Edit tour

Windows Analysis Report
https://inboxsender.gxsearch.club/redir6/serial.php

Overview

General Information

Sample URL:	https://inboxsender.gxsearch.club/redir6/serial.php
Analysis ID:	1571396
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2756 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2036,i,5403239008885262201,14834538258464023186,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://inboxsender.gxsearch.club/redir6/serial.php" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 09 Dec 2024 09:44:48 GMTServer: ApacheUpgrade: h2,h2cConnection: Upgrade, closeLast-Modified: Mon, 03 Oct 2022 20:20:13 GMTAccept-Ranges: bytesContent-Length: 2361Vary: Accept-EncodingContent-Type: text/html

Source: chromecache_44.2.dr	String found in binary or memory: https://i.pinimg.com/originals/4b/95/3e/4b953ed7f947e087346c8a33de0e6721.png
Source: chromecache_45.2.dr	String found in binary or memory: https://www.hostgator.com.br

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.18.109.164:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49765 version: TLS 1.2

Source: classification engine

Classification label: mal56.win@16/7@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2036,i,5403239008885262201,14834538258464023186,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://inboxsender.gxsearch.club/redir6/serial.php"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2036,i,5403239008885262201,14834538258464023186,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://inboxsender.gxsearch.club/redir6/serial.php	100%	Avira URL Cloud	malware

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://inboxsender.gxsearch.club/redir6/download.php	100%	Avira URL Cloud	malware
https://inboxsender.gxsearch.club/favicon.ico	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	142.250.181.68	true	false	high
inboxsender.gxsearch.club	162.241.2.244	true	false	unknown
i.pinimg.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://inboxsender.gxsearch.club/favicon.ico	false	Avira URL Cloud: malware	unknown
https://inboxsender.gxsearch.club/redir6/warning.html	false		unknown
https://inboxsender.gxsearch.club/redir6/download.php	false	Avira URL Cloud: malware	unknown
https://inboxsender.gxsearch.club/redir6/serial.php	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.hostgator.com.br	chromecache_45.2.dr	false		high
https://i.pinimg.com/originals/4b/95/3e/4b953ed7f947e087346c8a33de0e6721.png	chromecache_44.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
162.241.2.244	inboxsender.gxsearch.club	United States	26337	OIS1US	false

Private

IP
192.168.2.13
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1571396
Start date and time:	2024-12-09 10:43:35 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://inboxsender.gxsearch.club/redir6/serial.php
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@16/7@8/5

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 199.232.214.172, 199.232.210.172, 172.217.19.163, 172.217.17.46, 173.194.222.84, 142.250.181.142, 2.20.68.78, 2.20.68.72, 172.217.17.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, 2-01-37d2-0004.cdx.cedexis.net, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, i.pinimg.com.edgekey.net, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, e126505.dsca.akamaiedge.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://inboxsender.gxsearch.club/redir6/serial.php

Simulations

Behavior and APIs

⊘No simulations

Input	Output
URL: https://inboxsender.gxsearch.club Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": true, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://inboxsender.gxsearch.club
URL: https://inboxsender.gxsearch.club/redir6/warning.html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Este arquivo no pode ser aberto neste dispositivo. Acesse-o em um dispositivo Windows para visualizar o documento.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://inboxsender.gxsearch.club/redir6/warning.html Model: Joe Sandbox AI	{ "brands": "unknown" }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 43

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1870 x 690, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	24136
Entropy (8bit):	7.291736159738077
Encrypted:	false
SSDEEP:	384:z47eeeeee6Rxk57zM9tm1hlTn16t6E9zfncc/CiXgT6CSYmcQgBeeeeeeeA:0kRxw/I2bTn1q6QTf8ERg
MD5:	4DDF8C6C06F9C67CC70C912870E26A17
SHA1:	057C10D25E48ED205B3DD5D7944B8D851F238AD0
SHA-256:	69AB9DE1F630522A4D72CAAC418DFACD14574C05BF72A63C609E9EF7C99D1230
SHA-512:	43522F799628992D491DCCDCC28387869EAC6FB3ADA7A9CD5B7C254C37C53D07C777E4C71C26C02AD7D9EF9BCBDB6666B938C76B92DC5E00B01BB18CBD2EFA81
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...N.........R^......gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...............].IDATx...Av.H./.........Xw.fM^....>V. Q.5N.X....d...+..'E..........c...C.J..-J...wN....@D.....G..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 44

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1169
Entropy (8bit):	4.759184617722225
Encrypted:	false
SSDEEP:	24:hPqCrrV2KtAfGHvVzTFkQLDxqE2wKe0WKTVy:tnlvnnDxqrGoM
MD5:	18E4458F85C2F702073BCB90DAFC0D97
SHA1:	4B66B01A5F28ADE41CB7ECB725E8E5D8D5C23DD3
SHA-256:	D2DE868D27CB26388612DB2C60E3EEC09C2EF15D8BE1795EDE6FB553CD102017
SHA-512:	0F9E771EB01AF594A581B139FE5003F6011CF7E6DBE97C8F892FD530CAC57B8D3B27D42B32BA6E792BC87D040BA3C7C73923D777EAF0D3C4B835B3552E76ECCA
Malicious:	false
Reputation:	low
URL:	https://inboxsender.gxsearch.club/redir6/warning.html
Preview:	<!DOCTYPE html>..<html lang="es">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Drive</title>.. <style>.. body {.. font-family: Arial, sans-serif;.. text-align: center;.. background-color: white;.. padding: 20px;.. }.. .warning {.. color: #c00; /* Color rojo para la advertencia /.. font-size: 24px; / Tama...o de la fuente /.. margin: 20px;.. }.. img {.. max-width: 100%;.. height: auto;.. }.. @media (min-width: 601px) {.. / Estilos para dispositivos de escritorio /.. img {.. max-width: 75%; / Reducci...n del tama...o de la imagen al 75% */.. }.. }.. </style>..</head>..<body>.. <p class="warning">Este arquivo n.o pode ser aberto neste dispositivo. Acesse-o em um dispositivo Wind

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2361
Entropy (8bit):	4.991940218545207
Encrypted:	false
SSDEEP:	24:hPsUhMjWBjoTfM8EPsQ345gG0A9ZG0QgG03QVuEEFHpken/ChpZqC6mLp:t2MGPEED/amQVuEa9KEC6mV
MD5:	11A0BBC52834CF74DA795D5815B7DC63
SHA1:	5D401CF953DF570210427A92D27E00DDF403F4B7
SHA-256:	C989A169A129121F006C8FCBF90AB305D9005D516CE72CC44B4949167EED39D5
SHA-512:	BDC773E24231DCC13DB01881C1977C091F565D1505AB8FB8AAF7F6565DDCBC36B1943126D51E43E701A49C6C024E9D335B50CA546E8058029844255F2796A62C
Malicious:	false
Reputation:	low
URL:	https://inboxsender.gxsearch.club/favicon.ico
Preview:	<!DOCTYPE html>..<html lang="pt-BR">.. <head>.. <meta charset="UTF-8">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <meta name="format-detection" content="telephone=no">.. <meta name="robots" content="noindex">.. <title>Hospedagem de Site com Dom.nio Gr.tis - HostGator</title>.. <link rel="shortcut icon" href="/cgi-sys/images/favicons/favicon.ico">.. <link rel="icon" href="/cgi-sys/images/favicons/favicon-32.png" sizes="32x32">.. <link rel="icon" href="/cgi-sys/images/favicons/favicon-57.png" sizes="57x57">.. <link rel="icon" href="/cgi-sys/images/favicons/favicon-76.png" sizes="76x76">.. <link rel="icon" href="/cgi-sys/images/favicons/favicon-96.png" sizes="96x96">.. <link rel="icon" href="/cgi-sys/images/favicons/favicon-128.png" sizes="128x128">.. <link rel="shortcut icon" href="/cgi-sys/images/favicons/favicon-192.png" sizes="192x192">.. <link rel="apple-

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1870 x 690, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24136
Entropy (8bit):	7.291736159738077
Encrypted:	false
SSDEEP:	384:z47eeeeee6Rxk57zM9tm1hlTn16t6E9zfncc/CiXgT6CSYmcQgBeeeeeeeA:0kRxw/I2bTn1q6QTf8ERg
MD5:	4DDF8C6C06F9C67CC70C912870E26A17
SHA1:	057C10D25E48ED205B3DD5D7944B8D851F238AD0
SHA-256:	69AB9DE1F630522A4D72CAAC418DFACD14574C05BF72A63C609E9EF7C99D1230
SHA-512:	43522F799628992D491DCCDCC28387869EAC6FB3ADA7A9CD5B7C254C37C53D07C777E4C71C26C02AD7D9EF9BCBDB6666B938C76B92DC5E00B01BB18CBD2EFA81
Malicious:	false
Reputation:	low
URL:	https://i.pinimg.com/originals/4b/95/3e/4b953ed7f947e087346c8a33de0e6721.png
Preview:	.PNG........IHDR...N.........R^......gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...............].IDATx...Av.H./.........Xw.fM^....>V. Q.5N.X....d...+..'E..........c...C.J..-J...wN....@D.....G..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 9, 2024 10:44:29.669855118 CET	49675	443	192.168.2.4	173.222.162.32
Dec 9, 2024 10:44:36.746799946 CET	49743	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:44:36.746834993 CET	443	49743	142.250.181.68	192.168.2.4
Dec 9, 2024 10:44:36.746936083 CET	49743	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:44:36.747303963 CET	49743	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:44:36.747324944 CET	443	49743	142.250.181.68	192.168.2.4
Dec 9, 2024 10:44:38.097817898 CET	49744	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:38.097860098 CET	443	49744	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:38.098073959 CET	49744	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:38.107969999 CET	49744	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:38.107990026 CET	443	49744	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:38.446445942 CET	443	49743	142.250.181.68	192.168.2.4
Dec 9, 2024 10:44:38.446810961 CET	49743	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:44:38.446831942 CET	443	49743	142.250.181.68	192.168.2.4
Dec 9, 2024 10:44:38.447976112 CET	443	49743	142.250.181.68	192.168.2.4
Dec 9, 2024 10:44:38.448051929 CET	49743	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:44:38.449177027 CET	49743	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:44:38.449273109 CET	443	49743	142.250.181.68	192.168.2.4
Dec 9, 2024 10:44:38.500250101 CET	49743	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:44:38.500261068 CET	443	49743	142.250.181.68	192.168.2.4
Dec 9, 2024 10:44:38.546704054 CET	49743	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:44:38.907332897 CET	49745	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:38.907366037 CET	443	49745	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:38.907509089 CET	49745	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:38.908133984 CET	49746	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:38.908163071 CET	443	49746	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:38.908262014 CET	49746	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:38.908365965 CET	49745	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:38.908384085 CET	443	49745	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:38.908540010 CET	49746	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:38.908557892 CET	443	49746	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:39.457369089 CET	443	49744	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:39.457469940 CET	49744	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:39.462548971 CET	49744	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:39.462560892 CET	443	49744	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:39.462904930 CET	443	49744	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:39.514945030 CET	49744	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:39.537388086 CET	49744	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:39.583332062 CET	443	49744	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:39.979509115 CET	443	49744	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:39.979598045 CET	443	49744	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:39.979698896 CET	49744	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:39.979796886 CET	49744	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:39.979810953 CET	443	49744	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:39.979824066 CET	49744	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:39.979829073 CET	443	49744	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:40.033756018 CET	49747	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:40.033791065 CET	443	49747	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:40.033937931 CET	49747	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:40.035492897 CET	49747	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:40.035511017 CET	443	49747	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:40.188039064 CET	443	49746	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:40.188452959 CET	49746	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:40.188479900 CET	443	49746	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:40.190165997 CET	443	49746	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:40.190268040 CET	49746	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:40.191602945 CET	443	49745	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:40.191823959 CET	49745	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:40.191837072 CET	443	49745	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:40.192874908 CET	443	49745	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:40.192943096 CET	49745	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:40.195044994 CET	49746	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:40.195142984 CET	49745	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:40.195164919 CET	443	49746	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:40.195207119 CET	443	49745	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:40.195365906 CET	49746	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:40.195374012 CET	443	49746	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:40.249030113 CET	49746	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:40.249139071 CET	49745	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:40.249151945 CET	443	49745	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:40.295675039 CET	49745	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:40.496445894 CET	49730	443	192.168.2.4	173.222.162.32
Dec 9, 2024 10:44:40.615720034 CET	443	49730	173.222.162.32	192.168.2.4
Dec 9, 2024 10:44:41.239253044 CET	443	49746	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:41.239542961 CET	443	49746	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:41.239614010 CET	49746	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:41.239794016 CET	49746	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:41.239820004 CET	443	49746	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:41.239830017 CET	49746	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:41.239869118 CET	49746	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:41.241852045 CET	49745	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:41.283369064 CET	443	49745	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:41.378618956 CET	443	49747	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:41.378712893 CET	49747	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:41.380409956 CET	49747	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:41.380423069 CET	443	49747	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:41.380675077 CET	443	49747	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:41.381911993 CET	49747	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:41.423350096 CET	443	49747	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:41.636200905 CET	443	49745	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:41.636279106 CET	443	49745	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:41.636343002 CET	49745	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:41.636785984 CET	49745	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:41.636800051 CET	443	49745	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:41.641537905 CET	49748	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:41.641568899 CET	443	49748	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:41.641649961 CET	49748	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:41.642153978 CET	49748	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:41.642175913 CET	443	49748	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:41.881031990 CET	443	49747	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:41.881114006 CET	443	49747	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:41.881184101 CET	49747	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:41.882060051 CET	49747	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:41.882076025 CET	443	49747	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:41.882107019 CET	49747	443	192.168.2.4	2.18.109.164
Dec 9, 2024 10:44:41.882112980 CET	443	49747	2.18.109.164	192.168.2.4
Dec 9, 2024 10:44:42.901572943 CET	443	49748	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:42.901907921 CET	49748	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:42.901937008 CET	443	49748	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:42.902323008 CET	443	49748	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:42.903872013 CET	49748	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:42.903942108 CET	443	49748	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:42.904074907 CET	49748	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:42.951328039 CET	443	49748	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:43.089608908 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:43.089646101 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:43.089782000 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:43.092442036 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:43.092461109 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:43.362760067 CET	443	49748	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:43.362835884 CET	443	49748	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:43.362926960 CET	49748	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:43.364625931 CET	49748	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:43.364646912 CET	443	49748	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:44.917071104 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:44.917152882 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:44.922013998 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:44.922022104 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:44.922415018 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:44.968760967 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:44.991611004 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:45.035336018 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:45.568566084 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:45.568614006 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:45.568622112 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:45.568630934 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:45.568669081 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:45.568679094 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:45.568703890 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:45.568720102 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:45.568732023 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:45.568768024 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:45.589849949 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:45.589955091 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:45.589972973 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:45.589982986 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:45.590032101 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:45.599558115 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:45.599582911 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:45.599606037 CET	49749	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:44:45.599617004 CET	443	49749	172.202.163.200	192.168.2.4
Dec 9, 2024 10:44:47.094445944 CET	49751	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:47.094479084 CET	443	49751	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:47.094624996 CET	49751	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:47.094770908 CET	49751	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:47.094783068 CET	443	49751	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:48.136814117 CET	443	49743	142.250.181.68	192.168.2.4
Dec 9, 2024 10:44:48.136885881 CET	443	49743	142.250.181.68	192.168.2.4
Dec 9, 2024 10:44:48.137017012 CET	49743	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:44:48.144988060 CET	80	49723	217.20.58.99	192.168.2.4
Dec 9, 2024 10:44:48.145193100 CET	49723	80	192.168.2.4	217.20.58.99
Dec 9, 2024 10:44:48.145237923 CET	49723	80	192.168.2.4	217.20.58.99
Dec 9, 2024 10:44:48.264488935 CET	80	49723	217.20.58.99	192.168.2.4
Dec 9, 2024 10:44:48.344079018 CET	443	49751	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:48.344558001 CET	49751	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:48.344577074 CET	443	49751	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:48.344943047 CET	443	49751	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:48.345350981 CET	49751	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:48.345412016 CET	443	49751	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:48.345500946 CET	49751	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:48.391340017 CET	443	49751	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:48.639370918 CET	49743	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:44:48.639410019 CET	443	49743	142.250.181.68	192.168.2.4
Dec 9, 2024 10:44:48.810712099 CET	443	49751	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:48.810734034 CET	443	49751	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:48.810786009 CET	49751	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:48.810801983 CET	443	49751	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:48.810837030 CET	443	49751	162.241.2.244	192.168.2.4
Dec 9, 2024 10:44:48.810880899 CET	49751	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:48.812793016 CET	49751	443	192.168.2.4	162.241.2.244
Dec 9, 2024 10:44:48.812808037 CET	443	49751	162.241.2.244	192.168.2.4
Dec 9, 2024 10:45:22.263122082 CET	49754	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:45:22.263171911 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:22.263238907 CET	49754	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:45:22.263673067 CET	49754	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:45:22.263691902 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:23.910865068 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:23.911005974 CET	49754	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:45:23.914078951 CET	49754	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:45:23.914087057 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:23.914407969 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:23.923381090 CET	49754	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:45:23.971330881 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:24.575664043 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:24.575690031 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:24.575706959 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:24.575810909 CET	49754	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:45:24.575822115 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:24.575867891 CET	49754	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:45:24.611763954 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:24.611813068 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:24.611860991 CET	49754	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:45:24.611869097 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:24.611888885 CET	49754	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:45:24.611910105 CET	49754	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:45:24.612111092 CET	49754	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:45:24.612123966 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:24.612144947 CET	49754	443	192.168.2.4	172.202.163.200
Dec 9, 2024 10:45:24.612154007 CET	443	49754	172.202.163.200	192.168.2.4
Dec 9, 2024 10:45:26.567675114 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:26.567699909 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:26.567806959 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:26.568274975 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:26.568289995 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:28.303221941 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:28.303318024 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:28.305337906 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:28.305345058 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:28.305648088 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:28.315917015 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:28.359340906 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:28.783833981 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:28.783864021 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:28.783879995 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:28.783945084 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:28.783965111 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:28.784018993 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:28.957690001 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:28.957720995 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:28.957874060 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:28.957896948 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:28.957947969 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.007569075 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.007599115 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.007776976 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.007805109 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.007852077 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.130795002 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.130834103 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.130995035 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.131016016 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.131067991 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.169594049 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.169621944 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.169663906 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.169676065 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.169730902 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.195957899 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.195982933 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.196058035 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.196072102 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.196116924 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.308010101 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.308036089 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.308204889 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.308223009 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.308290005 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.328708887 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.328758955 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.328891993 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.328905106 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.328958988 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.343420982 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.343447924 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.343575954 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.343585014 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.343631029 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.359898090 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.359930038 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.360042095 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.360052109 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.360099077 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.376455069 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.376487970 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.376624107 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.376635075 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.376687050 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.391953945 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.391978979 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.392118931 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.392132044 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.392179012 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.501255035 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.501287937 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.501441002 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.501477003 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.501519918 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.505279064 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.505368948 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.505381107 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.505420923 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.505563021 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.505582094 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.505593061 CET	49755	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.505599022 CET	443	49755	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.556849003 CET	49756	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.556905031 CET	443	49756	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.557020903 CET	49756	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.566946030 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.566962004 CET	49757	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.567003965 CET	443	49757	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.567004919 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.567090988 CET	49757	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.567341089 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.567341089 CET	49756	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.567383051 CET	443	49756	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.568305016 CET	49757	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.568324089 CET	443	49757	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.568393946 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.568419933 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.569272041 CET	49759	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.569292068 CET	443	49759	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.569360971 CET	49759	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.569472075 CET	49759	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.569493055 CET	443	49759	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.570297956 CET	49760	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.570322990 CET	443	49760	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:29.570461988 CET	49760	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.570573092 CET	49760	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:29.570591927 CET	443	49760	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.047729969 CET	443	49757	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.047822952 CET	49757	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.047900915 CET	49757	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.047905922 CET	443	49759	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.047924995 CET	443	49757	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.047982931 CET	49759	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.048052073 CET	49759	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.048057079 CET	443	49759	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.048803091 CET	49761	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.048815966 CET	49762	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.048830032 CET	443	49761	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.048840046 CET	443	49762	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.048888922 CET	49761	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.048928022 CET	49762	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.049257040 CET	49762	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.049269915 CET	49761	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.049271107 CET	443	49762	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.049287081 CET	443	49761	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.049400091 CET	443	49760	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.049463034 CET	49760	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.049478054 CET	49760	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.049487114 CET	443	49760	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.049638033 CET	49763	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.049648046 CET	443	49763	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.049701929 CET	49763	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.049819946 CET	49763	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.049832106 CET	443	49763	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.289612055 CET	443	49762	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.292566061 CET	49764	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.292606115 CET	443	49764	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.292690992 CET	49764	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.292882919 CET	49764	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.292895079 CET	443	49764	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.772011995 CET	443	49764	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.772157907 CET	49764	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.772317886 CET	49764	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.772330046 CET	443	49764	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.772689104 CET	49765	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.772726059 CET	443	49765	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:30.772790909 CET	49765	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.773168087 CET	49765	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:30.773188114 CET	443	49765	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.014694929 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.014727116 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.014812946 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.014832020 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.059057951 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.206106901 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.209141016 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.209163904 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.282016039 CET	443	49756	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.283020973 CET	49756	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.283057928 CET	443	49756	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.284039974 CET	49756	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.284046888 CET	443	49756	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.495135069 CET	443	49763	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.495389938 CET	443	49763	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.495436907 CET	49763	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.495501041 CET	49763	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.495516062 CET	443	49763	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.498094082 CET	49766	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.498130083 CET	443	49766	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.498192072 CET	49766	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.498481035 CET	49766	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.498493910 CET	443	49766	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.523060083 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.524477005 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.524514914 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.524528027 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.524533033 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.715092897 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.715363026 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.715379953 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.721144915 CET	443	49756	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.721163988 CET	443	49756	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.721235037 CET	49756	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.721246958 CET	443	49756	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.721287012 CET	49756	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.721482992 CET	49756	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.721492052 CET	443	49756	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.721506119 CET	49756	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.721998930 CET	443	49756	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.722032070 CET	443	49756	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.722073078 CET	49756	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.724579096 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.724585056 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.764589071 CET	443	49761	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.764725924 CET	49761	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.767736912 CET	49761	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.767748117 CET	443	49761	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.768155098 CET	443	49761	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.769000053 CET	49761	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.811342955 CET	443	49761	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.906958103 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.949714899 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.979435921 CET	443	49766	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.979536057 CET	49766	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.979597092 CET	49766	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.979610920 CET	443	49766	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:31.979852915 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:31.979861975 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.076446056 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.097970963 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.097987890 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.099220991 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.101351023 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.143332005 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.199371099 CET	443	49761	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.199445963 CET	443	49761	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.199503899 CET	49761	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.200130939 CET	49761	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.200148106 CET	443	49761	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.203581095 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.203593016 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.297676086 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.303603888 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.303621054 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.457885981 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.492616892 CET	443	49765	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.492767096 CET	49765	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.494337082 CET	49765	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.494345903 CET	443	49765	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.494616032 CET	443	49765	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.495505095 CET	49765	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.512167931 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.512186050 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.515582085 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.515603065 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.515639067 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.515644073 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.543329000 CET	443	49765	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.649118900 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.652462006 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.652486086 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.841228008 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.844615936 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.844631910 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.857851982 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.860321999 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.860332012 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.862413883 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.903335094 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.925669909 CET	443	49765	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.925744057 CET	443	49765	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.925865889 CET	49765	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.926122904 CET	49765	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.926122904 CET	49765	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.926146030 CET	443	49765	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.926155090 CET	443	49765	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:32.929395914 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:32.929403067 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.049797058 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.053350925 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:33.053375959 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.275759935 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.279125929 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:33.279148102 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.279491901 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.279556036 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:33.281842947 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:33.281904936 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:33.281933069 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.395133972 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.398586035 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:33.439335108 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.471569061 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.475351095 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:33.475368977 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.710150003 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.713319063 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.713387966 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:33.713403940 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.713571072 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:33.713577986 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.716073036 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:33.716078997 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.716140985 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:33.716145039 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.832372904 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.835750103 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:33.835786104 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:33.837985039 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:33.883336067 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.028618097 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.031867027 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.031888962 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.149837017 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.153292894 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.153312922 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.155354023 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.203336000 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.269265890 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.269315004 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.272855997 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.272865057 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.272986889 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.272991896 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.461272955 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.464775085 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.464809895 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.509031057 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.512176037 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.512213945 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.514436960 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.559335947 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.627698898 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.631395102 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.631418943 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.633774042 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.675338030 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.819813967 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.823051929 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.823071003 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.942521095 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.945817947 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.945833921 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:34.947681904 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:34.991339922 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.210867882 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.214322090 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:35.214345932 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.216869116 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:35.263322115 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.375828981 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.378997087 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.379054070 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:35.379089117 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.380645037 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:35.380681038 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.381917953 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:35.381927967 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.382523060 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:35.382535934 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.570796013 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.574634075 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:35.574661016 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.762948990 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.767137051 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:35.767159939 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.853149891 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.903341055 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:35.903357983 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.907094955 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:35.907141924 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.907161951 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:35.907167912 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.954783916 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:35.958241940 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:35.958281040 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:36.045366049 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:36.048966885 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:36.049000025 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:36.190382004 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:36.193959951 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:36.194003105 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:36.552680969 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:36.556700945 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:36.556732893 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:36.559231043 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:36.559322119 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:36.559344053 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:36.576917887 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:36.581075907 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:36.627337933 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:36.670516014 CET	49768	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:45:36.670545101 CET	443	49768	142.250.181.68	192.168.2.4
Dec 9, 2024 10:45:36.670660019 CET	49768	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:45:36.670984983 CET	49768	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:45:36.671001911 CET	443	49768	142.250.181.68	192.168.2.4
Dec 9, 2024 10:45:36.862179995 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:36.865351915 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:36.865396023 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:36.914817095 CET	443	49768	142.250.181.68	192.168.2.4
Dec 9, 2024 10:45:36.915688992 CET	49769	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:45:36.915721893 CET	443	49769	142.250.181.68	192.168.2.4
Dec 9, 2024 10:45:36.915826082 CET	49769	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:45:36.916126966 CET	49769	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:45:36.916145086 CET	443	49769	142.250.181.68	192.168.2.4
Dec 9, 2024 10:45:36.982460022 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.028270960 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.028290033 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.031706095 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.031717062 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.054433107 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.057425976 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.057437897 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.057574987 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.059329987 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.059348106 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.286473036 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.289916039 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.331343889 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.394941092 CET	443	49769	142.250.181.68	192.168.2.4
Dec 9, 2024 10:45:37.394999981 CET	49769	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:45:37.395221949 CET	49769	443	192.168.2.4	142.250.181.68
Dec 9, 2024 10:45:37.395246029 CET	443	49769	142.250.181.68	192.168.2.4
Dec 9, 2024 10:45:37.462930918 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.467035055 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.467099905 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.467133045 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.468246937 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.468262911 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.477479935 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.477499962 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.478394032 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.480462074 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.480752945 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.481071949 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.655031919 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.658498049 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.703332901 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.847310066 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.850686073 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.850708961 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.903846025 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.950098991 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.950123072 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.953603983 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.953633070 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:37.953646898 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:37.953653097 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.018676043 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.022063017 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.022085905 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.039514065 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.042373896 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.083338976 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.210628033 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.214298964 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.214348078 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.324572086 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.324718952 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.328170061 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.328191042 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.328233957 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.328238964 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.516885042 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.525702000 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.525732040 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.528701067 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.571336985 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.680345058 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.682666063 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.683988094 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.684015036 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.684043884 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.684108019 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.686218977 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.731329918 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.750336885 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.753364086 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.753396034 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.871763945 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:38.876487970 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:38.876539946 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.063832998 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.106354952 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:39.106370926 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.110059977 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:39.110069990 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.157682896 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.200090885 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:39.200122118 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.203697920 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:39.203715086 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.255795956 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.259562969 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:39.259587049 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.259705067 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:39.259710073 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.349653959 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.353368044 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:39.353395939 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.491517067 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.495286942 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:39.495310068 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.661209106 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.665000916 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:39.665024042 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.665241003 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.715780020 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:39.715801954 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.719690084 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:39.719690084 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:39.719754934 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.853255987 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:39.857033014 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:39.899337053 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.045366049 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.049041033 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:40.049072027 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.092334032 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.092432022 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:40.095859051 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:40.095870018 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.208301067 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.211910009 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:40.211951971 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.211992025 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:40.212002039 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.237374067 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.243879080 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:40.287336111 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.400455952 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.404256105 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:40.404287100 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.592669964 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.598108053 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:40.598133087 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.684899092 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.731236935 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:40.731259108 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.734949112 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:40.735012054 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.784770012 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.788568020 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:40.788606882 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.788680077 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:40.788691044 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.876885891 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:40.880584002 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:40.880623102 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.018644094 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.022351980 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.022375107 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.068964005 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.072715044 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.072782040 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.169502020 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.215652943 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.215666056 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.219877958 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.219907999 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.219985008 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.220006943 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.361520052 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.365046024 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.365077019 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.450316906 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.496855974 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.496872902 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.500298023 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.500323057 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.500360012 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.612870932 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.653141022 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.653162956 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.656971931 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.657023907 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.657032013 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.657073975 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.804888964 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.808346987 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.808382034 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.894669056 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.934398890 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.934413910 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.939162016 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.939229965 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:41.944154978 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:41.944225073 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.012336016 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.059405088 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.059417963 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.062764883 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.062819004 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.062956095 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.062979937 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.204240084 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.207792044 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.207833052 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.376818895 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.380323887 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.380356073 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.438334942 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.442656994 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.442693949 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.492451906 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.543798923 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.543824911 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.547333002 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.547364950 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.547451973 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.547470093 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.684447050 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.688360929 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.688393116 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.772263050 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.825042963 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.825071096 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.828717947 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.828752995 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.828772068 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.828780890 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.933100939 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.981240034 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.981261969 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.987819910 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.987854004 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:42.988809109 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:42.988833904 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.125212908 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.129389048 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:43.129429102 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.221584082 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.264077902 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:43.264103889 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.267993927 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:43.268042088 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.268978119 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:43.269000053 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.340998888 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.387658119 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:43.387670994 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.391844988 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:43.391872883 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.392000914 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:43.392020941 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.532957077 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.536685944 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:43.536715984 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.698978901 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.703304052 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:43.703339100 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.766365051 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.769587040 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:43.769917011 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.822038889 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.872055054 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:43.872076988 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.876719952 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:43.876779079 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:43.876792908 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:43.876808882 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.014436960 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.018457890 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.018496037 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.104592085 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.153300047 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.153331041 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.156864882 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.156917095 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.156971931 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.156991005 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.381963015 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.434566975 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.434586048 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.438086033 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.438103914 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.438189030 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.438194036 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.545876026 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.549477100 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.549516916 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.549536943 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.549546003 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.549592018 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.551831007 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.551919937 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.551938057 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.752566099 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.756052017 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.803337097 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.913314104 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.916614056 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.916682959 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.916695118 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.920893908 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.920909882 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.920918941 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.920922995 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.921463966 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.921468973 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:44.921638966 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:44.921643972 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.105345011 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.109061003 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:45.109078884 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.297441959 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.301215887 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:45.301240921 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.397217989 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.450200081 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:45.450223923 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.453855038 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:45.453876019 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.489267111 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.492230892 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:45.492253065 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.494343042 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:45.535336971 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.589256048 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.593017101 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:45.593038082 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.722363949 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.725436926 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:45.725461006 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.781327963 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.784744024 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:45.784790993 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.888864994 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.888959885 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:45.892461061 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:45.892486095 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:45.892501116 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:45.892534971 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.083498955 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.088221073 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:46.088264942 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.198761940 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.246692896 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:46.246709108 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.250365019 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:46.250412941 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.250452995 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:46.250473976 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.316430092 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.371650934 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:46.371670961 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.377182961 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:46.377240896 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.377281904 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:46.377300024 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.508277893 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.512161970 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:46.512208939 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.687340021 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.690902948 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:46.691065073 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.708853960 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.711503029 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:46.759335041 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.803606987 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.856026888 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:46.856051922 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.859592915 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:46.859642982 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:46.859667063 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:46.859679937 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.004252911 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.007906914 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.007936954 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.084271908 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.137280941 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.137294054 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.140702963 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.140739918 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.140752077 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.140779972 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.245728016 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.293581009 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.293605089 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.297218084 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.297269106 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.298221111 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.298240900 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.441273928 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.445578098 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.445687056 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.529422998 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.574862957 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.574886084 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.578576088 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.578603983 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.578627110 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.648437977 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.699814081 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.699840069 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.703488111 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.703535080 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.703562021 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.703587055 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.840437889 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.843986034 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.844033957 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.893364906 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.934207916 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.934230089 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.937948942 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.937997103 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:47.938083887 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:47.938102961 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.074461937 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.078402042 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:48.078684092 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.266355991 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.273256063 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:48.273307085 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.296964884 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.337425947 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:48.337447882 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.341093063 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:48.387336016 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.413429022 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.417462111 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:48.417491913 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.417581081 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:48.417604923 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.489057064 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.496572971 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:48.496615887 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.646467924 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.650275946 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:48.650319099 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.887193918 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.890999079 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:48.891030073 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.906308889 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.949848890 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:48.949873924 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.953346968 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:48.953406096 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:48.953428030 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.992634058 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:48.996509075 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.039343119 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.098937988 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.102514029 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.102539062 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.321954966 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.325337887 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.325402975 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.325426102 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.325942993 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.325951099 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.328161001 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.328166008 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.441401005 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.444710016 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.444732904 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.444777012 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.444782019 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.517280102 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.520746946 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.520773888 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.754405022 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.757764101 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.757786989 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.763902903 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.763959885 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.766839981 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.811322927 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.880796909 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.884193897 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.884207964 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.884299994 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.884305954 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.946373940 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:49.949615955 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:49.949636936 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.178410053 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.181575060 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:50.181608915 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.353727102 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.357196093 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.357409000 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:50.357444048 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.357563019 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:50.357569933 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.359890938 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:50.359906912 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.370466948 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.373785973 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:50.373922110 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:50.374125004 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.545958996 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.554552078 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:50.599325895 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.737767935 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.741082907 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:50.741102934 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.791774988 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.840728998 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:50.840749025 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.844111919 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:50.844129086 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.908004045 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.911540985 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:50.911570072 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.911631107 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:50.911636114 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.930027962 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:50.933406115 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:50.979330063 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.099817038 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.103929996 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:51.103965044 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.291902065 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.295870066 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:51.295896053 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.340692043 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.387595892 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:51.387615919 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.391036034 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:51.391050100 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.458018064 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.461940050 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:51.461957932 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.462896109 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:51.462899923 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.484452963 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.486852884 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:51.527322054 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.650161028 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.652949095 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:51.652976990 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.842133045 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.845581055 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:51.845613956 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.932971954 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.981358051 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:51.981374025 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:51.984627008 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:51.984677076 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.034209013 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.037875891 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.037911892 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.037938118 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.124902964 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.128500938 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.128546000 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.266350985 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.269865036 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.269897938 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.316879034 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.320732117 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.320771933 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.418633938 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.465783119 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.465801001 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.469307899 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.469333887 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.469352961 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.610572100 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.614392042 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.614424944 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.733498096 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.778223038 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.778244972 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.782279968 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.782332897 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.782995939 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.783015966 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.893196106 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:52.893270969 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.896821022 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.896899939 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:52.896910906 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.118668079 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.127883911 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:53.127908945 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.194612026 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.246989965 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:53.247001886 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.292104959 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:53.292119026 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.292658091 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.304526091 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:53.304539919 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.319202900 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:53.322613955 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:53.322640896 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.484688044 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.488387108 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:53.531330109 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.676743984 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.680393934 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:53.680411100 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.726778030 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.726972103 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:53.730710030 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:53.730721951 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.842545986 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.846189976 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:53.846189976 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:53.846235037 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.846246004 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.868814945 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:53.872437954 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:53.919327021 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.042737961 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.047746897 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.047766924 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.234661102 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.238555908 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.238605976 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.276048899 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.276127100 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.278975964 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.279606104 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.279638052 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.282289982 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.282396078 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.282417059 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.395004034 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.434504986 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.434534073 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.438359022 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.479335070 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.587090969 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.590877056 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.590902090 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.709809065 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.709876060 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.713917971 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.716734886 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.716881990 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.716905117 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.717989922 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.718024015 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.719547033 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.719574928 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.719686031 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.719712019 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.902450085 CET	443	49758	13.107.246.63	192.168.2.4
Dec 9, 2024 10:45:54.906580925 CET	49758	443	192.168.2.4	13.107.246.63
Dec 9, 2024 10:45:54.906618118 CET	443	49758	13.107.246.63	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 9, 2024 10:44:32.534657001 CET	53	60480	1.1.1.1	192.168.2.4
Dec 9, 2024 10:44:32.540492058 CET	53	56803	1.1.1.1	192.168.2.4
Dec 9, 2024 10:44:35.250164032 CET	53	56427	1.1.1.1	192.168.2.4
Dec 9, 2024 10:44:36.608197927 CET	59114	53	192.168.2.4	1.1.1.1
Dec 9, 2024 10:44:36.608370066 CET	53434	53	192.168.2.4	1.1.1.1
Dec 9, 2024 10:44:36.744880915 CET	53	59114	1.1.1.1	192.168.2.4
Dec 9, 2024 10:44:36.744960070 CET	53	53434	1.1.1.1	192.168.2.4
Dec 9, 2024 10:44:37.941512108 CET	56437	53	192.168.2.4	1.1.1.1
Dec 9, 2024 10:44:37.941948891 CET	55694	53	192.168.2.4	1.1.1.1
Dec 9, 2024 10:44:38.905036926 CET	53	55694	1.1.1.1	192.168.2.4
Dec 9, 2024 10:44:38.905670881 CET	53	56437	1.1.1.1	192.168.2.4
Dec 9, 2024 10:44:43.381474018 CET	49993	53	192.168.2.4	1.1.1.1
Dec 9, 2024 10:44:43.381629944 CET	58004	53	192.168.2.4	1.1.1.1
Dec 9, 2024 10:44:43.519836903 CET	53	58004	1.1.1.1	192.168.2.4
Dec 9, 2024 10:44:47.097400904 CET	63814	53	192.168.2.4	1.1.1.1
Dec 9, 2024 10:44:47.097541094 CET	49809	53	192.168.2.4	1.1.1.1
Dec 9, 2024 10:44:47.234724998 CET	53	49809	1.1.1.1	192.168.2.4
Dec 9, 2024 10:44:47.769603014 CET	138	138	192.168.2.4	192.168.2.255
Dec 9, 2024 10:44:52.170907974 CET	53	59339	1.1.1.1	192.168.2.4
Dec 9, 2024 10:45:10.980366945 CET	53	62087	1.1.1.1	192.168.2.4
Dec 9, 2024 10:45:32.046783924 CET	53	56001	1.1.1.1	192.168.2.4
Dec 9, 2024 10:45:33.919131994 CET	53	65120	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 9, 2024 10:44:36.608197927 CET	192.168.2.4	1.1.1.1	0xb136	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 10:44:36.608370066 CET	192.168.2.4	1.1.1.1	0x713e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 9, 2024 10:44:37.941512108 CET	192.168.2.4	1.1.1.1	0xf613	Standard query (0)	inboxsender.gxsearch.club	A (IP address)	IN (0x0001)	false
Dec 9, 2024 10:44:37.941948891 CET	192.168.2.4	1.1.1.1	0x47ea	Standard query (0)	inboxsender.gxsearch.club	65	IN (0x0001)	false
Dec 9, 2024 10:44:43.381474018 CET	192.168.2.4	1.1.1.1	0xdf6f	Standard query (0)	i.pinimg.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 10:44:43.381629944 CET	192.168.2.4	1.1.1.1	0xf219	Standard query (0)	i.pinimg.com	65	IN (0x0001)	false
Dec 9, 2024 10:44:47.097400904 CET	192.168.2.4	1.1.1.1	0xe56d	Standard query (0)	i.pinimg.com	A (IP address)	IN (0x0001)	false
Dec 9, 2024 10:44:47.097541094 CET	192.168.2.4	1.1.1.1	0x9cac	Standard query (0)	i.pinimg.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 9, 2024 10:44:36.744880915 CET	1.1.1.1	192.168.2.4	0xb136	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 9, 2024 10:44:36.744960070 CET	1.1.1.1	192.168.2.4	0x713e	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 9, 2024 10:44:38.905670881 CET	1.1.1.1	192.168.2.4	0xf613	No error (0)	inboxsender.gxsearch.club		162.241.2.244	A (IP address)	IN (0x0001)	false
Dec 9, 2024 10:44:43.518110037 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	i.pinimg.com	i.pinimg.com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 10:44:43.518110037 CET	1.1.1.1	192.168.2.4	0xdf6f	No error (0)	i.pinimg.com.gslb.pinterest.com	2-01-37d2-0004.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 10:44:43.519836903 CET	1.1.1.1	192.168.2.4	0xf219	No error (0)	i.pinimg.com	i.pinimg.com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 10:44:43.519836903 CET	1.1.1.1	192.168.2.4	0xf219	No error (0)	i.pinimg.com.gslb.pinterest.com	2-01-37d2-0004.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 10:44:47.234724998 CET	1.1.1.1	192.168.2.4	0x9cac	No error (0)	i.pinimg.com	i.pinimg.com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 10:44:47.234724998 CET	1.1.1.1	192.168.2.4	0x9cac	No error (0)	i.pinimg.com.gslb.pinterest.com	2-01-37d2-0004.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 10:44:47.234864950 CET	1.1.1.1	192.168.2.4	0xe56d	No error (0)	i.pinimg.com	i.pinimg.com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 9, 2024 10:44:47.234864950 CET	1.1.1.1	192.168.2.4	0xe56d	No error (0)	i.pinimg.com.gslb.pinterest.com	2-01-37d2-0004.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

inboxsender.gxsearch.club

fs.microsoft.com

slscr.update.microsoft.com

https:

otelrules.azureedge.net

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Dec 9, 2024 10:45:31.206106901 CET	13.107.246.63	443	192.168.2.4	49758	CN=*.azureedge.net, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 19 17:30:52 CEST 2024 Thu Jun 08 02:00:00 CEST 2023 Thu Aug 01 14:00:00 CEST 2013	Sun Sep 14 17:30:52 CEST 2025 Wed Aug 26 01:59:59 CEST 2026 Fri Jan 15 13:00:00 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
					CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jun 08 02:00:00 CEST 2023	Wed Aug 26 01:59:59 CEST 2026
					CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 01 14:00:00 CEST 2013	Fri Jan 15 13:00:00 CET 2038

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49744	2.18.109.164	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 09:44:39 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-09 09:44:39 UTC	479	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=144292 Date: Mon, 09 Dec 2024 09:44:39 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49746	162.241.2.244	443	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 09:44:40 UTC	685	OUT	GET /redir6/serial.php HTTP/1.1 Host: inboxsender.gxsearch.club Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 09:44:41 UTC	215	IN	HTTP/1.1 302 Moved Temporarily Date: Mon, 09 Dec 2024 09:44:40 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Location: download.php Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49745	162.241.2.244	443	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 09:44:41 UTC	687	OUT	GET /redir6/download.php HTTP/1.1 Host: inboxsender.gxsearch.club Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 09:44:41 UTC	215	IN	HTTP/1.1 302 Moved Temporarily Date: Mon, 09 Dec 2024 09:44:41 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Location: warning.html Content-Length: 0 Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49747	2.18.109.164	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 09:44:41 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-09 09:44:41 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=43243 Date: Mon, 09 Dec 2024 09:44:41 GMT Content-Length: 55 Connection: close X-CID: 2
2024-12-09 09:44:41 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49748	162.241.2.244	443	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 09:44:42 UTC	687	OUT	GET /redir6/warning.html HTTP/1.1 Host: inboxsender.gxsearch.club Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 09:44:43 UTC	255	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 09:44:43 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 23 Sep 2024 22:24:30 GMT Accept-Ranges: bytes Content-Length: 1169 Vary: Accept-Encoding Content-Type: text/html
2024-12-09 09:44:43 UTC	1169	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 72 69 76 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="es"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Drive</title> <style> body { font-family: Arial, sans-serif;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49749	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 09:44:44 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=zSd8X9r7uagDvDt&MD=o16urGdz HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-09 09:44:45 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: f7bc2ab2-8225-4159-abde-4279c968479b MS-RequestId: 02b8734f-b381-4a5b-9c36-8b233c8c9749 MS-CV: FLogY2ZluUOIpBJ1.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 09 Dec 2024 09:44:44 GMT Connection: close Content-Length: 24490
2024-12-09 09:44:45 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-12-09 09:44:45 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49751	162.241.2.244	443	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-09 09:44:48 UTC	625	OUT	GET /favicon.ico HTTP/1.1 Host: inboxsender.gxsearch.club Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://inboxsender.gxsearch.club/redir6/warning.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-09 09:44:48 UTC	262	IN	HTTP/1.1 404 Not Found Date: Mon, 09 Dec 2024 09:44:48 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 03 Oct 2022 20:20:13 GMT Accept-Ranges: bytes Content-Length: 2361 Vary: Accept-Encoding Content-Type: text/html
2024-12-09 09:44:48 UTC	2361	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c Data Ascii: <!DOCTYPE html><html lang="pt-BR"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="format-detection" content="tel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49754	172.202.163.200	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 09:45:23 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=zSd8X9r7uagDvDt&MD=o16urGdz HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-09 09:45:24 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 4be98f4d-041f-4ef9-9212-effa13062f7b MS-RequestId: f1b11cc4-2436-4950-804c-ee3df3a07d6e MS-CV: Rf4lWTPmp0Kgwefu.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 09 Dec 2024 09:45:24 GMT Connection: close Content-Length: 30005
2024-12-09 09:45:24 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-12-09 09:45:24 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.4	49755	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 09:45:28 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 09:45:28 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 09:45:28 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 08 Dec 2024 17:57:40 GMT ETag: "0x8DD17B1CF2A0A7C" x-ms-request-id: df7ee72c-101e-0034-6bad-4996ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T094528Z-r1cf579d778pftsbhC1EWRa0gn00000002e0000000005p9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 09:45:28 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-12-09 09:45:28 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-12-09 09:45:29 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-12-09 09:45:29 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-12-09 09:45:29 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-12-09 09:45:29 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-12-09 09:45:29 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-12-09 09:45:29 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-12-09 09:45:29 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-12-09 09:45:29 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 09:45:31 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 09:45:31 UTC	494	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 09:45:31 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 3fcd35f4-e01e-0052-4b02-48d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T094531Z-r1cf579d778t5c2lhC1EWRce3w00000008ng0000000041p2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 09:45:31 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 09:45:31 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 09:45:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 09:45:32 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: c11b12be-901e-0048-4704-48b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T094532Z-r1cf579d7789trgthC1EWRkkfc00000008n0000000004gvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 09:45:32 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49765	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-09 09:45:32 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-09 09:45:32 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 09 Dec 2024 09:45:32 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 27a1a40f-f01e-0096-7d0b-4810ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241209T094532Z-r1cf579d778qlpkrhC1EWRpfc800000008s0000000001c22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-09 09:45:32 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3068, Parent PID: 2516

General

Target ID:	0
Start time:	04:44:25
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2756, Parent PID: 3068

General

Target ID:	2
Start time:	04:44:31
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2036,i,5403239008885262201,14834538258464023186,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6540, Parent PID: 2516

General

Target ID:	3
Start time:	04:44:37
Start date:	09/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://inboxsender.gxsearch.club/redir6/serial.php"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://inboxsender.gxsearch.club/redir6/download.php	Avira URL Cloud: Label: malware
Source: https://inboxsender.gxsearch.club/favicon.ico	Avira URL Cloud: Label: malware

Source: global traffic	HTTP traffic detected: GET /redir6/serial.php HTTP/1.1Host: inboxsender.gxsearch.clubConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir6/download.php HTTP/1.1Host: inboxsender.gxsearch.clubConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /redir6/warning.html HTTP/1.1Host: inboxsender.gxsearch.clubConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=zSd8X9r7uagDvDt&MD=o16urGdz HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: inboxsender.gxsearch.clubConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://inboxsender.gxsearch.club/redir6/warning.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=zSd8X9r7uagDvDt&MD=o16urGdz HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: inboxsender.gxsearch.club
Source: global traffic	DNS traffic detected: DNS query: i.pinimg.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.109.164
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.58.99
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.58.99
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200
Source: unknown	TCP traffic detected without corresponding DNS query: 172.202.163.200

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://inboxsender.gxsearch.club/redir6/serial.php

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 43

Chrome Cache Entry: 44

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Connections

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3068, Parent PID: 2516

General

Chronological Activities

Analysis Process: chrome.exePID: 2756, Parent PID: 3068

General

Chronological Activities

Analysis Process: chrome.exePID: 6540, Parent PID: 2516

General

Windows Analysis Report
https://inboxsender.gxsearch.club/redir6/serial.php