, Instructions: 379COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2021221187.00007FFD9B620000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b620000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54960b065d9c20f05a57cd0cc49b39b253dccd866c5779dc98ab5d9fa2785ebb
Instruction ID: 7a2ca5545f260b3157d8faa148f48d01bda1445e23ba1f9c038a620c63862118
Opcode Fuzzy Hash: 54960b065d9c20f05a57cd0cc49b39b253dccd866c5779dc98ab5d9fa2785ebb
Instruction Fuzzy Hash: 67A18B32A0E64D0FF3399BE8D8A55B177D0EF46310B1601BED4AACB5A7ED197942C390

Function 00007FFD9B622FF2 Relevance: .3, Instructions: 254COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2021221187.00007FFD9B620000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b620000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22c7ff3eb132f153f20b13b8e750658d2d23153fd934b033f99e33c326d41584
Instruction ID: 84cfe32f27a45276c31a73bed413dcbceed866eca28ee23b8435ba5b913c8642
Opcode Fuzzy Hash: 22c7ff3eb132f153f20b13b8e750658d2d23153fd934b033f99e33c326d41584
Instruction Fuzzy Hash: 6F51112770C1250EE319B7ADF8D1DEB3B44DF8133174843B7D9A88E49B8D18648B8AE1

Function 00007FFD9B628FF4 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2021221187.00007FFD9B620000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B620000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b620000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7587093de361ef058870b020f923d6823e958eed8c8dd05ac669c4efe999db2
Instruction ID: 3bc51e66df7113b6166537ff19480a68b6b70398b9c1087b1774a7e672e39285
Opcode Fuzzy Hash: d7587093de361ef058870b020f923d6823e958eed8c8dd05ac669c4efe999db2
Instruction Fuzzy Hash: AD215A71A0D6890FE31D5EA85C5A476BBD5E7C7320B05837EE097C61D6DD24B4034281

Source: http://www.yishimei.cn/network/319.html?=23:28:29	HTTP Parser: No favicon
Source: http://www.yishimei.cn/network/319.html?=23:28:29	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: chromecache_88.5.dr	String found in binary or memory: t</a> </li> </ul> <span class=second_menu_hook></span> </div> <a class="link footer_ele last_footer_ele js_footer_link" href=javascript:; style="">English<i class=ic_hook></i></a> </div> <p class="copyright footer_ele r"><span class=footer_ele>Copyright © 2012-<span id=currentYear>2024</span> <a href=http://www.wechat.com>WeChat</a>. All Rights Reserved.</span></p> <p class="footer_ele r"> <a href=/en/service_terms.html class="link footer_ele">Terms of Service</a>\| <a href=/en/privacy_policy.html class="link footer_ele">Privacy Policy</a>\| <a href=/en/acceptable_use_policy.html class="link footer_ele">Acceptable Use Policy</a> </p> <span class="social_link footer_ele r"> <a class="link ic_facebook" style=background-image:url(//newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1TQxEzr.png) href=https://www.facebook.com/wechatapp></a> <a class="link ic_twitter" style=background-image:url(//newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1on3CPc.png) href=https://twitter.com/#!/wechatapp></a> </span> </div> </div> <script>!function(){var e=document.getElementById("currentYear"),n=(new Date).getFullYear();e&&n-+e.innerHTML==1&&(e.innerHTML=n)}()</script> <script src=//newres.wechat.com/t/wx_fed/cdn_libs/res/jquery/1.7.2/jquery.min.js></script> <!--script--> <script>!function(){var n,t={};n=function(n,e){var i=arguments.length;if(i>1)t[n]=e;else if(1==i){if("object"!=typeof n)return String(t[n] \|\| n).replace(/(/g, "(").replace(/)/g, ")").replace(/,/g, ",").replace(/'/g, "'").replace(/"/g, '"');for(var o in n)n.hasOwnProperty(o)&&(t[o]=n[o])}},"_"in window\|\|(window._=n)}();_({"Connecting a billion people with chat, calls, and more":"Connecting a billion people with chat, calls, and more","Connecting a billion people with chat, calls, and more":"Connecting a billion people with chat, calls, and more","Connecting a billion people with chat, calls, and more":"Connecting a billion people with chat, calls, and more"});</script><script src="//newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/js/index_f89dbf8.js"></script></body> </html> equals www.facebook.com (Facebook)
Source: chromecache_88.5.dr	String found in binary or memory: t</a> </li> </ul> <span class=second_menu_hook></span> </div> <a class="link footer_ele last_footer_ele js_footer_link" href=javascript:; style="">English<i class=ic_hook></i></a> </div> <p class="copyright footer_ele r"><span class=footer_ele>Copyright © 2012-<span id=currentYear>2024</span> <a href=http://www.wechat.com>WeChat</a>. All Rights Reserved.</span></p> <p class="footer_ele r"> <a href=/en/service_terms.html class="link footer_ele">Terms of Service</a>\| <a href=/en/privacy_policy.html class="link footer_ele">Privacy Policy</a>\| <a href=/en/acceptable_use_policy.html class="link footer_ele">Acceptable Use Policy</a> </p> <span class="social_link footer_ele r"> <a class="link ic_facebook" style=background-image:url(//newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1TQxEzr.png) href=https://www.facebook.com/wechatapp></a> <a class="link ic_twitter" style=background-image:url(//newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/img/1on3CPc.png) href=https://twitter.com/#!/wechatapp></a> </span> </div> </div> <script>!function(){var e=document.getElementById("currentYear"),n=(new Date).getFullYear();e&&n-+e.innerHTML==1&&(e.innerHTML=n)}()</script> <script src=//newres.wechat.com/t/wx_fed/cdn_libs/res/jquery/1.7.2/jquery.min.js></script> <!--script--> <script>!function(){var n,t={};n=function(n,e){var i=arguments.length;if(i>1)t[n]=e;else if(1==i){if("object"!=typeof n)return String(t[n] \|\| n).replace(/(/g, "(").replace(/)/g, ")").replace(/,/g, ",").replace(/'/g, "'").replace(/"/g, '"');for(var o in n)n.hasOwnProperty(o)&&(t[o]=n[o])}},"_"in window\|\|(window._=n)}();_({"Connecting a billion people with chat, calls, and more":"Connecting a billion people with chat, calls, and more","Connecting a billion people with chat, calls, and more":"Connecting a billion people with chat, calls, and more","Connecting a billion people with chat, calls, and more":"Connecting a billion people with chat, calls, and more"});</script><script src="//newres.wechat.com/t/wx_fed/base/wechat/wechat-main-page/wechat-main-page-oversea-new/res/static/js/index_f89dbf8.js"></script></body> </html> equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: www.yishimei.cn
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sdk.51.la
Source: global traffic	DNS traffic detected: DNS query: collect-v6.51.la
Source: global traffic	DNS traffic detected: DNS query: wwod.lanzout.com
Source: global traffic	DNS traffic detected: DNS query: pan.baidu.com
Source: global traffic	DNS traffic detected: DNS query: weixin.qq.com
Source: global traffic	DNS traffic detected: DNS query: wechat.com
Source: global traffic	DNS traffic detected: DNS query: www.wechat.com
Source: global traffic	DNS traffic detected: DNS query: newres.wechat.com
Source: global traffic	DNS traffic detected: DNS query: support.wechat.com

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe.log

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Windows Analysis Report
SecuriteInfo.com.Win32.TrojanX-gen.16449.26967.exe